CVE:CVE-2021-41125
CNNVD:CNNVD-202110-360
Scrapy是一个用Python编写的自由且开源的网络爬虫框架。
Scrapy 存在信息泄露漏洞，如果您使用HttpAuthMiddleware（即http_user和http_pass属性）进行HTTP 身份验证，则所有请求都将向请求目标公开您的凭据。
solution:Upgrade scrapy scrapy to a higher version than 1.8.1,2.5.1,and avoid the version (,1.8.1),[2.0.0,2.5.1); Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0