GHSA-9236-8w7q-rmrv

archivy is vulnerable to Cross-Site Request Forgery (CSRF)

Source: GitHub Advisory Database (reviewed) Moderate CVE-2021-4162

Packages

Ecosystem	Package	Affected	Fixed in
PyPI	archivy	< 1.6.2	1.6.2

Details

As written in the advisory (Markdown source, shown as plain text).

archivy is vulnerable to Cross-Site Request Forgery (CSRF). There is [a fix](https://github.com/archivy/archivy/commit/796c3ae318eea183fc88c87ec5a27355b0f6a99d) available in the master branch.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2021-4162 advisory
https://github.com/archivy/archivy/commit/796c3ae318eea183fc88c87ec5a27355b0f6a99d web
https://github.com/advisories/GHSA-9236-8w7q-rmrv advisory
https://github.com/archivy/archivy web
https://github.com/archivy/archivy/releases/tag/v1.6.2 web
https://github.com/pypa/advisory-database/tree/main/vulns/archivy/PYSEC-2021-869.yaml web
https://huntr.dev/bounties/e204a768-2129-4b6f-abad-e436309c7c32 web