Workflow

PyPi: Actinis-Django-Storages

PVE-2022-48499

Safety vulnerability ID: 48499

This vulnerability was reviewed by experts

The information on this page was manually curated by our Cybersecurity Intelligence Team.

Created at May 06, 2022 Updated at Dec 09, 2022

Advisory

Actinis-django-storages 1.7 fixes an insecure default ACL of 'public-read' in the 'S3Boto…

[This advisory has been limited. Please create a free account to view the full advisory.]

Affected package

actinis-django-storages

Latest version: 1.12.6

Same as django-storages, but with IBM COS support

Affected versions

Fixed versions

Vulnerability changelog

**************** **Security** - The ``S3BotoStorage`` and ``S3Boto3Storage`` backends h…

[This text has been limited. Please create a free account to view the full text.]

Resources