Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/buildbot@0.7.12
purl pkg:pypi/buildbot@0.7.12
Next non-vulnerable version 1.8.2
Latest non-vulnerable version 2.3.1
Risk score
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
PYSEC-2019-76

Buildbot before 1.8.2 and 2.x before 2.3.1 accepts a user-submitted authorization token from OAuth and uses it to authenticate a …
1.8.2
Not vulnerable
2.3.1
Not vulnerable
PYSEC-2019-6
Aliases:
CVE-2019-12300
GHSA-g86p-hgx5-2pfh
Buildbot before 1.8.2 and 2.x before 2.3.1 accepts a user-submitted authorization token from OAuth and uses it to authenticate a …
1.8.2
Not vulnerable
2.3.1
Not vulnerable
Vulnerabilities fixed by this package (2)

Advisory Summary Aliases
PYSEC-2009-2
Multiple cross-site scripting (XSS) vulnerabilities in Buildbot 0.7.6 through 0.7.11p2 allow remote attackers to inject arbitrary web script or HTML … CVE-2009-2967
GHSA-mj3x-wprp-mvj9
PYSEC-2009-1
Cross-site scripting (XSS) vulnerability in the waterfall web status view (status/web/waterfall.py) in Buildbot 0.7.6 through 0.7.11p1 allows remote attackers to … CVE-2009-2959
GHSA-jqqh-999x-w26w