CVE-2024-41951

描述

### Impact This is a kind of moderate issue. The impact is not big for normal users but can be for users who want to secure their code/files/etc. The issue is that the map of encoding/decoding languages are visible in code. ### Patches The Problem was patched in 0.2.5, so you should try to upgrade to the 0.2.5 version. ### For 0.2.5 version users Please run the post_install.py file inside the Scripts folder after downloading from pip. ### Workarounds There is a fix to this problem but it requires modifying the code. Modifying the code can lead to more issues. ### References There are currently no references to this problem. ### NOTE: If you get a error regarding a function like -> get_key() or something like that, please re-run the file post_install.py inside Scripts folder

如何修補 CVE-2024-41951

要修補 CVE-2024-41951,請將受影響套件升級到下列已修補版本。

• —升級至 0.2.5 或更新版本

CVE-2024-41951 正在被利用嗎?

低 — EPSS 為 0.1%,目前沒有觀察到大規模利用活動。

受影響套件(1)

• from 0, < 0.2.5

CVSS 分數

參考連結(4)

• ADVISORYnvd.nist.gov/vuln/detail/CVE-2024-41951
• PATCHgithub.com/AkshuDev/PheonixAppAPI
• WEBgithub.com/AkshuDev/PheonixAppAPI/commit/0937419e323f5ea9013d43dc1b82fef9d7e05044
• WEBgithub.com/AkshuDev/PheonixAppAPI/security/advisories/GHSA-258h-f687-4226