Skip to content
OpenAdvisories

Package · PyPI

hyper-bump-it

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 5.5
    CVE-2023-41057

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in hyper-bump-it

    hyper-bump-it is a command line tool for updating the version in project files.`hyper-bump-it` reads a file glob pattern from the configuration file. That is combined with the project root directory to construct a full glob pattern that is used to find files …

    plannigan hyper-bump-it hyper-bump-it PyPI