Description
The d8s-dicts for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. The affected version is 0.1.0
Unscored
CVE-2022-40809
EUVD-2022-0387GHSA-h22c-cgp5-g8fwPYSEC-2022-43106
The d8s-dicts for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is t…
Published Sep 19, 2022 · Updated Aug 3, 2024 · Assigned by mitre