42 matches found
CVE-2022-43305
The d8s-python for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-algorithms package. The affected version of d8s-htm is 0.1.0...
Democritus Project code-related vulnerabilities
Democritus Project is a collection of simple, effective, modular, well-tested and well-documented features from Democritus. Democritus Project d8s-python has a security vulnerability that stems from its inclusion of a potential code execution backdoor inserted by a third party. An attacker could...
CVE-2022-44049
CVE-2022-44049 concerns the PyPI package d8s-python for Python, with version 0.1.0 affected. The root cause is a suspected backdoor introduced by a third party via the democritus-grammars package, enabling potential code execution. Several connected sources corroborate a code-execution risk in th...
PT-2022-26839 · D8S-Htm +2 · D8S-Htm +2
Name of the Vulnerable Software and Affected Versions: d8s-htm version 0.1.0 d8s-python affected versions not specified democritus-algorithms affected versions not specified Description: A potential code-execution backdoor was inserted by a third party in the d8s-python package distributed on PyP...
PT-2022-37357 · Unknown +2 · Democritus-Algorithms +2
Name of the Vulnerable Software and Affected Versions: d8s-htm version 0.1.0 d8s-python affected versions not specified democritus-algorithms affected versions not specified Description: A potential code-execution backdoor was inserted by a third party in the d8s-python package distributed on PyP...
CVE-2022-44049
The d8s-python for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-grammars package. The affected version of d8s-htm is 0.1.0...
CVE-2022-44049
The d8s-python for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-grammars package. The affected version of d8s-htm is 0.1.0...
d8s-python (0.4.0) potentially affected by CVE-2022-42040 via d8s-algorithms (0.3.0)
d8s-algorithms PYPI version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on d8s-algorithms and may be impacted: - d8s-python 0.4.0 Source cves: CVE-2022-42040 Source advisory: OSV:PYSEC-2022-43019...
d8s-python (0.4.0) potentially affected by CVE-2022-42039 via d8s-lists (0.3.0)
d8s-lists PYPI version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on d8s-lists and may be impacted: - d8s-python 0.4.0 Source cves: CVE-2022-42039 Source advisory: OSV:PYSEC-2022-43027...
PYSEC-2022-43083
The d8s-python for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The democritus-strings package. The affected version is 0.1.0...
PYSEC-2022-43125
The d8s-python for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The democritus-strings package. The affected version is 0.1.0...
PYSEC-2022-43125
The d8s-python for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The democritus-strings package. The affected version is 0.1.0...
PYSEC-2022-43083
The d8s-python for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The democritus-strings package. The affected version is 0.1.0...
CVE-2022-38887
CVE-2022-38887 affects the d8s-python package for Python distributed on PyPI. The vulnerability arises from a backdoor inserted by a third party in the democritus-strings package, with the affected version identified as 0.1.0. The NVD/CVE data lists a critical impact (CVSS 3.1: AV:N/AC:L/PR:N/UI:...
CVE-2022-38887
The d8s-python for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The democritus-strings package. The affected version is 0.1.0...
CVE-2022-38887
The d8s-python for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The democritus-strings package. The affected version is 0.1.0...
CVE-2022-38887
The d8s-python for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The democritus-strings package. The affected version is 0.1.0...
PT-2022-37346 · Pypi · Democritus-Strings +1
Name of the Vulnerable Software and Affected Versions: d8s-python version 0.1.0 Description: The issue concerns a potential code-execution backdoor inserted by a third party into the d8s-python package distributed on PyPI. This backdoor is related to the democritus-strings package. Recommendation...
CVE-2022-38887: Unrestricted Upload of File with Dangerous Type
The d8s-python for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The democritus-strings package. The affected version is 0.1.0...
PT-2022-24612 · Pypi · Democritus-Strings +1
Name of the Vulnerable Software and Affected Versions: d8s-python version 0.1.0 Description: The d8s-python package for python, distributed on PyPI, contains a potential code-execution backdoor inserted by a third party, specifically affecting the democritus-strings package. Recommendations: For...