CVE-2022-40424

The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-networking package. The affected version of d8s-urls is 0.1.0

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2022-09-19

Last modified

2024-08-03

Affected products

• Democritus Urls (Democritus Urls Project)

References

• https://github.com/democritus-project/d8s-urls/issues/9
• https://pypi.org/project/democritus-networking/