CVE-2022-40806

🗓️ 19 Sep 2022 14:51:36Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 52 Views

The d8s-uuids for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. The affected version is 0.1.

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	CVE-2022-40806	19 Sep 202215:15	–	attackerkb
Circl	CVE-2022-40806	19 Sep 202218:38	–	circl
CNNVD	Democritus Project 安全漏洞	19 Sep 202200:00	–	cnnvd
Cvelist	CVE-2022-40806	19 Sep 202214:51	–	cvelist
EUVD	EUVD-2022-0384	3 Oct 202520:07	–	euvd
NVD	CVE-2022-40806	19 Sep 202215:15	–	nvd
Prion	Code injection	19 Sep 202215:15	–	prion
PyPA	PYSEC-2022-43103	19 Sep 202215:15	–	pypa
RedhatCVE	CVE-2022-40806	23 May 202500:36	–	redhatcve
Veracode	Remote Code Execution (RCE)	20 Sep 202211:26	–	veracode