Backdoor in api-res-py

api-res-py package in PyPI 0.1 is vulnerable to a code execution backdoor in the request package...

CVE-2022-31313

api-res-py package in PyPI 0.1 is vulnerable to a code execution backdoor in the request package...

CVE-2022-31313

api-res-py package in PyPI 0.1 is vulnerable to a code execution backdoor in the request package...

PYSEC-2022-43071

api-res-py package in PyPI 0.1 is vulnerable to a code execution backdoor in the request package...

PYSEC-2022-43071

api-res-py package in PyPI 0.1 is vulnerable to a code execution backdoor in the request package...

CVE-2022-31313

CVE-2022-31313 affects the PyPI package api-res-py (version 0.1). The vulnerability is a code execution backdoor in the request package, enabling an attacker to execute arbitrary code. Multiple connected sources (Red Hat, Veracode, OSV, GHSA) corroborate a malicious backdoor in the api-res-py ent...

api-res-py 安全漏洞

api-res-py is an AS api responsive Python package from the Python Foundation. A security vulnerability exists in api-res-py version 0.1, which stems from the installation of request packages when installing the api-res-py package, and is exploited by an attacker to leave a malicious backdoor on a...

a62-emotion (>=0.10.12 <=0.11.4), agent-atm (>=0.1.0 <=0.1.1) +102 more potentially affected by CVE-2022-29191 via tensorflow-cpu (>=1.15.0 <=2.5.3)

tensorflow-cpu PYPI version =1.15.0, =0.10.12, =0.1.0, =2.0.0, =2.0.0, =1.0.0, =0.0.5, =0.3.0, =0.0.1, =0.8.1, =0.1.1, =1.3.0, =0.1.0.dev1, =0.1.0.dev202107081840 and more Source cves: CVE-2022-29191 Source advisory: OSV:GHSA-FV25-WRFF-WF86...

GHSA-PF3P-V9XP-MRVF py-lmdb Invalid write operation

An issue was discovered in py-lmdb 0.97. For certain values of mnflags, mdbcursorset triggers a memcpy with an invalid write operation within mdbxcursorinit1. NOTE: this outcome occurs when accessing a data.mdb file supplied by an attacker...

py-lmdb Invalid write operation

An issue was discovered in py-lmdb 0.97. For certain values of mnflags, mdbcursorset triggers a memcpy with an invalid write operation within mdbxcursorinit1. NOTE: this outcome occurs when accessing a data.mdb file supplied by an attacker...

appian-locust (>=0.0.2 <=1.7.0), exact-sync (>=0.0.39 <=0.0.40) +2 more potentially affected by CVE-2020-28364 via locust (>=1.0.0 <=1.1.0)

locust PYPI version =1.0.0, =0.0.2, =0.0.39, =0.0.29, =0.4.0, =0.5.0 Source cves: CVE-2020-28364 Source advisory: OSV:GHSA-VQXW-9PG7-V7V9...

GHSA-GGWQ-VRGP-6GV4 py-lmdb Divide by Zero interruptions

An issue was discovered in py-lmdb 0.97. There is a divide-by-zero error in the function mdbenvopen2 if mdbenvreadheader obtains a zero value for a certain size field...

py-lmdb Divide by Zero interruptions

An issue was discovered in py-lmdb 0.97. There is a divide-by-zero error in the function mdbenvopen2 if mdbenvreadheader obtains a zero value for a certain size field...

GHSA-9Q62-R72G-PVV7 py-lmdb Invalid write operation

An issue was discovered in py-lmdb 0.97. For certain values of mdflags, mdbnodeadd does not properly set up a memcpy destination, leading to an invalid write operation. NOTE: this outcome occurs when accessing a data.mdb file supplied by an attacker...

GHSA-C74C-P4P7-R8Q5 py-lmdb Invalid write operation

An issue was discovered in py-lmdb 0.97. For certain values of mpflags, mdbpagetouch does not properly set up mc-mcpgmc-top, leading to an invalid write operation. NOTE: this outcome occurs when accessing a data.mdb file supplied by an attacker...

py-lmdb Invalid write operation

An issue was discovered in py-lmdb 0.97. For certain values of mdflags, mdbnodeadd does not properly set up a memcpy destination, leading to an invalid write operation. NOTE: this outcome occurs when accessing a data.mdb file supplied by an attacker...

GHSA-R8G9-W4F3-9CRM LMDB invalid write

An issue was discovered in py-lmdb 0.97. mdbnodedel does not validate a memmove in the case of an unexpected node-mnhi, leading to an invalid write operation...

LMDB invalid write

An issue was discovered in py-lmdb 0.97. mdbnodedel does not validate a memmove in the case of an unexpected node-mnhi, leading to an invalid write operation...

py-lmdb Invalid write operation

An issue was discovered in py-lmdb 0.97. For certain values of mpflags, mdbpagetouch does not properly set up mc-mcpgmc-top, leading to an invalid write operation. NOTE: this outcome occurs when accessing a data.mdb file supplied by an attacker...

dfnclient (>=0.0.1 <=0.4.6), django-afip (>=1.0.2 <=2.2.1) +2 more potentially affected by CVE-2013-2217 via suds-py3 (>=1.0.0.0 <=1.4.1.0)

suds-py3 PYPI version =1.0.0.0, =0.0.1, =1.0.2, =0.9.0, =0.0.1, =0.0.8 Source cves: CVE-2013-2217 Source advisory: OSV:GHSA-VPQP-HX68-P2WX...