PYSEC-2022-220

2022-06-2421:15:00

Google

osv.dev

0.004 Low

EPSS

Percentile

72.2%

JSON

Reserved The pyesasky for python, as distributed on PyPI, included a code-execution backdoor inserted by a third party. The current version, without this backdoor, is 1.2.0-1.4.2.

CPENameOperatorVersion
pyesaskyeq1.2.1
pyesaskyeq1.2.2
pyesaskyeq1.4.1b0
pyesaskyeq1.2.4
pyesaskyeq1.3.4
pyesaskyeq1.2.7
pyesaskyeq1.3.1
pyesaskyeq1.2.11
pyesaskyeq1.2.5
pyesaskyeq1.3.0

Name	Operator	Version
pyesasky	eq	1.2.1
pyesasky	eq	1.2.2
pyesasky	eq	1.4.1b0
pyesasky	eq	1.2.4
pyesasky	eq	1.3.4
pyesasky	eq	1.2.7
pyesasky	eq	1.3.1
pyesasky	eq	1.2.11
pyesasky	eq	1.2.5
pyesasky	eq	1.3.0