CVE-2022-42037

The d8s-asns package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-csv package. The affected version is 0.1.0...

CVE-2022-42044

The d8s-asns package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-html package. The affected version is 0.1.0...

CVE-2022-40426

The d8s-asns for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0...

Democritus Project d8s-asns democritus-csv code execution vulnerability

Democritus Project is a collection of simple, effective, modular, well-tested and well-documented features from Democritus. A backdoor vulnerability exists in Democritus Project d8s-asns version 0.1.0, which stems from the presence of a potential code execution package democritus-csv inserted by ...

Democritus Project d8s-asns democritus-html code execution vulnerability

Democritus Project is a collection of simple, effective, modular, well-tested and well-documented features from Democritus. A backdoor vulnerability exists in Democritus Project d8s-asns version 0.1.0, which stems from the presence of a potential code execution package democritus-html inserted by...

CVE-2022-42044

The d8s-asns package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-html package. The affected version is 0.1.0...

CVE-2022-42037

The d8s-asns package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-csv package. The affected version is 0.1.0...

d8s-asns (0.5.0), d8s-urls (>=0.2.0, <=0.5.2) +1 more potentially affected by CVE-2022-41384 via d8s-domains (0.6.0)

d8s-domains PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on d8s-domains and may be impacted: - d8s-asns 0.5.0 - d8s-urls =0.2.0, =0.5.0, =0.6.0 Source cves: CVE-2022-41384 Source advisory: OSV:PYSEC-2022-43023...

d8s-asns (0.5.0), d8s-domains (>=0.2.0, <=0.5.2) potentially affected by CVE-2022-42036 via d8s-urls (0.6.0)

d8s-urls PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on d8s-urls and may be impacted: - d8s-asns 0.5.0 - d8s-domains =0.2.0, =0.5.2 Source cves: CVE-2022-42036 Source advisory: OSV:PYSEC-2022-43030...

d8s-asns (0.5.0) potentially affected by CVE-2022-41385 via d8s-html (0.3.0)

d8s-html PYPI version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on d8s-html and may be impacted: - d8s-asns 0.5.0 Source cves: CVE-2022-41385 Source advisory: OSV:PYSEC-2022-43025...

PYSEC-2022-43046

The d8s-asns package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-html package. The affected version is 0.1.0...

PYSEC-2022-43036

The d8s-asns package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-csv package. The affected version is 0.1.0...

Code injection

The d8s-asns package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-html package. The affected version is 0.1.0...

PYSEC-2022-43022

The d8s-asns package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-html package. The affected version is 0.1.0...

PYSEC-2022-43021

The d8s-asns package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-csv package. The affected version is 0.1.0...

d8s-asns (0.5.0), d8s-utility (>=0.5.0, <=0.6.0) potentially affected by CVE-2022-42042 via d8s-networking (0.3.0)

d8s-networking PYPI version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on d8s-networking and may be impacted: - d8s-asns 0.5.0 - d8s-utility =0.5.0, =0.6.0 Source cves: CVE-2022-42042 Source advisory: OSV:PYSEC-2022-43028...

PT-2022-26220 · Pypi · Democritus-Html +1

Name of the Vulnerable Software and Affected Versions: d8s-asns version 0.1.0 Description: The d8s-asns package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-html package. Recommendations: For version...

PT-2022-26213 · Pypi · Democritus-Csv +1

Name of the Vulnerable Software and Affected Versions: d8s-asns version 0.1.0 Description: The d8s-asns package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-csv package. Recommendations: For version 0.1....

CVE-2022-42044

The d8s-asns package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-html package. The affected version is 0.1.0...

CVE-2022-42044: Unrestricted Upload of File with Dangerous Type

The d8s-asns package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-html package. The affected version is 0.1.0...