GHSA-ggrh-grj3-vfvw Package discontinued because Bitly lowered the free quota
The package is discontinued due to Bitly quota changes, leaving users without maintenance or security updates for this Python library.
- Exploited in the wild
- Not known
- Login needed
- Not stated
- Attackable
- Not stated
- Victim action needed
- Not stated
- Fix
- None listed
What is GHSA-ggrh-grj3-vfvw?
GHSA-ggrh-grj3-vfvw is a vulnerability in bitlyshortener, published on 28 Nov 2022.
Official description
On November 17, 2022, an email was received from Bitly advising that the new link quota per free token is lowered to 50 per month (from its previous value of 1000 per month). As per the email, this change is effective on December 8, 2022.
The new quota is so low as to not be useful. For this reason, the maintenance of this package is being discontinued, although the package should continue to function with the limited new quota.
Which versions are affected by GHSA-ggrh-grj3-vfvw?
2 open source packages ship an affected version, including bitlyshortener.
| Package | Affected | Fixed in |
|---|---|---|
bitlyshortener PyPI | All versions to 0.6.3 | None |
bitlyshortener PyPI | All versions to 0.6.3 | None |
How do I fix GHSA-ggrh-grj3-vfvw?
No fix has been published for GHSA-ggrh-grj3-vfvw yet. Limit exposure of the affected software until one is available.
Is GHSA-ggrh-grj3-vfvw being exploited?
There is no known exploitation of GHSA-ggrh-grj3-vfvw in the wild and no public exploit code.