CVE-2022-40805

The d8s-urls for python 0.1.0, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-hypothesis package.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2022-09-19

Last modified

2024-08-03

Affected products

• Democritus Urls (Democritus Urls Project)

References

• https://github.com/democritus-project/d8s-urls/issues/10
• https://pypi.org/project/democritus-hypothesis/