Lucene search
+L

1 matches found

PyPA
PyPA
added 2021/11/12 10:15 p.m.10 views

PYSEC-2021-840

A dependency confusion vulnerability was reported in the Antilles open-source software prior to version 1.0.1 that could allow for remote code execution during installation due to a package listed in requirements.txt not existing in the public package index PyPi. MITRE classifies this weakness as...

8.8CVSS8AI score0.01971EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder