Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/beaker@0.9.5
purl pkg:pypi/beaker@0.9.5
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 3.1
Vulnerabilities affecting this package (4)
Advisory Summary Fixed in package version
GHSA-39vm-p9mr-4r27
Aliases:
CVE-2012-3458
Beaker Sensitive Information Disclosure vulnerability Beaker before 1.6.4, when using PyCrypto to encrypt sessions, uses AES in ECB cipher mode, …
1.6.4
Vulnerable
PYSEC-2020-216
Aliases:
CVE-2013-7489
GHSA-3cwm-7jmm-774w
The Beaker library through 1.11.0 for Python is affected by deserialization of untrusted data, which could lead to arbitrary code … There are no reported fixed by versions.
PYSEC-2012-1
Aliases:
CVE-2012-3458
GHSA-39vm-p9mr-4r27
Beaker before 1.6.4, when using PyCrypto to encrypt sessions, uses AES in ECB cipher mode, which might allow remote attackers …
1.6.5.post1
Vulnerable
PYSEC-2020-216
Aliases:
CVE-2013-7489
GHSA-3cwm-7jmm-774w
The Beaker library through 1.11.0 for Python is affected by deserialization of untrusted data, which could lead to arbitrary code … There are no reported fixed by versions.
This package is not known to fix any advisories.