Skip to content
OpenAdvisories

Package · PyPI

aiograpi

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low —
    GHSA-7mw3-79jq-xc7f

    aiograpi has dependency on vulnerable orjson 3.11.4 (CVE-2025-67221)

    ## Impact aiograpi 0.6.6 / 0.7.0 / 0.7.1 declared `orjson==3.11.6` (and later `==3.11.8`) in `requirements.txt` but `setup.py` carried a hard-coded duplicate `requirements = [...]` list that was never updated and still pinned `orjson==3.11.4`. When `setuptool…

    aiograpi PyPI