Lucene search

K

Lookatme Security Vulnerabilities - February

cve
cve

CVE-2020-15271

In lookatme (python/pypi package) versions prior to 2.3.0, the package automatically loaded the built-in "terminal" and "file_loader" extensions. Users that use lookatme to render untrusted markdown may have malicious shell commands automatically run on their system. This is fixed in version 2.3.0....

9.3CVSS

8.5AI Score

0.004EPSS

2020-10-26 06:15 PM
49