Package impact
PyPI / rdiffweb
| CVE | Severity | CVSS | Risk | Flags | OS | Vendor | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2025-67796 | high | 8.1 | 8.1 | 1mo ago | IKUS Rdiffweb allows an attacker with any valid or stolen access token to act as other users | |||
| CVE-2022-3290 | unknown | — | — | 4y ago | rdiffweb's unlimited username field length can lead to DoS |