anyio

Built from the advisories that name this package: its registry metadata (versions, licence, dependencies) has not been fetched by this service yet.

At a glance

Ecosystem
PyPI
Vulnerability status
6 advisory(ies) without a verdict

Advisories (6)

AdvisoryAffected versionsLatest version
GHSA-3w57-8xmc-8v26
AnyIO run_process/open_process ignores extra_groups and can retain parent supplementary groups
4.14.0 – < 4.14.2Undetermined
GHSA-5p39-cfhj-2xmp
AnyIO process-pool workers can block indefinitely on undrained stderr
< 4.14.2Undetermined
GHSA-82r6-8w77-94w6
AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing
< 4.14.2Undetermined
PYSEC-2026-4023
AnyIO run_process/open_process ignores extra_groups and can retain parent supplementary groups
4.14.0 – < 4.14.2Undetermined
PYSEC-2026-4024
AnyIO process-pool workers can block indefinitely on undrained stderr
< 4.14.2Undetermined
PYSEC-2026-4025
AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing
< 4.14.2Undetermined

Sources

SourceLicence