Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/buildbot@0.9.15
purl pkg:pypi/buildbot@0.9.15
Next non-vulnerable version 1.8.2
Latest non-vulnerable version 2.3.1
Risk score
Vulnerabilities affecting this package (4)
Advisory Summary Fixed in package version
PYSEC-2019-76

Buildbot before 1.8.2 and 2.x before 2.3.1 accepts a user-submitted authorization token from OAuth and uses it to authenticate a …
1.8.2
Not vulnerable
2.3.1
Not vulnerable
PYSEC-2019-77

www/resource.py in Buildbot before 1.8.1 allows CRLF injection in the Location header of /auth/login and /auth/logout via the redirect parameter. …
1.8.1
Vulnerable
PYSEC-2019-6
Aliases:
CVE-2019-12300
GHSA-g86p-hgx5-2pfh
Buildbot before 1.8.2 and 2.x before 2.3.1 accepts a user-submitted authorization token from OAuth and uses it to authenticate a …
1.8.2
Not vulnerable
2.3.1
Not vulnerable
PYSEC-2019-7
Aliases:
CVE-2019-7313
GHSA-66x7-2r56-fj77
www/resource.py in Buildbot before 1.8.1 allows CRLF injection in the Location header of /auth/login and /auth/logout via the redirect parameter. …
1.8.1
Vulnerable
This package is not known to fix any advisories.