Code injection

The d8s-dates for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-timezones package. The affected version of d8s-htm is 0.1.0...

Code injection

The d8s-python for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-grammars package. The affected version of d8s-htm is 0.1.0...

Code injection

The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-domains package. The affected version of d8s-htm is 0.1.0...

Code injection

The d8s-strings for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-uuids package. The affected version of d8s-htm is 0.1.0...

PYSEC-2022-43126

The d8s-dates for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-timezones package. The affected version of d8s-htm is 0.1.0...

PYSEC-2022-43096

The d8s-timer for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-dates package. The affected version of d8s-htm is 0.1.0...

Code injection

The d8s-python for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-algorithms package. The affected version of d8s-htm is 0.1.0...

Code injection

The d8s-timer for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-uuids package. The affected version of d8s-htm is 0.1.0...

Code injection

The d8s-networking for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-user-agents package. The affected version of d8s-htm is 0.1.0...

PYSEC-2022-43075

The d8s-dates for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-timezones package. The affected version of d8s-htm is 0.1.0...

PYSEC-2022-43084

The d8s-python for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-algorithms package. The affected version of d8s-htm is 0.1.0...

CVE-2022-44052

CVE-2022-44052 concerns the PyPI packaging chain for d8s-dates and its related components. The records indicate a potential code-execution backdoor inserted by a third party in the democritus-timezones package, with d8s-htm version 0.1.0 specifically mentioned as affected. The practical impact is...

CVE-2022-44048

CVE-2022-44048 describes a backdoor inserted by a third party into the PyPI distribution d8s-urls for Python, implicating the democritus-domains package. The affected software component includes d8s-htm version 0.1.0. Connected advisories indicate this results in potential code execution and reco...

CVE-2022-43303

The d8s-strings for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-uuids package. The affected version of d8s-htm is 0.1.0...

CVE-2022-44051

CVE-2022-44051 affects d8s-stats for Python distributed on PyPI, with a potential code-execution backdoor inserted by a third party in the democritus-math package. The vulnerability concerns d8s-htm version 0.1.0. Connected sources corroborate the presence of a backdoor in democritus-math and the...

CVE-2022-43306

The d8s-timer for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-dates package. The affected version of d8s-htm is 0.1.0...

CVE-2022-44054

CVE-2022-44054 concerns the Python d8s-xml package distributed on PyPI, with a potential code-execution backdoor linked to the democritus-utility package. The description explicitly states a code-execution backdoor inserted by a third party, affecting the d8s-htm component version 0.1.0. External...

CVE-2022-43305

CVE-2022-43305 concerns the d8s-python package on PyPI, where a third-party backdoor was inserted into the Democritus ecosystem (democritus-algorithms) and is linked to d8s-htm 0.1.0. Connected sources corroborate that the backdoor could enable code execution, with multiple advisories referencing...

CVE-2022-44049

CVE-2022-44049 concerns the PyPI package d8s-python for Python, with version 0.1.0 affected. The root cause is a suspected backdoor introduced by a third party via the democritus-grammars package, enabling potential code execution. Several connected sources corroborate a code-execution risk in th...

CVE-2022-43304

Summary: CVE-2022-43304 describes a code-execution backdoor in the PyPI package d8s-timer for Python, introduced by a third party. The backdoor is associated with the democritus-uuids package, and the affected software/version cited is d8s-timer with version 0.1.0 (and related d8s-htm code path)....