python3Packages.scrapy
scrapy 2.17.0 · pkgs/development/python-modules/scrapy/default.nix
Health
Risk
risk 25 medium
- +25 1 open advisory
Version
2.17.0 no newer release known to repology
Channels
Hydra
no finished build of nixpkgs/unstable/python3Packages.scrapy.x86_64-linux
Advisories
PYSEC-2017-83 high 7.5 Scrapy 1.4 allows remote attackers to cause a denial of service (memory consumption) via large files because arbitrarily many files are read into memory, which is especially problematic if the files are then individually written in a separate thread to a slow storage resource, as demonstrated by int (OSV, for this version)
CVE-2017-14158
Packaging
meta complete
Packagewhat each field means
Description
High-level web crawling and web scraping framework
Long description
Scrapy is a fast high-level web crawling and web scraping framework, used to crawl
websites and extract structured data from their pages. It can be used for a wide
range of purposes, from data mining to monitoring and automated testing.
Homepage
License
Platforms
31 platforms: Linux, Darwin
Main program
scrapySource provenance
not set: built from source
Outputs
out distStatus
not broken, not insecure, free
Maintainers
Version bumps 0all open bumps
None open.
Pull requests 1
[Backport staging-26.05] python3Packages.twisted: 25.5.0 -> 26.4.0
#524507 by nixpkgs-ci · opened 4mo ago
Issues 1
Scrapy: Arbitrary Module Import via Referrer-Policy Header in RefererMiddleware 1.severity: security
#570885 by nixpkgs-security-tracker · opened 10d ago · 0 comments