Gerapy may cause remote code execution

HIGH 8.8CVE-2021-43857 · GHSA-9w7f-m4j4-j3xw · PYSEC-2021-867 · Published 27/12/2021 · updated 17/06/2026

Package	Affected versions	Patched versions
gerapy PyPI	`< 0.9.8`	`0.9.8`
gerapy gerapy	`< 0.9.8`	`0.9.8`

Description

Impact

project_configure function exist remote code execute in Gerapy < 0.9.8

Patches

Patched in version 0.9.8, please install with:

pip3 install -U gerapy

NVD description

Gerapy is a distributed crawler management framework. Gerapy prior to version 0.9.8 is vulnerable to remote code execution, and this issue is patched in version 0.9.8.

References

Gerapy/Gerapy security advisory · WEB
nvd.nist.gov/vuln/detail/CVE-2021-43857 · ADVISORY
Gerapy/Gerapy · WEB
Gerapy/Gerapy commit 49bcb19 · WEB
Gerapy/Gerapy · PACKAGE
pypa/advisory-database · WEB
pypa/advisory-database · WEB
packetstormsecurity.com/files/165459/Gerapy-0.9.7-Remote-Code-Execution.html · WEB

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free