CVE-2022-43306

2022-11-0700:00:00

mitre

www.cve.org

python

code execution

backdoor

third party

pypi

AI Score

9.1

Confidence

High

EPSS

0.002

Percentile

56.1%

JSON

The d8s-timer for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-dates package. The affected version of d8s-htm is 0.1.0.