PT-2026-32132 · Pypi · Poetry-Plugin-Tweak-Dependencies-Version

Publicado 2026-04-01 · Atualizado 2026-04-01

OSV

CVSS v3.1

4.4

Média

Vetor base

AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N

Pin vulnerable version of requests library

Correção

Enumeração de Fraquezas

CWE-377

Identificadores relacionados

GHSA-5QVP-PR9F-2G2V

Produtos afetados

Poetry-Plugin-Tweak-Dependencies-Version

Referências · 6

• https://github.com/psf/requests/security/advisories/GHSA-gc5v-m9x4-r6x2 · Nota
• https://github.com/sbrunner/poetry-plugin-tweak-dependencies-version/commit/54b5784d89f36cd413a8bc5032ab0a96438dcae3 · Nota
• https://github.com/sbrunner/poetry-plugin-tweak-dependencies-version/security/advisories/GHSA-5qvp-pr9f-2g2v · Nota
• https://github.com/sbrunner/poetry-plugin-tweak-dependencies-version · Nota
• https://github.com/sbrunner/poetry-plugin-tweak-dependencies-version/releases/tag/1.5.6 · Nota
• https://osv.dev/vulnerability/GHSA-5qvp-pr9f-2g2v · Aviso do Fabricante