oslo.utils@4.9.0 vulnerabilities

Oslo Utility library

Direct Vulnerabilities

Known vulnerabilities in the oslo.utils package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • M
Insufficiently Protected Credentials

oslo.utils is a library which provides support for common utility type functions, such as encoding, exception handling, string manipulation, and time handling.

Affected versions of this package are vulnerable to Insufficiently Protected Credentials when the password contains quotes or double quotes in the middle such as pass"word, the mask_password method will return ***"word.

How to fix Insufficiently Protected Credentials?

Upgrade oslo.utils to version 4.8.1, 4.12.1 or higher.

[,4.8.1) [4.9.0,4.12.1)