The d8s-networking package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hashes package. The affected version is 0.1.0.
Search vulnerabilities
CVE-2022-42042
CVSS 3.1 · 9.8 Critical
EPSS 1.7%
KEV · Not listed
Vendors
Products
CVE-2022-44053
The d8s-networking for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-user-agents package. The affected version of d8s-htm is 0.1.0.
CVSS 3.1 · 9.8 Critical
EPSS 1.3%
KEV · Not listed
Vendors
Products
CVE-2022-44050
The d8s-networking for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-json package. The affected version of d8s-htm is 0.1.0.
CVSS 3.1 · 9.8 Critical
EPSS 1.4%
KEV · Not listed
Vendors
Products
Page 1 of 1.