CVE-2022-42041

The d8s-file-system package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hashes package. The affected version is 0.1.0...

CVE-2022-42041

creationtimestamp| type| source ---|---|--- 2022-10-12 02:26:13+00:00| seen| https://t.me/cibsecurity/51225...

d8s-archives (0.5.0) potentially affected by CVE-2022-42041 via d8s-file-system (0.3.0)

d8s-file-system PYPI version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on d8s-file-system and may be impacted: - d8s-archives 0.5.0 Source cves: CVE-2022-42041 Source advisory: OSV:PYSEC-2022-43024...

CVE-2022-42041

The d8s-file-system package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hashes package. The affected version is 0.1.0...

CVE-2022-42041

CVE-2022-42041 affects the Python d8s-file-system package distributed on PyPI (version 0.1.0). The incident involves a backdoor code path introduced by a third party, specifically the democritus-hashes package, enabling potential code execution. The available Connected documents confirm the backd...