Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:32972
HistoryNov 15, 2021 - 4:40 a.m.

Remote Code Execution (RCE)

2021-11-1504:40:49
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
4

0.005 Low

EPSS

Percentile

77.2%

antilles_tools is vulnerable to remote code execution. During installation, there is a dependency confusion due to a package listed in requirements.txt not existing in the public package index (PyPi), causing a private package dependency being replaced by an unauthorized package of the same name published to a well-known public repository such as PyPi.

CPENameOperatorVersion
antilles-toolseq1.0.0
antilles-toolseq1.0.0

0.005 Low

EPSS

Percentile

77.2%

Related for VERACODE:32972