Medium · 6.1 CVE-2019-1020006 EUVD-2019-0061GHSA-94mf-xfg5-r247PYSEC-2019-24

Invenio-App vulnerable to host header injection attack

Published Jul 29, 2019 · Updated Aug 5, 2024 · Assigned by dwf

Description

invenio-app before 1.1.1 allows host header injection.

Vendor	Product	Affected	Fixed
Invenio	invenio-app	< 1.1.1	—

Ecosystem	Package	Affected	Fixed	Record
PyPI	invenio-app	< 1.0.6	1.0.6	GHSA-94mf-xfg5-r247
PyPI	invenio-app	>= 1.1.0, < 1.1.1	1.1.1	GHSA-94mf-xfg5-r247
PyPI	invenio-app	< 1.1.1	1.1.1	PYSEC-2019-24