| Name | TEMP-0000000-319406 |
| Description | GHSA-q7wc-mr9r-gcjh: Link extractors and SitemapSpider follow file://, ftp:// and s3:// URLs from crawled content |
| Source | Automatically generated temporary name. Not for external reference. |
Vulnerable and fixed packages
The table below lists information on source packages.
| Source Package | Release | Version | Status |
|---|
| python-scrapy (PTS) | bookworm | 2.8.0-2 | vulnerable |
| trixie | 2.12.0-2 | vulnerable |
| forky | 2.19.0-2 | vulnerable |
| sid | 2.19.0-3 | vulnerable |
The information below is based on the following data on fixed versions.
| Package | Type | Release | Fixed Version | Urgency | Origin | Debian Bugs |
|---|
| python-scrapy | source | (unstable) | (unfixed) | | | |
Notes
https://github.com/scrapy/scrapy/security/advisories/GHSA-q7wc-mr9r-gcjh
Fixed by: https://github.com/scrapy/scrapy/commit/2b30fee435639c6194998219f97e7c00e22a49fa (2.20.0)