cap2 (>=0.1.0, <=0.4.1), megaqc (0.2.0) +4 more potentially affected by unknown CVE via multiqc (>=1.8.0, <=1.19.0)

multiqc PYPI version =1.8.0, =0.1.0, =0.16.2, =0.1.1, =0.2.4 Source cves: unknown CVE Source advisory: MEND:WS-2020-0121...

Code Injection in ewels/multiqc

Description MultiQC Aggregate results from bioinformatics analyses across many samples into a single report. Vulnerability Vulnerable to YAML deserialization attack caused by unsafe loading. Proof of Concept Installation bash pip3 install multiqc Run exploit.py import os os.system'pip3 install...