| Package | Affected versions | Patched versions |
|---|---|---|
| s3ql | = 1.17= 1.18≤ 1.18.1 |
S3QL 1.18.1 and earlier uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object in (1) common.py or (2) local.py in backends/.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free