PT-2025-8757 · Pypi · Colabrun

Published 2025-02-26 · Updated 2025-02-26

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions colabrun (affected versions not specified)

Description The colabrun package is a Python library that exfiltrates user cookies to a hardcoded IP address. It was found to exfiltrate user data to a hardcoded server, which could be used for malicious purposes.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

PYSEC-2025-6

Affected Products

Colabrun

References · 3

• https://osv.dev/vulnerability/PYSEC-2025-6 · Vendor Advisory
• https://inspector.pypi.io/project/colabrun/0.3/packages/89/28/3a932225fc02f6f6dc39d6232e3937011e11294551a985257c949eb4a7d3/colabrun-0.3.tar.gz/colabrun-0.3/colabrun/common/config.py#line.4 · Note
• https://inspector.pypi.io/project/colabrun/0.3/packages/89/28/3a932225fc02f6f6dc39d6232e3937011e11294551a985257c949eb4a7d3/colabrun-0.3.tar.gz/colabrun-0.3/colabrun/common/utils.py#line.29 · Note