Skip to content
OpenAdvisories

Vendor

befeleme

1 known vulnerabilities.

Products

pyp2spec 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.8
    CVE-2026-42301

    Improper Input Validation leading to Improper Control of Generation of Code ('Code Injection') in pyp2spec

    pyp2spec generates working Fedora RPM spec file for Python projects. Prior to version 0.14.1, pyp2spec was writing PyPI package metadata (e.g. the summary field) into the generated spec file without escaping RPM macro directives. When a packager then runs rpm…

    befeleme pyp2spec pyp2spec PyPI