4 matches found
EUVD-2023-2444
Malicious code in bioql PyPI...
9.1CVSS9AI score0.00924EPSS
SaveExploits1References5
CVE-2019-10807
Blamer versions prior to 1.0.1 allows execution of arbitrary commands. It is possible to inject arbitrary commands as part of the arguments provided to blamer...
9.8CVSS7.2AI score0.0242EPSS
SaveExploits1References1
Arbitrary Argument Injection
Overview blamer is a tool for get information about author of code from version control system. Supports git and subversion. Affected versions of this package are vulnerable to Arbitrary Argument Injection via the blameByFile API. The library does not sanitize for user input or validate the given...
9.1CVSS7.3AI score0.00924EPSS
SaveExploits1References2
20