Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/buildbot@1.8.1
purl pkg:pypi/buildbot@1.8.1
Next non-vulnerable version 1.8.2
Latest non-vulnerable version 2.3.1
Risk score
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
PYSEC-2019-76

Buildbot before 1.8.2 and 2.x before 2.3.1 accepts a user-submitted authorization token from OAuth and uses it to authenticate a …
1.8.2
Not vulnerable
2.3.1
Not vulnerable
PYSEC-2019-6
Aliases:
CVE-2019-12300
GHSA-g86p-hgx5-2pfh
Buildbot before 1.8.2 and 2.x before 2.3.1 accepts a user-submitted authorization token from OAuth and uses it to authenticate a …
1.8.2
Not vulnerable
2.3.1
Not vulnerable
Vulnerabilities fixed by this package (3)

Advisory Summary Aliases
PYSEC-2019-77
www/resource.py in Buildbot before 1.8.1 allows CRLF injection in the Location header of /auth/login and /auth/logout via the redirect parameter. …
PYSEC-2019-7
www/resource.py in Buildbot before 1.8.1 allows CRLF injection in the Location header of /auth/login and /auth/logout via the redirect parameter. … CVE-2019-7313
GHSA-66x7-2r56-fj77
GHSA-66x7-2r56-fj77
Buildbot CRLF Injection `www/resource.py` in Buildbot before 1.8.1 allows CRLF injection in the Location header of `/auth/login` and `/auth/logout` via … CVE-2019-7313