VulnerableCode Package Details - pkg:pypi/roundup@0.6.4

Staging Environment: Content and features may be unstable or change without notice.

Search for packages

Package details: pkg:pypi/roundup@0.6.4

Essentials
History (1)

purl	pkg:pypi/roundup@0.6.4
Tags	Ghost

Next non-vulnerable version	2.5.0
Latest non-vulnerable version	2.5.0
Risk	10.0

Vulnerabilities affecting this package (1)

Vulnerability	Summary	Fixed by
VCID-b252-jrdw-6bcm Aliases: CVE-2004-1444 GHSA-q7mf-hp9m-cx6f	Roundup Directory traversal vulnerability Directory traversal vulnerability in Roundup 0.6.4 and earlier allows remote attackers to view arbitrary files via `..` (dot dot) sequences in an `@@` command in an HTTP GET request.	0.7.3 Affected by 13 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}

Vulnerabilities fixed by this package (0)

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-06-05T21:22:31.402802+00:00	GHSA Importer	Affected by	VCID-b252-jrdw-6bcm	https://github.com/advisories/GHSA-q7mf-hp9m-cx6f	38.6.0