fprime-ci (0.0.1a1), fprime-fpy (>=0.0.1a1, <=0.3.2) +1 more potentially affected by CVE-2024-55030 via fprime-gds (4.3.0)

fprime-gds PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on fprime-gds and may be impacted: - fprime-ci 0.0.1a1 - fprime-fpy =0.0.1a1, =0.1.0, =0.1.5 Source cves: CVE-2024-55030 Source advisory: SNYK:PYTHON-FPRIMEGDS-9749309...

CVE-2024-55030

creationtimestamp| type| source ---|---|--- 2025-03-25 20:24:12+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8750 2025-03-25 23:40:51+00:00| seen| https://t.me/cvedetector/21133 2025-03-26 01:05:11+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3llalqwzwx...

CVE-2024-55030

A command injection vulnerability in the Command Dispatcher Service of NASA Fprime v3.4.3 allows attackers to execute arbitrary commands...