Skip to content
OpenAdvisories

Package · PyPI

gerapy

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.8
    CVE-2021-32849 Public exploit

    Arbitrary command execution in Gerapy

    Gerapy is a distributed crawler management framework. Prior to version 0.9.9, an authenticated user could execute arbitrary commands. This issue is fixed in version 0.9.9. There are no known workarounds.

    Gerapy Gerapy gerapy PyPI
  • High 8.1
    CVE-2020-7698

    Command Injection

    This affects the package Gerapy from 0 and before 0.9.3. The input being passed to Popen, via the project_configure endpoint, isn’t being sanitized.

    gerapy PyPI