CVE-2022-38880

The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The affected version is 0.1.0...

CVE-2022-38880

The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The affected version is 0.1.0...

CVE-2022-38880

CVE-2022-38880 concerns the d8s-urls Python package (version 0.1.0) distributed via PyPI, where a third-party-inserted backdoor enables potential remote code execution. Multiple sources (NVD/Red Hat/Veracode/OSV/Politically diverse advisories) describe a backdoor and RCE risk tied to this version...