CVE-2022-42036

The d8s-urls package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-csv package. The affected version is 0.1.0...

EUVD-2022-0067

Malicious code in bioql PyPI...

EUVD-2022-0397

Malicious code in bioql PyPI...

EUVD-2022-0389

Malicious code in bioql PyPI...

EUVD-2022-0383

Malicious code in bioql PyPI...

CVE-2022-40805

The d8s-urls for python 0.1.0, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-hypothesis package...

CVE-2022-40424

The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-networking package. The affected version of d8s-urls is 0.1.0...

CVE-2022-44048

The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-domains package. The affected version of d8s-htm is 0.1.0...

Democritus Project d8s-urls code execution vulnerability

Democritus Project is a collection of simple, effective, modular, well-tested and well-documented features from Democritus. Democritus Project d8s-urls has a security vulnerability that stems from its inclusion of a potential code execution backdoor inserted by a third party. An attacker could...

PYSEC-2022-43097

The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-domains package. The affected version of d8s-htm is 0.1.0...

PYSEC-2022-43091

The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-domains package. The affected version of d8s-htm is 0.1.0...

CVE-2022-44048: Unrestricted Upload of File with Dangerous Type

The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-domains package. The affected version of d8s-htm is 0.1.0...

CVE-2022-44048

CVE-2022-44048 describes a backdoor inserted by a third party into the PyPI distribution d8s-urls for Python, implicating the democritus-domains package. The affected software component includes d8s-htm version 0.1.0. Connected advisories indicate this results in potential code execution and reco...

CVE-2022-44048

The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-domains package. The affected version of d8s-htm is 0.1.0...

Democritus Project code-related vulnerabilities

Democritus Project is a collection of simple, effective, modular, well-tested and well-documented features from Democritus. Democritus Project d8s-urls has a security vulnerability that stems from its inclusion of a potential code execution backdoor inserted by a third party. An attacker could...

CVE-2022-42036

The d8s-urls package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-csv package. The affected version is 0.1.0...

PYSEC-2022-43030

The d8s-urls package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-csv package. The affected version is 0.1.0...

d8s-asns (0.5.0), d8s-domains (>=0.2.0, <=0.5.2) potentially affected by CVE-2022-42036 via d8s-urls (0.6.0)

d8s-urls PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on d8s-urls and may be impacted: - d8s-asns 0.5.0 - d8s-domains =0.2.0, =0.5.2 Source cves: CVE-2022-42036 Source advisory: OSV:PYSEC-2022-43030...

d8s-asns (0.5.0), d8s-urls (>=0.2.0, <=0.5.2) +1 more potentially affected by CVE-2022-41384 via d8s-domains (0.6.0)

d8s-domains PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on d8s-domains and may be impacted: - d8s-asns 0.5.0 - d8s-urls =0.2.0, =0.5.0, =0.6.0 Source cves: CVE-2022-41384 Source advisory: OSV:PYSEC-2022-43023...

PYSEC-2022-43030

The d8s-urls package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-csv package. The affected version is 0.1.0...