PyPI: python-secrets

SFTY-20210414-41775

Safety legacy ID: pyup.io-37401

Python-secrets 19.8.0 tightens permissions on cloned environments/groups. https://github.com/davedittrich/python_secrets/commit/db39d50cabaa4fe9470b96ec8b8b931cf388e647

PyPI

Created at: Jul 14, 2026Updated at: Jul 14, 2026

Overview

Python-secrets 19.8.0 tightens permissions on cloned environments/groups. https://github.com/davedittrich/python_secrets/commit/db39d50cabaa4fe9470b96ec8b8b931cf388e647

Advisory

Python-secrets 19.8.0 tightens permissions on cloned environments/groups. https://github.com/davedittrich/python_secrets/commit/db39d50cabaa4fe9470b96ec8b8b931cf388e647

Affected Package

Affecting python-secrets package, versions<19.8.0

Also affects

---

How to Fix

Upgradepython-secretsto19.8.1or higher.

Mitigation and Workarounds

---

Vulnerable Functions

Functions linked to known vulnerabilities.

Vulnerable function data is available for Enterprise customers

Book a call with us to see Safety in action.

References

https://getsafety.com/vulnerabilities/SFTY-20210414-41775

Verified by Safety

Our Cybersecurity Intelligence Team reviewed this vulnerability. We combine public data with our own research to find issues not yet reported to public sources.

Learn more