Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.8
CVE-2022-23531
- EPSS 0.12%
- Published 17.12.2022 00:15:08
- Last modified 21.11.2024 06:48:45
GuardDog is a CLI tool to identify malicious PyPI packages. Versions prior to 0.1.5 are vulnerable to Relative Path Traversal when scanning a specially-crafted local PyPI package. Running GuardDog against a specially-crafted package can allow an atta...
6.5
CVE-2022-23530
- EPSS 0.22%
- Published 16.12.2022 23:15:09
- Last modified 21.11.2024 06:48:45
GuardDog is a CLI tool to identify malicious PyPI packages. Versions prior to v0.1.8 are vulnerable to arbitrary file write when scanning a specially-crafted remote PyPI package. Extracting files using shutil.unpack_archive() from a potentially malic...
1