Description
furlongm openvpn-monitor through 1.1.3 allows %0a command injection via the OpenVPN management interface socket. This can shut down the server via signal%20SIGTERM.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | openvpn-monitor | <= 1.1.3 | — | GHSA-4258-vcjw-wwxx |
| PyPI | openvpn-monitor | all versions | — | PYSEC-2021-353 |