Description
The scu-captcha package in PyPI v0.0.1 to v0.0.4 included a code execution backdoor inserted by a third party.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | scu-captcha | >= 0.0.1, < 0.0.5 | 0.0.5 | PYSEC-2022-43166 |
Critical · 9.8
CVE-2022-34983
EUVD-2022-0411GHSA-7hhp-m3cj-2qr2PYSEC-2022-43166
The scu-captcha package in PyPI v0.0.1 to v0.0.4 included a code execution backdoor inserted by a third party.
Published Jul 22, 2022 · Updated Aug 3, 2024 · Assigned by mitre