d8s-asns (0.1.0), d8s-domains (0.1.0) +8 more potentially affected by unknown CVE via democritus-json (2021.1.2501)

democritus-json PYPI version 2021.1.2501 is affected by a known vulnerability. The following packages have a transitive dependency on democritus-json and may be impacted: - d8s-asns 0.1.0 - d8s-domains 0.1.0 - d8s-html 0.1.0 - d8s-ip-addresses 0.1.0 - d8s-mpeg 0.1.0 - d8s-networking 0.1.0 -...

PYSEC-2022-43113

The d8s-domains for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0...

Code injection

The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-networking package. The affected version of d8s-urls is 0.1.0...

PYSEC-2022-43113

The d8s-domains for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0...

CVE-2022-40431

The d8s-pdfs for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0...

CVE-2022-40431

The CVE-2022-40431 incident concerns the Python package d8s-pdfs for PyPI, version 0.1.0, which reportedly included a backdoor inserted by a third party via the democritus-networking package. Public sources describe this as a potential code execution vulnerability with a network-based attack surf...

CVE-2022-40431

The d8s-pdfs for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0...

CVE-2022-40429

The d8s-ip-addresses for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0...

CVE-2022-40429

CVE-2022-40429 affects the Python package d8s-ip-addresses (version 0.1.0) distributed on PyPI. A third-party backdoor named democritus-networking was inserted, enabling potential code execution. Descriptions across multiple sources confirm the root cause is a tainted package supply chain, leadin...

CVE-2022-40429

The d8s-ip-addresses for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0...

CVE-2022-40427

The d8s-domains for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0...

CVE-2022-40427

CVE-2022-40427 concerns the Python package d8s-domains distributed on PyPI. The vulnerability arises from a backdoor (the package democritus-networking ) inserted by a third party in version 0.1.0 , enabling potential remote code execution. Reported in multiple feeds (NVD, Red Hat, OSV, Veracode,...

CVE-2022-40427

The d8s-domains for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. The affected version is 0.1.0...

CVE-2022-40424

CVE-2022-40424 affects d8s-urls 0.1.0 (Python, PyPI). A third-party backdoor in the democritus-networking package is implicated in potential arbitrary code execution. Connected sources confirm the vulnerability context and indicate a remediation path: avoid/use of this democritus-networking packa...

CVE-2022-40424

The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-networking package. The affected version of d8s-urls is 0.1.0...

CVE-2022-40424

The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-networking package. The affected version of d8s-urls is 0.1.0...

PT-2022-37376 · Pypi · D8S-Domains +1

Name of the Vulnerable Software and Affected Versions: d8s-domains version 0.1.0 Description: The d8s-domains package for Python, distributed on PyPI, contains a potential code-execution backdoor. This backdoor is attributed to the democritus-networking package, which was inserted by a third part...

PT-2022-25380 · Pypi · Democritus-Networking +1

Name of the Vulnerable Software and Affected Versions: d8s-pdfs version 0.1.0 Description: The d8s-pdfs for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. Recommendations: For version 0.1.0...

PT-2022-25378 · Pypi · Democritus-Networking +1

Name of the Vulnerable Software and Affected Versions: d8s-ip-addresses version 0.1.0 Description: The d8s-ip-addresses package for Python, distributed on PyPI, contains a potential code-execution backdoor. This backdoor is attributed to the democritus-networking package, which was inserted by a...

PT-2022-37374 · Pypi · D8S-Htm +1

Name of the Vulnerable Software and Affected Versions: d8s-html version 0.1.0 Description: The d8s-html for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-networking package. Recommendations: For version 0.1.0...