3 matches found
CVE-2022-38880
The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The affected version is 0.1.0...
9.8CVSS9.3AI score0.01071EPSS
SaveExploits1References1
CVE-2022-38880
CVE-2022-38880 concerns the d8s-urls Python package (version 0.1.0) distributed via PyPI, where a third-party-inserted backdoor enables potential remote code execution. Multiple sources (NVD/Red Hat/Veracode/OSV/Politically diverse advisories) describe a backdoor and RCE risk tied to this version...
9.8CVSS9.4AI score0.01071EPSS
SaveExploits1References2Affected Software1
20