Lucene search
+L

49 matches found

Github Security Blog
Github Security Blog
•added 2026/07/27 11:00 p.m.•4 views

Malicious code in rdflib (npm)

Source: amazon-inspector fb9a536a077e23bda8e10a55aa1177de28f4f5a8622e08914eeab437e8036940 package.json for this release declares two runtime dependencies — "package-lock.json": "^1.0.0" and "package.json": "^2.0.1" — inside the dependencies block. These are bare names that npm resolves from the...

6AI score
SaveExploits0References3Affected Software1
Snyk
Snyk
•added 2026/07/27 11:00 p.m.•15 views

Malicious Package

Overview rdflib is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

9.8CVSS5.4AI score
SaveExploits0References2
PyPA
PyPA
•added 2026/07/07 10:17 a.m.•24 views

pyRdfa3 Cross-site Scripting vulnerability

A vulnerability was found in RDFlib pyrdfa3 and classified as problematic. This issue affects the function getoption of the file pyRdfa/init.py. The manipulation leads to cross site scripting. The attack may be initiated remotely. The name of the patch is ffd1d62dd50d5f4190013b39cedcdfbd81f3ce3e...

5.4CVSS3.5AI score0.00613EPSS
SaveExploits0References8Affected Software1
osv_mal
osv_mal
•added 2026/05/20 1:41 a.m.•23 views

MAL-2026-4659 Malicious code in rdflib (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb9a536a077e23bda8e10a55aa1177de28f4f5a8622e08914eeab437e8036940 package.json for this release declares two runtime dependencies — "package-lock.json": "^1.0.0" and "package.json": "^2.0.1" — inside the dependencie...

6AI score
SaveExploits0References1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•42 views

EUVD-2019-17185

Malware in sbrugna...

9.8CVSS8.4AI score0.02263EPSS
SaveExploits1References8
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•22 views

EUVD-2022-7560

Malicious code in bioql PyPI...

5.4CVSS5.9AI score0.00613EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2025/08/27 12:00 a.m.•19 views

Linux Distros Unpatched Vulnerability : CVE-2019-7653

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Debian python-rdflib-tools 4.2.2-1 package for RDFLib 4.2.2 has CLI tools that can load Python modules from the current working directory, allowing code...

9.8CVSS8.3AI score0.02263EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
•added 2025/05/23 12:31 a.m.•18 views

CVE-2022-4396

A vulnerability was found in RDFlib pyrdfa3 and classified as problematic. This issue affects the function getoption of the file pyRdfa/init.py. The manipulation leads to cross site scripting. The attack may be initiated remotely. The name of the patch is ffd1d62dd50d5f4190013b39cedcdfbd81f3ce3e...

5.4CVSS3.6AI score0.00613EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
•added 2025/03/05 12:00 a.m.•10 views

Linux Distros Unpatched Vulnerability : CVE-2022-4396

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in RDFlib pyrdfa3 and classified as problematic. This issue affects the function getoption of the file pyRdfa/init.py. The manipulatio...

5.4CVSS3.6AI score0.00613EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
•added 2023/02/15 4:15 a.m.•17 views

SUSE CVE-2019-7653

The Debian python-rdflib-tools 4.2.2-1 package for RDFLib 4.2.2 has CLI tools that can load Python modules from the current working directory, allowing code injection, because "python -m" looks in this directory, as demonstrated by rdf2dot. This issue is specific to use of the debian/scripts...

9.8CVSS7.2AI score0.02263EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
•added 2022/12/10 12:30 p.m.•44 views

pyRdfa3 Cross-site Scripting vulnerability

A vulnerability was found in RDFlib pyrdfa3 and classified as problematic. This issue affects the function getoption of the file pyRdfa/init.py. The manipulation leads to cross site scripting. The attack may be initiated remotely. The name of the patch is ffd1d62dd50d5f4190013b39cedcdfbd81f3ce3e...

