CVE-2022-28470

marcador package in PyPI 0.1 through 0.13 included a code-execution backdoor.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2022-05-08

Last modified

2024-08-03

Affected products

• Pypi (Python)

References

• http://pypi.doubanio.com/simple/request
• https://github.com/joajfreitas/marcador/issues/5
• https://pypi.org/project/marcador/