duplicity

PyPI1 known CVE affecting this package

Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.

CVEs affecting duplicitypage 1 of 1

CVE-2007-5201NONECVSS 0.0EG 0.0✓ Fixed in 0.4.9
2007-10-04
The FTP backend for Duplicity before 0.4.9 sends the password as a command line argument when calling ncftp, which might allow local users to read the password by listing the process and its arguments.

Check whether duplicity is used in your infrastructure

EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for duplicity CVEs against the assets you own.

Start Free Scan →