Maintainer Mode
Sign in with GitHub

python3Packages.scrapy

Sign in to subscribe
Health
Risk
risk 25 medium
  • +25 1 open advisory
Version
2.17.0 no newer release known to repology
Channels
master 2.17.0 · nixos-unstable 2.17.0 · nixos-26.05 2.14.1 master is ahead of nixos-26.05
Advisories
PYSEC-2017-83 high 7.5 Scrapy 1.4 allows remote attackers to cause a denial of service (memory consumption) via large files because arbitrarily many files are read into memory, which is especially problematic if the files are then individually written in a separate thread to a slow storage resource, as demonstrated by int (OSV, for this version)
CVE-2017-14158
Packaging
meta complete
Description
High-level web crawling and web scraping framework
Long description
Scrapy is a fast high-level web crawling and web scraping framework, used to crawl websites and extract structured data from their pages. It can be used for a wide range of purposes, from data mining to monitoring and automated testing.
Platforms
31 platforms: Linux, Darwin
Main program
scrapy
Source provenance
not set: built from source
Outputs
out dist
Status
not broken, not insecure, free
Maintainers
Version bumps 0all open bumps
None open.
Pull requests 1
Issues 1
Scrapy: Arbitrary Module Import via Referrer-Policy Header in RefererMiddleware 1.severity: security
#570885 by nixpkgs-security-tracker · opened 10d ago · 0 comments