GHSA-r82c-j4mq-5xfw
Update bitlyshortener to >=0.5.0 to prevent generating some invalid short URLs
GHSA-r82c-j4mq-5xfw is a vulnerability with no CVSS score yet in bitlyshortener, published October 27, 2020. No source lists public exploit code. Fixed in bitlyshortener 0.5.0.
- Severity
- UnratedNo CVSS score yet
- Exploit chance
- UnscoredNo EPSS score yet
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
0.5.0bitlyshortener +1 more
Description
Impact
Due to a sudden upstream breaking change by Bitly, versions of bitlyshortener <0.5.0 can generate an invalid short URL when a vanity domain exists.
Patches
Upgrading bitlyshortener to 0.5.0 or newer will prevent the generation of any such invalid short URLs.
References
Affected packages
| Package | Affected | Fixed |
|---|---|---|
bitlyshortenerPyPI | before 0.5.0 | 0.5.0 |
bitlyshortenerPyPI | before 0.5.0, plus listed versions 0.0.30.0.40.0.50.0.60.0.7 Show 24 moreShow less0.0.80.0.90.1.10.1.20.1.30.1.40.1.50.1.60.2.00.2.10.2.20.2.30.3.00.3.10.3.20.3.30.3.40.3.50.3.60.3.70.4.00.4.10.4.20.4.3 | 0.5.0 |
What each source reports
GitHub AdvisoriesNo score
Update bitlyshortener to >=0.5.0 to prevent generating some invalid short URLs
Impact
Due to a sudden upstream breaking change by Bitly, versions of bitlyshortener <0.5.0 can generate an invalid short URL when a vanity domain exists.
Patches
Upgrading bitlyshortener to 0.5.0 or newer will prevent the generation of any such invalid short URLs.
References
- Record
GHSA-r82c-j4mq-5xfw- Weakness
- CWE-601
- Updated
- 2026-11-02
OSVNo score
Update bitlyshortener to >=0.5.0 to prevent generating some invalid short URLs
Impact
Due to a sudden upstream breaking change by Bitly, versions of bitlyshortener <0.5.0 can generate an invalid short URL when a vanity domain exists.
Patches
Upgrading bitlyshortener to 0.5.0 or newer will prevent the generation of any such invalid short URLs.
References
- Record
GHSA-r82c-j4mq-5xfw- Weakness
- CWE-601
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.