PyPI: starwhale

CVE-2023-34092

Safety vulnerability ID: SFTY-20230601-67001

Safety legacy ID: pyup.io-59460

Starwhale 0.5.5 updates its dependency 'vite' to version '4.4.0' to include a fix for a Path Equivalence vulnerability. https://github.com/star-whale/starwhale/pull/2475

PyPI

NVD

Created at: Jul 5, 2026Updated at: Jul 5, 2026

Overview

Starwhale 0.5.5 updates its dependency 'vite' to version '4.4.0' to include a fix for a Path Equivalence vulnerability. https://github.com/star-whale/starwhale/pull/2475

Advisory

Starwhale 0.5.5 updates its dependency 'vite' to version '4.4.0' to include a fix for a Path Equivalence vulnerability. https://github.com/star-whale/starwhale/pull/2475

Affected Package

Affecting starwhale package, versions<0.5.5

Also affects

---

How to Fix

Upgradestarwhaleto0.5.5or higher.

Mitigation and Workarounds

---

Vulnerable Functions

Functions linked to known vulnerabilities.

Vulnerable function data is available for Enterprise customers

Book a call with us to see Safety in action.

References

https://getsafety.com/vulnerabilities/SFTY-20230601-67001/CVE-2023-34092

Verified by Safety

Our Cybersecurity Intelligence Team reviewed this vulnerability. We combine public data with our own research to find issues not yet reported to public sources.

Learn more