Skip to content

Latest commit

 

History

History
4 lines (4 loc) · 299 Bytes

2021-03-24-14-16-56.bpo-42988.P2aNco.rst

File metadata and controls

4 lines (4 loc) · 299 Bytes

CVE-2021-3426: Remove the getfile feature of the pydoc module which could be abused to read arbitrary files on the disk (directory traversal vulnerability). Moreover, even source code of Python modules can contain sensitive data like passwords. Vulnerability reported by David Schwörer.