Malicious code in msgspec-python313-pre (PyPI)

--- Credit: OpenSSF source...

MAL-2025-2977 Malicious code in msgspec-python313-pre (PyPI)

--- -= Per source details. Do not edit below this line.=-...

CVE-2025-27607

Python JSON Logger is a JSON Formatter for Python Logging. Between 30 December 2024 and 4 March 2025 Python JSON Logger was vulnerable to RCE through a missing dependency. This occurred because msgspec-python313-pre was deleted by the owner leaving the name open to being claimed by a third party...

CVE-2025-27607: Inclusion of Functionality from Untrusted Control Sphere

Python JSON Logger is a JSON Formatter for Python Logging. Between 30 December 2024 and 4 March 2025 Python JSON Logger was vulnerable to RCE through a missing dependency. This occurred because msgspec-python313-pre was deleted by the owner leaving the name open to being claimed by a third party...