Pypi

Records16All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical15CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Pypi records in CISA KEV

No Pypi vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Pypi 2 records MEDIUM Aamiles 1 record MEDIUM Beginner 1 record MEDIUM Bsdiff4 1 record LOW Cloudlabeling 1 record MEDIUM Cryptoasset-data-downloader 1 record MEDIUM Django-navbar-client 1 record MEDIUM Dr-web-engine 1 record MEDIUM

Records

1 record in Bsdiff4 · all components

TI-2020-12521 CVE-2020-15904 · GHSA-f8m3-jpxr-hm5x

A buffer overflow in the patching routine of bsdiff4 before 1.2.0 allows an attacker to…

LOW 36

A buffer overflow in the patching routine of bsdiff4 before 1.2.0 allows an attacker to write to heap memory (beyond allocated bounds) via a crafted patch file.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0105 Published 2020-07-22 Fixed in 1.2.0 CWE-787

Open these records in search →

Critical	15
High	1
Medium	0
Low	0
No CVSS	0