CVE-2022-42036

CVE-2022-42036 affects the Python package d8s-urls (distributed on PyPI); the 0.1.0 release allegedly contained a third-party injected backdoor named democritus-csv that enables code execution. Multiple connected records (Red Hat, OSV, NVD, PRION, ENISA/EUVD adapters, OSV, PySEC advisories) confi...

CVE-2022-42036

The d8s-urls package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-csv package. The affected version is 0.1.0...