CVE-2022-40426

CVE-2022-40426 concerns the PyPI package d8s-asns (the democritus-networking backdoor) in version 0.1.0. The backdoor inserted by a third party enables potential code execution and is described as a backdoor in the affected Python deployment. The connected records consistently describe a code-exe...

CVE-2022-40425

The CVE-2022-40425 entry refers to the PyPI package d8s-html (Python) where version 0.1.0 bundles a backdoor via the third‑party democritus-networking package. The vulnerability is described as potential remote code execution with a high impact across confidentiality, integrity, and availability ...

CVE-2022-40427

The d8s-domains for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0...

CVE-2022-40805

The d8s-urls for python 0.1.0, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-hypothesis package...

PYSEC-2022-43103

The d8s-uuids for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. The affected version is 0.1.0...

PYSEC-2022-43104

The d8s-domains for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. The affected version is 0.1.0...

CVE-2022-40431

The d8s-pdfs for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0...

CVE-2022-40808

CVE-2022-40808 affects the Python package d8s-dates distributed on PyPI, where a third-party backdoor (democritus-hypothesis) in version 0.1.0 enables potential remote code execution. Affected component is the d8s-dates package as shipped; root cause is insertion of a code-execution backdoor by a...

CVE-2022-40805

The d8s-urls for python 0.1.0, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-hypothesis package...

CVE-2022-40424

The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-networking package. The affected version of d8s-urls is 0.1.0...

CVE-2022-38880

The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The affected version is 0.1.0...

PYSEC-2022-43118

The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The affected version is 0.1.0...

PT-2022-37383 · Pypi · D8S-Json +1

Name of the Vulnerable Software and Affected Versions: d8s-json version 0.1.0 Description: The d8s-json package for Python contains a potential code-execution backdoor. This backdoor is attributed to the democritus-strings package, which was inserted by a third party. Recommendations: For version...

CVE-2022-40424: Undefined Security Weakness

The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-networking package. The affected version of d8s-urls is 0.1.0...

PT-2022-37375 · Unknown +1 · Democritus-Networking +1

Name of the Vulnerable Software and Affected Versions: d8s-asns version 0.1.0 Description: The d8s-asns package for Python contains a potential code-execution backdoor. This backdoor is attributed to the democritus-networking package, which was inserted by a third party. Recommendations: For...

CVE-2022-40805: Undefined Security Weakness

The d8s-urls for python 0.1.0, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-hypothesis package...

Democritus Project security vulnerabilities

Democritus Project is a collection of simple, effective, modular, well-tested and well-documented features from Democritus, Inc. A security vulnerability exists in Democritus Project d8s-url version 0.1.0 that stems from a potential code execution backdoor...

PT-2022-25377 · Unknown +1 · Democritus-Networking +1

Name of the Vulnerable Software and Affected Versions: d8s-mpeg version 0.1.0 Description: The d8s-mpeg for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. Recommendations: For version 0.1.0...

PT-2022-24605 · Pypi · D8S-Urls

Name of the Vulnerable Software and Affected Versions: d8s-urls version 0.1.0 Description: The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. Recommendations: For version 0.1.0, avoid using the affected package until a fixed...

Democritus Project security vulnerabilities

Democritus Project is a collection of simple, effective, modular, well-tested and well-documented features from Democritus, Inc. A security vulnerability exists in Democritus Project d8s-urls version 0.1.0 that originates from a potential code execution backdoor inserted by a third party...