PyPI: scancode-toolkit

CVE-2022-39280

Safety vulnerability ID: SFTY-20221006-77861

Safety legacy ID: pyup.io-48585

Scancode-toolkit 31.0.0b1 switches to a different PyPI parser to include a security fix. https://github.com/nexB/scancode-toolkit/commit/d06bbeae81c5d6e3727cbe86f8d6c3d299e2ca66

PyPI

NVD

Created at: Jul 5, 2026Updated at: Jul 5, 2026

Overview

Scancode-toolkit 31.0.0b1 switches to a different PyPI parser to include a security fix. https://github.com/nexB/scancode-toolkit/commit/d06bbeae81c5d6e3727cbe86f8d6c3d299e2ca66

Advisory

Scancode-toolkit 31.0.0b1 switches to a different PyPI parser to include a security fix. https://github.com/nexB/scancode-toolkit/commit/d06bbeae81c5d6e3727cbe86f8d6c3d299e2ca66

Affected Package

Affecting scancode-toolkit package, versions<31.0.0b1

Also affects

---

How to Fix

Upgradescancode-toolkitto31.0.0b3or higher.

Mitigation and Workarounds

---

Vulnerable Functions

Functions linked to known vulnerabilities.

Vulnerable function data is available for Enterprise customers

Book a call with us to see Safety in action.

References

https://getsafety.com/vulnerabilities/SFTY-20221006-77861/CVE-2022-39280

Verified by Safety

Our Cybersecurity Intelligence Team reviewed this vulnerability. We combine public data with our own research to find issues not yet reported to public sources.

Learn more