PT-2022-28276 · Bitly · Bitlyshortener

Published 2022-01-21 · Updated 2022-01-21

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions bitlyshortener versions prior to 0.6.0

Description The issue is caused by an upstream breaking change by Bitly, resulting in the generation of invalid short URLs. All users are affected.

Recommendations For versions prior to 0.6.0, upgrade bitlyshortener to 0.6.0 or newer to prevent the generation of invalid short URLs. As a temporary workaround, consider replacing "https://j.mp/" with "https://bit.ly/" in each generated short URL until the update is applied.

Related Identifiers

GHSA-RCRV-228C-GPRJ

Affected Products

Bitlyshortener

References · 5

• https://osv.dev/vulnerability/GHSA-rcrv-228c-gprj · Vendor Advisory
• https://github.com/impredicative/bitlyshortener · Note
• https://github.com/impredicative/bitlyshortener/security/advisories/GHSA-rcrv-228c-gprj · Note
• https://github.com/impredicative/bitlyshortener/commit/b307d70bedf745305fa0dd3c5c600d8cb88d09b5 · Note
• https://github.com/impredicative/bitlyshortener/releases/tag/0.6.0 · Note