Improper Input Validation

pdm is vulnerable to Improper Input Validation. The vulnerability exists in the readlockfile function at repositories.py due to lack of input validations which allows an attacker to trick a user into installing a malicious open source PyPi package...

SUSE CVE-2023-31543

A dependency confusion in pipreqs v0.3.0 to v0.4.11 allows attackers to execute arbitrary code via uploading a crafted PyPI package to the chosen repository server...

pipreqs vulnerable to Dependency Confusion

A dependency confusion in pipreqs v0.3.0 to v0.4.11 allows attackers to execute arbitrary code via uploading a crafted PyPI package to the chosen repository server...

CVE-2023-31543

A dependency confusion in pipreqs v0.3.0 to v0.4.11 allows attackers to execute arbitrary code via uploading a crafted PyPI package to the chosen repository server...

Type confusion

A dependency confusion in pipreqs v0.3.0 to v0.4.11 allows attackers to execute arbitrary code via uploading a crafted PyPI package to the chosen repository server...

CVE-2023-31543

A dependency confusion in pipreqs v0.3.0 to v0.4.11 allows attackers to execute arbitrary code via uploading a crafted PyPI package to the chosen repository server...

CVE-2023-31543

A dependency confusion in pipreqs v0.3.0 to v0.4.11 allows attackers to execute arbitrary code via uploading a crafted PyPI package to the chosen repository server...

CVE-2023-31543

A dependency confusion in pipreqs v0.3.0 to v0.4.11 allows attackers to execute arbitrary code via uploading a crafted PyPI package to the chosen repository server...

CVE-2023-31543: Uncontrolled Search Path Element

A dependency confusion in pipreqs v0.3.0 to v0.4.11 allows attackers to execute arbitrary code via uploading a crafted PyPI package to the chosen repository server...

CVE-2023-31543

A dependency confusion in pipreqs v0.3.0 to v0.4.11 allows attackers to execute arbitrary code via uploading a crafted PyPI package to the chosen repository server...

Apache HTTP Server via mod_proxy_uwsgi HTTP response smuggling

HTTP Response Smuggling vulnerability in Apache HTTP Server via modproxyuwsgi. This issue affects Apache HTTP Server from 2.4.30 through 2.4.55 and the uWSGI PyPI package prior to version 2.0.22. Special characters in the origin response header can truncate/split the response forwarded to the...

Malicious code in esqtoolultralgtb (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx e334c63529e9806a1f2260cf2dc843c734ca2b1ad96f7270af5283a0d9e3b2c0 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-4500 Malicious code in libsplitrandomencode (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 6263092888bd2ce8b8e6825d2bd9be218f8025772ed0cb8e0b5d50936cbdefaa EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5561 Malicious code in py-randcpustr (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx d267a67563dcd3a2e4fb46858e2769518aca4b257f95bf0c333d2648711bd0ee EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-2814 Malicious code in esqcraftremc (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 37242320195526775b5312603a837b8e987348677ea211c3c15dd45ddfca50b3 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-5429 Malicious code in py-pingencodeencode (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 5e25e0d835bb0ed3cca36de3204ce042d55271d94e424cff8403845342e90554 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in tprandompullpull (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 9e02c5ac3b306660f081b437467b7d2a52fc32a04e7d67f5ad0dd0f668d66d3c EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in py-rampaypalint (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 1a6652403eaff5274d2622c5106d73357cf6418aca7174846731697a8354be92 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

Malicious code in tpmaskpullmine (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 2274feda883bad585e645b3e8f715e14934ec11f04b075a52e12041e8125f871 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...

MAL-2023-3235 Malicious code in esqpostmaskre (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: checkmarx 3536f0d62242eba59bd928e7ca7ea6e0ecd9b665d866fb16eebc860c40a59c44 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...