bzr

v2.7.0PyPI· Python

Friendly distributed version control system

The verdict

Has 1 high-severity advisory. Verify a patched version exists before using. Check the OSV link for the fixed-in version.

Check the OSV link for the fixed-in version.

Live from the PyPI registry · derived rules, not AI

How it scores

MaintenanceAbandoned

PopularityUnknown

Security1 advisory

LicenseOther

DepsZero deps

Maintenance

Last published 10 years ago.

Popularity

Download count unavailable.

Security

1 known advisory (worst: high severity).

License

GNU GPL v2

Dependencies

No runtime dependencies

Security advisories

Live from OSV.dev · cached 24h

HIGH
Bazaar allows remote attackers to execute arbitrary commands via a bzr+ssh URL with initial dash character in hostname
GHSA-jjxg-hpm7-g95f Published 2022-05-13

Recent releases