scrapy vulnerabilities (PyPI)
14 vulnerabilities.
-
scrapyPyPI Scrapy: S3DownloadHandler sends signed S3 requests over plaintext HTTP by default 7.4 High -
scrapyPyPI Scrapy: Arbitrary Module Import via Referrer-Policy Header in RefererMiddleware 7.5 High -
scrapyPyPI Brotli decompression bomb DoS in scrapy/scrapy 7.5 High -
scrapyPyPI Scrapy allows redirect following in protocols other than HTTP 6.5 Medium -
scrapyPyPI Scrapy's redirects ignoring scheme-specific proxy settings 4.3 Medium -
scrapyPyPI Authorization Header Leakage in scrapy/scrapy on Scheme Change Redirects 7.5 High -
scrapyPyPI XML External Entity (XXE) Vulnerability in scrapy/scrapy 7.5 High -
scrapyPyPI Authorization Header Leak During Cross-Domain Redirect in scrapy/scrapy 7.5 High -
scrapyPyPI ReDoS Vulnerability in scrapy/scrapy's XMLFeedSpider 7.5 High -
scrapyPyPI Scrapy before 2.6.2 and 1.8.3 vulnerable to one proxy sending credentials to another No score -
scrapyPyPI Scrapy cookie-setting is not restricted based on the public suffix list No score -
scrapyPyPI Exposure of Sensitive Information to an Unauthorized Actor in scrapy/scrapy 8.8 High -
scrapyPyPI HTTP authentication credential leak to target websites in scrapy 5.7 Medium -
scrapyPyPI Scrapy denial of service vulnerability 7.5 High