Advisories for Pypi/Gerapy package

An Access Control vunerabiity exists in Gerapy v 0.9.7 via the spider parameter in project_configure function.

Gerapy is a distributed crawler management framework. A flaw was found where an authenticated user could execute arbitrary commands

Gerapy is a distributed crawler management framework. Gerapy is vulnerable to remote code execution.

The Gerapy suffers from an OS command injection vulnerability. Unsanitized input is passed to Popen, via the project_configure endpoint.