Democritus Project d8s-algorithms Code Execution Vulnerability

Democritus Project is a collection of simple, effective, modular, well-tested and well-documented features from Democritus. A backdoor vulnerability exists in Democritus Project d8s-algorithms version 0.1.0, which stems from the presence of a potential code execution package democritus-dicts...

CVE-2022-42040

The d8s-algorithms package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-dicts package. The affected version is 0.1.0...

d8s-python (>=0.2.0 <=0.9.0) potentially affected by CVE-2022-42040 via d8s-algorithms (>=0.3.0 <=0.7.0)

d8s-algorithms PYPI version =0.3.0, =0.2.0, =0.9.0 Source cves: CVE-2022-42040 Source advisory: OSV:PYSEC-2022-43019...

PYSEC-2022-43019

The d8s-algorithms package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-dicts package. The affected version is 0.1.0...

PYSEC-2022-43019

The d8s-algorithms package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-dicts package. The affected version is 0.1.0...

PYSEC-2022-43038

The d8s-algorithms package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-dicts package. The affected version is 0.1.0...

Democritus Project 代码问题漏洞

Democritus Project is a collection of simple, effective, modular, well-tested and well-documented features from Democritus. A backdoor vulnerability exists in Democritus Project d8s-algorithms version 0.1.0, which stems from the presence of a potential code execution package democritus-dicts...

PT-2022-26216 · Pypi · D8S-Algorithms +1

Name of the Vulnerable Software and Affected Versions: d8s-algorithms version 0.1.0 Description: The d8s-algorithms package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-dicts package. Recommendations: Fo...

CVE-2022-42040

The CVE-2022-42040 entry concerns the Python package d8s-algorithms (PyPI) with version 0.1.0 affected by a backdoor injected by a third party (democritus-dicts), enabling potential remote code execution. Connected sources consistently describe the issue as a backdoor compromising the package dis...

CVE-2022-42040

The d8s-algorithms package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-dicts package. The affected version is 0.1.0...