| Package | Affected versions | Patched versions |
|---|---|---|
| recurly | ≥ 2.0, < 2.0.5≥ 2.1, < 2.1.16≥ 2.1.0, < 2.1.16≥ 2.2, < 2.2.22≥ 2.2.0, < 2.2.22≥ 2.3, < 2.3.1≥ 2.3.0, < 2.3.1≥ 2.4, < 2.4.5≥ 2.4.0, < 2.4.5≥ 2.5, < 2.5.1≥ 2.5.0, < 2.5.1≥ 2.6, < 2.6.2≥ 2.6.0, < 2.6.2< 2.0.5 | 2.0.52.1.162.2.222.3.12.4.52.5.12.6.2 |
| recurly client python | = 2.3.0= 2.5.0= 2.6.0= 2.6.1≥ 2.0.0, ≤ 2.0.4≥ 2.1.0, ≤ 2.1.15≥ 2.2.0, ≤ 2.2.21≥ 2.4.0, ≤ 2.4.4 |
The Recurly Client Python Library before 2.0.5, 2.1.16, 2.2.22, 2.3.1, 2.4.5, 2.5.1, 2.6.2 is vulnerable to a Server-Side Request Forgery vulnerability in the Resource.get method that could result in compromise of API keys or other critical resources.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free