bbangert / beaker

WSGI middleware for sessions and caching
https://beaker.readthedocs.org/
Other
517 stars 147 forks source link

Deserialization of Untrusted Data #224

Open camilla007 opened 1 year ago

camilla007 commented 1 year ago

Dependabot flags <= 1.11.0 as having the following security risk:

The Beaker library through 1.11.0 for Python is affected by the deserialization of untrusted data, which could lead to arbitrary code execution.

With weakness: https://cwe.mitre.org/data/definitions/502.html

I use this as a dependency of Turbogears2 and need this resolved in order to continue using that framework.