Description
The d8s-grammars for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0.
Unscored
CVE-2022-38884
EUVD-2022-0372GHSA-f8x8-vxwq-2p77PYSEC-2022-43076PYSEC-2022-43122
The d8s-grammars for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor i…
Published Sep 19, 2022 · Updated Aug 3, 2024 · Assigned by mitre