Publish GHSA-258h-f687-4226

This commit is contained in:
advisory-database[bot]
2024-11-12 19:40:40 +00:00
parent 6a8bfd1ba3
commit 923c06e2e8
@@ -1,13 +1,13 @@
{
"schema_version": "1.4.0",
"id": "GHSA-258h-f687-4226",
"modified": "2024-07-31T22:03:12Z",
"modified": "2024-11-12T19:39:08Z",
"published": "2024-07-31T21:04:28Z",
"aliases": [
"CVE-2024-41951"
],
"summary": "PheonixAppAPI has visible Encoding Maps",
"details": "### Impact\nThe issue is that the map of encoding/decoding languages are visible in code. \n\n### Patches\nThe problem was patched in 0.2.4.\n\n### Workarounds\nThe only known workaround is apply the fix to the code manually.",
"details": "### Impact\nThis is a kind of moderate issue. The impact is not big for normal users but can be for users who want to secure their code/files/etc.\n\nThe issue is that the map of encoding/decoding languages are visible in code. \n\n### Patches\nThe Problem was patched in 0.2.5, so you should try to upgrade to the 0.2.5 version.\n\n### For 0.2.5 version users\nPlease run the post_install.py file inside the Scripts folder after downloading from pip.\n\n### Workarounds\nThere is a fix to this problem but it requires modifying the code. Modifying the code can lead to more issues.\n\n### References\nThere are currently no references to this problem.\n\n### NOTE: If you get a error regarding a function like -> get_key() or something like that, please re-run the file post_install.py inside Scripts folder\n",
"severity": [
{
"type": "CVSS_V3",
@@ -32,7 +32,7 @@
"introduced": "0"
},
{
"fixed": "0.2.4"
"fixed": "0.2.5"
}
]
}