Skip to content
OpenAdvisories
Critical · 9.8 CVE-2017-1002157 EUVD-2019-0088GHSA-jhjh-ghwx-6h7rPYSEC-2019-153

modulemd uses an unsafe function for processing externally provided data

Published Jan 10, 2019 · Updated Sep 16, 2024 · Assigned by fedora

Vendor: Fedora Modularity Product: modulemd Package: modulemd Ecosystem: PyPI

Description

modulemd 1.3.1 and earlier uses an unsafe function for processing externally provided data, leading to remote code execution.

Affected products

VendorProductAffectedFixed
Fedora Modularity modulemd unspecified – ≤ 1.3.1 —

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI modulemd < 1.3.2 1.3.2 GHSA-jhjh-ghwx-6h7r

References