5.4CVSS5.1AI score0.00613EPSS
SaveExploits0References6Affected Software1
osv_ghsa
osv_ghsa
•added 2022/12/10 12:30 p.m.•26 views

GHSA-894Q-WPG5-MF2H pyRdfa3 Cross-site Scripting vulnerability

A vulnerability was found in RDFlib pyrdfa3 and classified as problematic. This issue affects the function getoption of the file pyRdfa/init.py. The manipulation leads to cross site scripting. The attack may be initiated remotely. The name of the patch is ffd1d62dd50d5f4190013b39cedcdfbd81f3ce3e...

5.4CVSS4.2AI score0.00613EPSS
SaveExploits0References6
osv_debian
osv_debian
•added 2022/12/10 12:15 p.m.•26 views

DEBIAN-CVE-2022-4396

A vulnerability was found in RDFlib pyrdfa3 and classified as problematic. This issue affects the function getoption of the file pyRdfa/init.py. The manipulation leads to cross site scripting. The attack may be initiated remotely. The name of the patch is ffd1d62dd50d5f4190013b39cedcdfbd81f3ce3e...

5.4CVSS3.7AI score0.00613EPSS
SaveExploits0References1
NVD
NVD
•added 2022/12/10 12:15 p.m.•35 views

CVE-2022-4396

A vulnerability was found in RDFlib pyrdfa3 and classified as problematic. This issue affects the function getoption of the file pyRdfa/init.py. The manipulation leads to cross site scripting. The attack may be initiated remotely. The name of the patch is ffd1d62dd50d5f4190013b39cedcdfbd81f3ce3e...

5.4CVSS0.00613EPSS
SaveExploits0References3
osv_ubuntu
osv_ubuntu
•added 2022/12/10 12:15 p.m.•18 views

UBUNTU-CVE-2022-4396

A vulnerability was found in RDFlib pyrdfa3 and classified as problematic. This issue affects the function getoption of the file pyRdfa/init.py. The manipulation leads to cross site scripting. The attack may be initiated remotely. The name of the patch is ffd1d62dd50d5f4190013b39cedcdfbd81f3ce3e...

5.4CVSS3.8AI score0.00613EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2022/12/10 12:15 p.m.•42 views

CVE-2022-4396

A vulnerability was found in RDFlib pyrdfa3 and classified as problematic. This issue affects the function getoption of the file pyRdfa/init.py. The manipulation leads to cross site scripting. The attack may be initiated remotely. The name of the patch is ffd1d62dd50d5f4190013b39cedcdfbd81f3ce3e...

5.4CVSS4.3AI score0.00613EPSS
SaveExploits0References3
Prion
Prion
•added 2022/12/10 12:15 p.m.•27 views

Cross site scripting

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in RDFlib pyrdfa3 and classified as problematic. This issue affects the function getoption of the file pyRdfa/init.py. The manipulation leads to cross site scripting. The attack may be initiated remotely. The name of the patch is...

4.9CVSS5.2AI score0.00613EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/12/10 12:00 a.m.•20 views

PyRDFA cross-site scripting vulnerabilities

PyRDFA is a parser library for RDFLib open source. It can be used to generate serialized versions of extracted graphics or simply generate RDFLib graphics. PyRDFA suffers from a cross-site scripting vulnerability. An attacker could exploit this vulnerability to perform a cross-site scripting atta...

5.4CVSS5.4AI score0.00613EPSS
SaveExploits0References4
Mend
Mend
•added 2022/12/10 12:00 a.m.•11 views

CVE-2022-4396

A vulnerability was found in RDFlib pyrdfa3 and classified as problematic. This issue affects the function getoption of the file pyRdfa/init.py. The manipulation leads to cross site scripting. The attack may be initiated remotely. The name of the patch is ffd1d62dd50d5f4190013b39cedcdfbd81f3ce3e...

5.4CVSS0.00613EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/10 12:00 a.m.•7 views

CVE-2022-4396: Improper Neutralization

A vulnerability was found in RDFlib pyrdfa3 and classified as problematic. This issue affects the function getoption of the file pyRdfa/init.py. The manipulation leads to cross site scripting. The attack may be initiated remotely. The name of the patch is ffd1d62dd50d5f4190013b39cedcdfbd81f3ce3e...

5.4CVSS3.8AI score0.00613EPSS
SaveExploits0References3
Rows per page
Query Builder