pypi package report

Is docassemble-base safe?

1 known vulnerability, worst severity HIGH.

// reach

183 direct dependencies

53 carry known advisories, worst CRITICAL

2 packages depend on it

an advisory here reaches each of them

Create a free accountfor every dependency path, dependent and what to upgrade
// ai model usage

No published models are known to use this package.

cvss
0.0
high

severity out of 10

epss
0.00%
critical

chance of exploitation in 30 days, 99th percentile of all CVEs

xyz score
0.0
medium

CyberXYZ composite out of 10

fig. 01 — GHSA-jq57-3w7p-vwvv, the advisory selected below

// 1 advisories

GHSA-jq57-3w7p-vwvv

HIGHCVE-2024-27292
// impact

The vulnerability allows attackers to gain unauthorized access to information on the system through URL manipulation. It affects versions 1.4.53 to 1.4.96.

// patches

The vulnerability has been patched in version 1.4.97 of the master branch. The Docker image on docker.io has been patched.

// workarounds

If upgrading is not possible, manually apply the changes of 97f77dc and restart the server.

// credit

The vulnerability was discovered by Riyush Ghimire (@richighimi).

// for more information

If you have any questions or comments about this advisory:

// cvss v3.1 vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack vector
Network
Attack complexity
Low
Privileges required
None
User interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Checked 2026-10-23 at 18:47 UTC. The most recent advisory here was published 2024-02-29. Updated continuously from NVD, GHSA, OSV and CNA feeds.

Think a verdict here is wrong? Tell us — we respond within 2 business days.