PT-2022-26838 · D8S-Htm +1 · D8S-Htm +2

Name of the Vulnerable Software and Affected Versions: d8s-htm version 0.1.0 d8s-timer versions affected versions not specified Description: A potential code-execution backdoor was inserted by a third party into the d8s-timer for python, distributed on PyPI. Additionally, the democritus-uuids...

PT-2022-37392 · Pypi · D8S-Htm +2

Name of the Vulnerable Software and Affected Versions: d8s-strings affected versions not specified d8s-htm version 0.1.0 Description: A potential code-execution backdoor was inserted by a third party into the d8s-strings package distributed on PyPI. Another affected package is democritus-uuids...

PT-2022-37351 · Pypi · D8S-Htm +2

Name of the Vulnerable Software and Affected Versions: d8s-strings affected versions not specified d8s-htm version 0.1.0 Description: A potential code-execution backdoor was inserted by a third party into the d8s-strings package distributed on PyPI. Another affected package is democritus-uuids...

PT-2022-37352 · Pypi +1 · Democritus-Uuids +2

Name of the Vulnerable Software and Affected Versions: d8s-timer version not specified d8s-htm version 0.1.0 Description: A potential code-execution backdoor was inserted by a third party into the d8s-timer for python distributed on PyPI. Another affected package is democritus-uuids...

CVE-2022-43304

The d8s-timer for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-uuids package. The affected version of d8s-htm is 0.1.0...

CVE-2022-43303

The d8s-strings for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-uuids package. The affected version of d8s-htm is 0.1.0...

CVE-2022-23949

In Keylime before 6.3.0, unsanitized UUIDs can be passed by a rogue agent and can lead to log spoofing on the verifier and registrar...

CVE-2022-23949

In Keylime before 6.3.0, unsanitized UUIDs can be passed by a rogue agent and can lead to log spoofing on the verifier and registrar...

CVE-2022-23949

CVE-2022-23949 affects Keylime

CVE-2022-23949

In Keylime before 6.3.0, unsanitized UUIDs can be passed by a rogue agent and can lead to log spoofing on the verifier and registrar...

Remote Code Execution (RCE)

d8s-uuids is vulnerable to remote code execution. The vulnerability exists because the library does not properly handle the package upload mechanism, allowing an attacker to inject and execute malicious packages...

CVE-2022-40806

The d8s-uuids for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. The affected version is 0.1.0...

Malicious Package

Overview democritus-uuids is a malicious package. This package is used for dependency confusion attempts and contains malicious code. The package now exists as a placeholder on PyPI. Remediation Avoid using all malicious instances of the democritus-uuids package. References - GitHub Issue - GitHu...

d8s-strings (0.1.0), d8s-timer (0.1.0) potentially affected by unknown CVE via democritus-uuids (2021.1.2101)

democritus-uuids PYPI version 2021.1.2101 is affected by a known vulnerability. The following packages have a transitive dependency on democritus-uuids and may be impacted: - d8s-strings 0.1.0 - d8s-timer 0.1.0 Source cves: unknown CVE Source advisory: SNYK:PYTHON-DEMOCRITUSUUIDS-8400829...

PYSEC-2022-43103

The d8s-uuids for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. The affected version is 0.1.0...

PYSEC-2022-43103

The d8s-uuids for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. The affected version is 0.1.0...

CVE-2022-40806

The d8s-uuids for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. The affected version is 0.1.0...

CVE-2022-40806

CVE-2022-40806 affects the Python package d8s-uuids from PyPI (version 0.1.0). The root cause is a backdoor inserted by a third party in the package, tracked across multiple feeds (e.g., Red Hat, NVD, OSV, Veracode). The vulnerability enables remote code execution with a high impact : attacker-co...

Democritus Project 安全漏洞

Democritus Project is a collection of simple, effective, modular, fully tested and well-documented features from Democritus, Inc. A security vulnerability exists in Democritus Project d8s-uuids version 0.1.0 that originates from a potential code execution backdoor inserted by a third party...

PT-2022-37366 · Pypi · Democritus-Hypothesis +1

Name of the Vulnerable Software and Affected Versions: d8s-uuids version 0.1.0 Description: The d8s-uuids package for Python, distributed on PyPI, contains a potential code-execution backdoor. This backdoor is attributed to the democritus-hypothesis package, which was inserted by a third party...