pypi rply vulnerabilities

Latest pypi rply CVEs

Newest publication first

1. CVE-2014-1938 Link Following in rply

   Published 2019-11-21

   Medium·CVSS 5.5 EPSS 0.39%

   python-rply before 0.7.4 insecurely creates temporary files.

2. CVE-2014-1604 RPLY Predictable Tmpfile Names Allows Cache Spoofing

   Published 2014-01-28

   Low·CVSS 2.1 EPSS 0.35%

   The parser cache functionality in parsergenerator.py in RPLY (aka python-rply) before 0.7.1 allows local users to spoof cache data by pre-creating a temporary rply-*.json file with a predictable name.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.