Workflow

PyPi: Repoze-Who

PVE-2017-47624

Safety vulnerability ID: 47624

This vulnerability was reviewed by experts

The information on this page was manually curated by our Cybersecurity Intelligence Team.

Created at Apr 26, 2017 Updated at Dec 09, 2022

Advisory

Repoze.who 2.0b1 includes a fix to prevent timing-based attacks against htpasswd. https:…

[This advisory has been limited. Please create a free account to view the full advisory.]

Affected package

repoze-who

Latest version: 2.3

repoze.who is an identification and authentication framework for WSGI.

Affected versions

Fixed versions

Vulnerability changelog

This vulnerability has no description

Resources