Staging Environment: Content and features may be unstable or change without notice.

Advisory Package Curation

CVE-2022-3376

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-7wr6-fj4x-893v

rdiffweb allows a new password to be the same as the previous password rdiffweb prior to 2.5.0a4 allows users to set their new password to be the same as the old password during a password reset. Version 2.5.0a4 enforces a password policy in which a new password cannot be the same as the old one.

gitlab/pypi/rdiffweb/CVE-2022-3376

rdiffweb allows a new password to be the same as the previous password rdiffweb prior to 2.5.0a4 allows users to set their new password to be the same as the old password during a password reset. Version 2.5.0a4 enforces a password policy in which a new password cannot be the same as the old one.

pypa/rdiffweb/PYSEC-2022-43157

Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.5.0a4.

pysec/PYSEC-2022-43157

Weak Password Requirements in GitHub repository ikus060/rdiffweb prior to 2.5.0a4.