CVE-2022-38884

CVE-2022-38884 affects the PyPI package d8s-grammars (Python) version 0.1.0, with a backdoor democritus-strings inserted by a third party enabling potential code execution. Red Hat and CNVD/CVE records reiterate a code-execution vulnerability in this package. The exploitation details are not prov...

CVE-2022-38884

The d8s-grammars for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0...