HIGH7.5
An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli.
CVSS 3.xHIGH 7.5
CVSS:3.x/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HReferences
- https://github.com/pypa/wheel/blob/main/src/wheel/wheelfile.py#L18
- https://pypi.org/project/wheel/
- https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages/
- https://github.com/pypa/wheel/blob/main/src/wheel/wheelfile.py#L18
- https://pypi.org/project/wheel/
- https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages/