CVE-2022-34500

The bin-collect package in PyPI before v0.1 included a code execution backdoor inserted by a third party...

CVE-2022-34500

creationtimestamp| type| source ---|---|--- 2022-07-22 18:19:43+00:00| seen| https://t.me/cibsecurity/46813...

CVE-2022-34500

CVE-2022-34500 affects the PyPI package bin-collect (also referenced as bin_collection). The provided documents indicate a backdoor enabling arbitrary code execution was inserted by a third party in the package before v0.1, leading to a critical risk (CVSS 3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H...