{"id":"PYSEC-2022-264","details":"mangadex-downloader is a command-line tool to download manga from MangaDex. When using `file:\u003clocation\u003e` command and `\u003clocation\u003e` is a web URL location (http, https), mangadex-downloader between versions 1.3.0 and 1.7.2 will try to open and read a file in local disk for each line of website contents. Version 1.7.2 contains a patch for this issue.","aliases":["CVE-2022-36082","GHSA-r9x7-2xmr-v8fw"],"modified":"2023-11-08T04:10:00.063469Z","published":"2022-09-07T22:15:00Z","references":[{"type":"FIX","url":"https://github.com/mansuf/mangadex-downloader/commit/439cc2825198ebc12b3310c95c39a8c7710c9b42"},{"type":"ADVISORY","url":"https://github.com/mansuf/mangadex-downloader/security/advisories/GHSA-r9x7-2xmr-v8fw"}],"affected":[{"package":{"name":"mangadex-downloader","ecosystem":"PyPI","purl":"pkg:pypi/mangadex-downloader"},"ranges":[{"type":"GIT","repo":"https://github.com/mansuf/mangadex-downloader","events":[{"introduced":"0"},{"fixed":"439cc2825198ebc12b3310c95c39a8c7710c9b42"}]},{"type":"ECOSYSTEM","events":[{"introduced":"1.3.0"},{"fixed":"1.7.2"}]}],"versions":["1.3.0","1.4.0","1.5.0","1.6.0","1.6.1","1.6.2","1.7.0","1.7.1"],"database_specific":{"source":"https://github.com/pypa/advisory-database/blob/main/vulns/mangadex-downloader/PYSEC-2022-264.yaml"}}],"schema_version":"1.7.3"}