Argument injection in python-libnmap

2022-05-0600:00:54

Google

osv.dev

0.025 Low

EPSS

Percentile

90.2%

JSON

In the python-libnmap package through 0.7.2 for Python, remote command execution can occur (if used in a client application that does not validate arguments).

CPENameOperatorVersion
python-libnmapeq0.2.3
python-libnmapeq0.4.0
python-libnmapeq0.5.1
python-libnmapeq0.6
python-libnmapeq0.7.2
python-libnmapeq0.6.3
python-libnmapeq0.4.6
python-libnmapeq0.2.7
python-libnmapeq0.7.0
python-libnmapeq0.2.4

Name	Operator	Version
python-libnmap	eq	0.2.3
python-libnmap	eq	0.4.0
python-libnmap	eq	0.5.1
python-libnmap	eq	0.6
python-libnmap	eq	0.7.2
python-libnmap	eq	0.6.3
python-libnmap	eq	0.4.6
python-libnmap	eq	0.2.7
python-libnmap	eq	0.7.0
python-libnmap	eq	0.2.4