GMS-2022-2891: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in pycares

July 5, 2022

pycares versions < 4.2.0 are affected by CVE-2021-3672 which affects the underlying c-ares library.

References

github.com/advisories/GHSA-c58j-88f5-h53f
github.com/saghul/pycares/security/advisories/GHSA-c58j-88f5-h53f

Detect and mitigate GMS-2022-2891 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →