baidu-security / openrasp-iast

IAST 灰盒扫描工具
Apache License 2.0
439 stars 84 forks source link

psutil5.6.3存在CVE漏洞 #25

Closed V5h1n3 closed 3 years ago

V5h1n3 commented 3 years ago

requirements中psutil使用的是5.6.3,其中存在CVE-2019-18874,在5.6.6版本修复,建议升级,参考链接:https://nvd.nist.gov/vuln/detail/CVE-2019-18874

yinhuochong commented 3 years ago

已更新 https://github.com/baidu-security/openrasp-iast/commit/9a67bb550ec414d619571a7662d8ba2493971fb6