PyPI: buildbot

SFTY-20210414-91386

Safety legacy ID: pyup.io-36320

Buildbot before 1.3.0 did not use ``hmac.compare_digest()`` in GitHub hooks. https://github.com/buildbot/buildbot/commit/e159e4ed0a2fee9c7e41e81ae81333b0c9557256

PyPI

Created at: Jul 14, 2026Updated at: Jul 14, 2026

Overview

Buildbot before 1.3.0 did not use ``hmac.compare_digest()`` in GitHub hooks. https://github.com/buildbot/buildbot/commit/e159e4ed0a2fee9c7e41e81ae81333b0c9557256

Advisory

Buildbot before 1.3.0 did not use ``hmac.compare_digest()`` in GitHub hooks. https://github.com/buildbot/buildbot/commit/e159e4ed0a2fee9c7e41e81ae81333b0c9557256

Affected Package

Affecting buildbot package, versions<1.3.0

Also affects

---

How to Fix

Upgradebuildbotto1.3.0or higher.

Mitigation and Workarounds

---

Vulnerable Functions

Functions linked to known vulnerabilities.

Vulnerable function data is available for Enterprise customers

Book a call with us to see Safety in action.

References

https://getsafety.com/vulnerabilities/SFTY-20210414-91386

Verified by Safety

Our Cybersecurity Intelligence Team reviewed this vulnerability. We combine public data with our own research to find issues not yet reported to public sources.

Learn more