Skip to content
Patch Next
Sign inAdd to your agent

← Public intelligence

PyPI package

pheonixappapi

Open actionable advisories and recorded vendor fixes. This public package view has no inventory attached and cannot establish whether your deployment is affected. A vendor fix never resolves your finding; verify your installed version and the source guidance.

Open advisories

1 actionable advisory, newest first. Withdrawn advisories and news are excluded. Coverage is partial.

  1. Medium, CVSS 5.3PyPIAmendedPublished

    PheonixAppAPI has visible Encoding Maps

    CVE-2024-41951 · GHSA-258h-f687-4226

    Affected
    • PyPI pheonixappapi < 0.2.5
    Fixed in
    0.2.5· Vendor fix available
    Issue
    Impact This is a kind of moderate issue. The impact is not big for normal users but can be for users who want to secure their code/files/etc. The issue is that the map of encoding/decoding languages are visible in code. Patches The Problem was patched in 0.2.5, so you should try to upgrade to the 0.2.5 version. For 0.2.5 version users Please run the postinstall.py file inside the Scripts folder after downloading from pip. Workarounds There is a fix to this problem but it requires modifying the code. Modifying the code can lead to more issues. References There are currently no references to this problem. NOTE: If you get a error regarding a function like - getkey() or something like that, please re-run the file postinstall.py inside Scripts folder

    Recommended action: Upgrade to 0.2.5 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.

    Sources:osv.dev (1)github.com (2)Source checked Evidence →