| Package | Affected versions | Patched versions |
|---|---|---|
| cheetah | ≥ 0.9.15, ≤ 0.9.16 | |
| cheetah | = 0.9.15= 0.9.16 |
Cheetah 0.9.15 and 0.9.16 searches the /tmp directory for modules before using the paths in the PYTHONPATH variable, which allows local users to execute arbitrary code via a malicious module in /tmp/.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free