Description
This affects the package pwntools before 4.3.1. The shellcraft generator for affected versions of this module are vulnerable to Server-Side Template Injection (SSTI), which can lead to remote code execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | pwntools | unspecified – < 4.3.1 | 4.3.1 |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | pwntools | < 4.3.1 | 4.3.1 | GHSA-7xc5-ggpp-g249 |