D8s-timer vulnerabilities

2 known vulnerabilities in D8s-timer from Democritus. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  D8s-timer: Unrestricted Upload of File with Dangerous Type

  CVE-2022-43306Nov 7, 2022DemocritusEPSS 1.33%

  The d8s-timer for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-dates package. The affected version of d8s-htm is 0.1.0.

• 9.8 Critical severity

  D8s-timer: Unrestricted Upload of File with Dangerous Type

  CVE-2022-43304Nov 7, 2022DemocritusEPSS 1.44%

  The d8s-timer for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-uuids package. The affected version of d8s-htm is 0.1.0.