PyPI: tensorhive

SFTY-20220202-07149

Safety legacy ID: pyup.io-44753

Tensorhive 0.3.1 updates its dependency 'webpack-bundle-analyzer' to v3.3.2. https://hackerone.com/reports/463380

PyPI

Created at: Nov 5, 2025Updated at: Nov 5, 2025

Overview

Tensorhive 0.3.1 updates its dependency 'webpack-bundle-analyzer' to v3.3.2. https://hackerone.com/reports/463380

Advisory

Tensorhive 0.3.1 updates its dependency 'webpack-bundle-analyzer' to v3.3.2. https://hackerone.com/reports/463380

Affected Package

Affecting tensorhive package, versions<0.3.1

Also affects

---

How to Fix

Upgradetensorhiveto0.3.1or higher.

Mitigation and Workarounds

---

Vulnerable Functions

Functions linked to known vulnerabilities.

Vulnerable function data is available for Enterprise customers

Book a call with us to see Safety in action.

References

https://getsafety.com/vulnerabilities/SFTY-20220202-07149

Verified by Safety

Our Cybersecurity Intelligence Team reviewed this vulnerability. We combine public data with our own research to find issues not yet reported to public sources.

Learn more