CVE-2022-42043

The CVE-2022-42043 entry concerns the Python d8s-xml package (PyPI) version 0.1.0, where a third-party backdoor named democritus-html has been inserted, enabling potential code execution. The connected documents confirm the affected component and root cause but do not provide a concrete patch ver...

CVE-2022-44054

CVE-2022-44054 concerns the Python d8s-xml package distributed on PyPI, with a potential code-execution backdoor linked to the democritus-utility package. The description explicitly states a code-execution backdoor inserted by a third party, affecting the d8s-htm component version 0.1.0. External...