Description
The exotel (aka exotel-py) package in PyPI as of 0.1.6 includes a code execution backdoor inserted by a third party.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | exotel | 0.1.6 | — | GHSA-cv6j-9835-p7fh |
Critical · 9.8
CVE-2022-38792
EUVD-2022-0098GHSA-cv6j-9835-p7fhPYSEC-2022-43134
exotel-py includes code execution backdoor inserted by a third party
Published Aug 27, 2022 · Updated Aug 3, 2024 · Assigned by mitre