CVE-2020-7698: Gerapy

Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days.

This affects the package Gerapy from 0 and before 0.9.3. The input being passed to Popen, via the project_configure endpoint, isn’t being sanitized.

Affected products

• Gerapy Gerapy: from 0.0.0, before 0.9.3 (fixed in 0.9.3)

Published 2020-07-29. Last modified 2026-06-17.