Skip to content
OpenAdvisories

Package · Debian

python-scrapy

10 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.7
    CVE-2021-41125

    HTTP authentication credential leak to target websites in scrapy

    Scrapy is a high-level web crawling and scraping framework for Python. If you use `HttpAuthMiddleware` (i.e. the `http_user` and `http_pass` spider attributes) for HTTP authentication, all requests will expose your credentials to the request target. This incl…

    scrapy scrapy scrapy python-scrapy Debian Ubuntu PyPI