Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/octoprint@1.2.14
purl pkg:pypi/octoprint@1.2.14
Tags Ghost
Next non-vulnerable version 1.11.8
Latest non-vulnerable version 2.0.0rc3
Risk score 2.4
Vulnerabilities affecting this package (7)
Advisory Summary Fixed in package version
PYSEC-2022-282
Aliases:
CVE-2022-2888
GHSA-937f-qh3w-6g87
If an attacker comes into the possession of a victim's OctoPrint session cookie through whatever means, the attacker can use …
1.8.3
Vulnerable
PYSEC-2022-283
Aliases:
CVE-2022-3068
GHSA-2p75-q37p-f852
Improper Privilege Management in GitHub repository octoprint/octoprint prior to 1.8.3.
1.8.3
Vulnerable
PYSEC-2022-286
Aliases:
CVE-2022-2872
GHSA-49wm-4fp6-h59c
Unrestricted Upload of File with Dangerous Type in GitHub repository octoprint/octoprint prior to 1.8.3.
1.8.3
Vulnerable
PYSEC-2022-42975
Aliases:
CVE-2022-3607
GHSA-rj5f-vm79-5j84
Failure to Sanitize Special Elements into a Different Plane (Special Element Injection) in GitHub repository octoprint/octoprint prior to 1.8.3.
1.8.3
Vulnerable
PYSEC-2022-43142
Aliases:
CVE-2022-2930
GHSA-39gf-864w-pxw4
Unverified Password Change in GitHub repository octoprint/octoprint prior to 1.8.3.
1.8.3
Vulnerable
PYSEC-2024-179
Aliases:
CVE-2024-28237
GHSA-x7mf-wrh9-r76c
OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.9.3 contain a vulnerability …
1.10.0
Vulnerable
PYSEC-2024-237
Aliases:
CVE-2024-32977
GHSA-2vjq-hg5w-5gm7
OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.10.0 contain a vulnerability …
1.10.1
Vulnerable
This package is not known to fix any advisories.