Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/sickrage@8.8.7
purl pkg:pypi/sickrage@8.8.7
Next non-vulnerable version 10.0.12.dev1
Latest non-vulnerable version 2018.3.9.post1
Risk
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-grxf-8nqh-7yfp
Aliases:
CVE-2018-9160
GHSA-jrcv-3c5h-rh3q
PYSEC-2018-101
SickRage before v2018.03.09-1 includes cleartext credentials in HTTP responses.
9.3.2
Affected by 1 other vulnerability.
2018.3.9.post1
Affected by 0 other vulnerabilities.
VCID-u7hx-ewzk-37c2
Aliases:
CVE-2021-25925
GHSA-rmp7-f2vp-3rq4
PYSEC-2021-147
in SiCKRAGE, versions 4.2.0 to 10.0.11.dev1 are vulnerable to Stored Cross-Site-Scripting (XSS) due to user input not being validated properly when processed by the server. Therefore, an attacker can inject arbitrary JavaScript code inside the application, and possibly steal a user’s sensitive information.
10.0.12.dev1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-02T04:09:43.439364+00:00 Pypa Importer Affected by VCID-u7hx-ewzk-37c2 https://github.com/pypa/advisory-database/blob/main/vulns/sickrage/PYSEC-2021-147.yaml 38.6.0
2026-06-02T04:05:04.179105+00:00 Pypa Importer Affected by VCID-grxf-8nqh-7yfp https://github.com/pypa/advisory-database/blob/main/vulns/sickrage/PYSEC-2018-101.yaml 38.6.0