PVE-2022-50145

Advisory

Alvaro 1.1.1 replaced Pickle with JSON to prevent code injection vulnerabilities. https:…

[This advisory has been limited. Please create a free account to view the full advisory.]

Affected package

Affected versions

Fixed versions

Vulnerability changelog

PIckle has been removed due to serious security concerns and replaced with JSON. This mea…

[This text has been limited. Please create a free account to view the full text.]

Resources

• https://pypi.org/project/alvaro
• https://pyup.io/changelogs/alvaro/