D8s-netstrings Project vulnerabilities
We track 1 vulnerability in D8s-netstrings Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on September 19, 2022.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest D8s-netstrings Project vulnerabilities
- 9.8 Critical severity
D8s-netstrings: Unrestricted Upload of File with Dangerous Type
The d8s-netstrings for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0.