CVE-2022-42041

The d8s-file-system package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hashes package. The affected version is 0.1.0.
References
Link Resource
https://pypi.org/project/d8s-file-system/ Product Third Party Advisory
https://github.com/dadadadada111/info/issues/2 Exploit Issue Tracking
https://pypi.org/project/democritus-hashes/ Product Third Party Advisory
Configurations

Configuration 1

cpe:2.3:a:democritus:d8s-file-system:0.1.0:*:*:*:*:pypl:*:*

Information

Published : 2022-10-11 10:15

Updated : 2022-10-13 02:36


NVD link : CVE-2022-42041

Mitre link : CVE-2022-42041

Products Affected
No products.
CWE