PatchTheCVEparso vulnerabilities and fixes
Recent CVEs affecting parso, with upgrade or downgrade steps. 1 tracked.
parso has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2019-06-06. Highest priority: CVE-2019-12760 (score 35/100).
- CVE-2019-12760 LOW 3.3 UPGRADE A deserialization vulnerability exists in the way parso through 0.4.0 handles grammar parsing from the cache
FAQ
How do I fix parso vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is parso being exploited right now?
None of the tracked parso CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which parso CVE should I patch first?
CVE-2019-12760 currently ranks highest (35/100): A deserialization vulnerability exists in the way parso through 0.4.0 handles grammar parsing from the cache.