CVE-2022-44048

2022-11-0700:00:00

mitre

www.cve.org

python

pypi

code execution

backdoor

third party

democritus-domains package

version 0.1.0

AI Score

9.9

Confidence

High

EPSS

0.002

Percentile

65.2%

JSON

The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-domains package. The affected version of d8s-htm is 0.1.0.