Skip to content
OpenAdvisories

Vendor

subzeroid

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 6.5

    aiograpi: Unsafe signup challenge path handling

    aiograpi is an asynchronous Instagram API for Python. aiograpi versions before 0.9.10 accepted server-supplied signup challenge paths and used them to build request URLs before validating that the paths were relative Instagram API paths. If an attacker can in…