CyberSecBulletin

Pyup vulnerabilities

We track 1 vulnerability in Pyup products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 6, 2022.

1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score

Latest Pyup vulnerabilities

  • 7.5 High severity

    dparse: Inefficient Regular Expression Complexity

    CVE-2022-39280PyupioEPSS 1.34%

    dparse is a parser for Python dependency files. dparse in versions before 0.5.2 contain a regular expression that is vulnerable to a Regular Expression Denial of Service. All the users parsing index server URLs with dparse are impacted by this vulnerability. A