PVE-2021-26042

Advisory

pylons before 0.9.6.1 allows to access private controller methods to be accessed from the…

[This advisory has been limited. Please create a free account to view the full advisory.]

Affected package

Affected versions

Fixed versions

Vulnerability changelog

* Fixed validate decorator to resume pre-0.9.6 behavior of only validating POST request…

[This text has been limited. Please create a free account to view the full text.]

Resources

• https://pypi.org/project/pylons
• https://pyup.io/changelogs/pylons/