Description
Allegro Tech BigFlow <1.6 is vulnerable to Missing SSL Certificate Validation.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | bigflow | < 1.6.0 | 1.6.0 | GHSA-w6q2-48ch-fj26 |
Medium · 5.9
CVE-2023-25392
EUVD-2023-1403GHSA-w6q2-48ch-fj26PYSEC-2026-1220
Allegro Tech BigFlow vulnerable to Missing SSL Certificate Validation
Published Apr 10, 2023 · Updated Feb 11, 2025 · Assigned by mitre