| Package | Affected versions | Patched versions |
|---|---|---|
| pypiserver | < 1.2.6 | 1.2.6 |
| pypiserver | ≤ 1.2.5 |
CRLF Injection in pypiserver 1.2.5 and below allows attackers to set arbitrary HTTP headers and possibly conduct XSS attacks via a %0d%0a in a URI.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free