Upgrading wheel 0.47 to 0.48
Safe0.47.0 → 0.48.0Security1New1Fixed2
SecurityFixed wheel convert writing the converted wheel outside the destination directory when the input archive contained a maliciously crafted project name or version with path separators (arbitrary file…GHSA-vgq5-9859-3mmw ↗
SafeUpgrade verdict
A security fix. Nothing to change in your code.
In plain terms
- Fixed wheel convert writing the converted wheel outside the destination directory when the input archive contained a maliciously crafted project name or version with path separators (arbitrary file…
Must act 1 item needs code or config changes
What you must change
Security1
Fixed wheel convert writing the converted wheel outside the destination directory when the input archive contained a maliciously crafted project name or version with path separators (arbitrary file…