pytest-dev/py

pytest-dev/py

Releases61

Frequency2 months 2 weeks

Last Release over 4 years ago

Stars73

Python development support library (note: maintenance only)

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2022-42969 ↗	Oct 16, 2022Sunday, 16 October 2022, 06:15	5.3 MEDIUM	—
The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data, because the InfoSvnCommand argument is mishandled. Note: This has been disputed by multiple third parties as not being reproduceable and they argue this is not a valid vulnerability.
CVE-2020-29651 ↗	Dec 9, 2020Wednesday, 9 December 2020, 07:15	7.5 HIGH	5 MEDIUM
A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying malicious input to the blame functionality.