Skip to content
OpenAdvisories
High DLA-2950-1 2 CVEs

python-scrapy - security update

Published Mar 16, 2022 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 9 python-scrapy 1.0.3-2+deb9u1

Vulnerabilities 2

  • High 8.8
    CVE-2022-0577

    Exposure of Sensitive Information to an Unauthorized Actor in scrapy/scrapy

    Exposure of Sensitive Information to an Unauthorized Actor in GitHub repository scrapy/scrapy prior to 2.6.1.

    scrapy scrapy/scrapy scrapy python-scrapy Debian Ubuntu PyPI
  • Medium 5.7
    CVE-2021-41125

    HTTP authentication credential leak to target websites in scrapy

    Scrapy is a high-level web crawling and scraping framework for Python. If you use `HttpAuthMiddleware` (i.e. the `http_user` and `http_pass` spider attributes) for HTTP authentication, all requests will expose your credentials to the request target. This incl…

    scrapy scrapy scrapy python-scrapy Debian Ubuntu PyPI