CVE-2022-40809

CVE-2022-40809 affects the Python package range “d8s-dicts” distributed on PyPI, with the affected version 0.1.0. Multiple sources describe a backdoor inserted by a third party in the democritus-hypothesis package, enabling potential remote code execution. The CVE record and related advisories co...

CVE-2022-40809

The d8s-dicts for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. The affected version is 0.1.0...