PVE-2023-58815

Advisory

Spiffworkflow 1.1.7 drops 'pickle' in the JSON serializer to avoid potential code executi…

[This advisory has been limited. Please create a free account to view the full advisory.]

Affected package

Affected versions

Fixed versions

Vulnerability changelog

What's Changed This push covers a major overhaul of our JSON serializer, which previously…

[This text has been limited. Please create a free account to view the full text.]

Resources

• https://pypi.org/project/spiffworkflow
• https://pyup.io/changelogs/spiffworkflow/