From 923c06e2e877010ea33e15f024d36125e90fa4c1 Mon Sep 17 00:00:00 2001 From: "advisory-database[bot]" <45398580+advisory-database[bot]@users.noreply.github.com> Date: Tue, 12 Nov 2024 19:40:40 +0000 Subject: [PATCH] Publish GHSA-258h-f687-4226 --- .../2024/07/GHSA-258h-f687-4226/GHSA-258h-f687-4226.json | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/advisories/github-reviewed/2024/07/GHSA-258h-f687-4226/GHSA-258h-f687-4226.json b/advisories/github-reviewed/2024/07/GHSA-258h-f687-4226/GHSA-258h-f687-4226.json index 93b98518994..2629fe0d627 100644 --- a/advisories/github-reviewed/2024/07/GHSA-258h-f687-4226/GHSA-258h-f687-4226.json +++ b/advisories/github-reviewed/2024/07/GHSA-258h-f687-4226/GHSA-258h-f687-4226.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-258h-f687-4226", - "modified": "2024-07-31T22:03:12Z", + "modified": "2024-11-12T19:39:08Z", "published": "2024-07-31T21:04:28Z", "aliases": [ "CVE-2024-41951" ], "summary": "PheonixAppAPI has visible Encoding Maps", - "details": "### Impact\nThe issue is that the map of encoding/decoding languages are visible in code. \n\n### Patches\nThe problem was patched in 0.2.4.\n\n### Workarounds\nThe only known workaround is apply the fix to the code manually.", + "details": "### Impact\nThis is a kind of moderate issue. The impact is not big for normal users but can be for users who want to secure their code/files/etc.\n\nThe issue is that the map of encoding/decoding languages are visible in code. \n\n### Patches\nThe Problem was patched in 0.2.5, so you should try to upgrade to the 0.2.5 version.\n\n### For 0.2.5 version users\nPlease run the post_install.py file inside the Scripts folder after downloading from pip.\n\n### Workarounds\nThere is a fix to this problem but it requires modifying the code. Modifying the code can lead to more issues.\n\n### References\nThere are currently no references to this problem.\n\n### NOTE: If you get a error regarding a function like -> get_key() or something like that, please re-run the file post_install.py inside Scripts folder\n", "severity": [ { "type": "CVSS_V3", @@ -32,7 +32,7 @@ "introduced": "0" }, { - "fixed": "0.2.4" + "fixed": "0.2.5" } ] }