PyPi: Polyaxon

CVE-2019-8331

Transitive

Safety vulnerability ID: 49097

This vulnerability was reviewed by experts

The information on this page was manually curated by our Cybersecurity Intelligence Team.

Created at Feb 20, 2019 Updated at Jan 03, 2025
Scan your Python projects for vulnerabilities →

Advisory

Polyaxon 0.4.1 updates its NPM dependency 'bootstrap' to v3.4.1 to include a security fix.

Affected package

polyaxon

Latest version: 2.6.0

Command Line Interface (CLI) and client to interact with Polyaxon API.

Affected versions

Fixed versions

Vulnerability changelog

* Add UI for experiment jobs (overview, logs, statuses).
* Improve logging and logs archiving of distributed experiments.
* Improve the header's tooltip behaviour.
* Improve experiment UI by reducing number of tabs.
* Improve a couple of queries resulting in large memory consumption.
* Improve CI sync function to handle:
* Updating access tokens.
* Force push mechanism.
* Fetching of new branches
* Fix build branch and commit handling, remove `ref` and add a more explicit fields: `commit` and `branch`.
* Fix regression in distributed experiments.
* Fix an issue with experiment job's statuses creation dates.
* Fix readme editor styles.
* Fix charts UI adjustment.
* Fix issue scheduling notebook on TPU.
* Fix some issues related to corrupted UI state resulting in UI crashing.
* Update dependencies exposing security vulnerabilities.
* Update several libraries to newer and stable versions.

Resources

Use this package?

Scan your Python project for dependency vulnerabilities in two minutes

Scan your application

Severity Details

CVSS Base Score

MEDIUM 6.1

CVSS v3 Details

MEDIUM 6.1
Attack Vector (AV)
NETWORK
Attack Complexity (AC)
LOW
Privileges Required (PR)
NONE
User Interaction (UI)
REQUIRED
Scope (S)
CHANGED
Confidentiality Impact (C)
LOW
Integrity Impact (I)
LOW
Availability Availability (A)
NONE

CVSS v2 Details

MEDIUM 4.3
Access Vector (AV)
NETWORK
Access Complexity (AC)
MEDIUM
Authentication (Au)
NONE
Confidentiality Impact (C)
NONE
Integrity Impact (I)
PARTIAL
Availability Impact (A)
NONE