D8s-asns vulnerabilities

2 known vulnerabilities in D8s-asns from Democritus. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  D8s-asns: Unrestricted Upload of File with Dangerous Type

  CVE-2022-42044Oct 11, 2022DemocritusEPSS 1.67%

  The d8s-asns package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-html package. The affected version is 0.1.0.

• 9.8 Critical severity

  D8s-asns: Unrestricted Upload of File with Dangerous Type

  CVE-2022-42037Oct 11, 2022DemocritusEPSS 1.67%

  The d8s-asns package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-csv package. The affected version is 0.1.0.