PyPi: Coldsweat

CVE-2018-18074

Transitive

Safety vulnerability ID: 59432

This vulnerability was reviewed by experts

The information on this page was manually curated by our Cybersecurity Intelligence Team.

Created at Oct 09, 2018 Updated at Dec 21, 2023
Scan your Python projects for vulnerabilities →

Advisory

Coldsweat 0.10.0 updates its dependency 'requests' to version '2.20.1' to include a security fix.
https://github.com/passiomatic/coldsweat/commit/646edf0ef75cf62c7ba009a7ce62b4b8ffae26c3

Affected package

coldsweat

Latest version: 0.10.2

Web RSS aggregator and reader compatible with the Fever API

Affected versions

Fixed versions

Vulnerability changelog

🎉 A new version after almost 5 years!

This version is a nearly complete rewrite of the old Python 2 codebase, using Python 3 and the Flask web framework. I have to publicly express my gratitude to [Oz Tiram](https://github.com/oz123) for the original PR which started the Python 3 port years ago.

This version focuses on streamline the feed fetcher, fix security issues, and improve testing, while the next one will revamp the UI. Coldsweat now uses the trusty Flask web framework and latest version of the lovely Peewee ORM which supports Sqlite, MySQL, and PostgreSQL databases.

Coldsweat is now available as a Python wheel, so it can be installed from [PyPI](https://pypi.org/project/coldsweat/) like any other package via `pip` or similar utilities.

I hope you will enjoy this new release!

Resources

Use this package?

Scan your Python project for dependency vulnerabilities in two minutes

Scan your application

Severity Details

CVSS Base Score

HIGH 7.5

CVSS v3 Details

HIGH 7.5
Attack Vector (AV)
NETWORK
Attack Complexity (AC)
LOW
Privileges Required (PR)
NONE
User Interaction (UI)
NONE
Scope (S)
UNCHANGED
Confidentiality Impact (C)
HIGH
Integrity Impact (I)
NONE
Availability Availability (A)
NONE

CVSS v2 Details

MEDIUM 5.0
Access Vector (AV)
NETWORK
Access Complexity (AC)
LOW
Authentication (Au)
NONE
Confidentiality Impact (C)
PARTIAL
Integrity Impact (I)
NONE
Availability Impact (A)
NONE