Pypi

Records16All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical15CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Pypi records in CISA KEV

No Pypi vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Pypi · all components

TI-2022-15387 CVE-2022-34501 · GHSA-2mxg-q6g7-4jvg

MEDIUM 45

The bin-collection package in PyPI before v0.1 included a code execution backdoor inserted by a third party.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01495 Published 2022-07-22 No fix listed

TI-2022-15386 CVE-2022-34500 · GHSA-38gp-wf27-935r

MEDIUM 45

The bin-collect package in PyPI before v0.1 included a code execution backdoor inserted by a third party.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01569 Published 2022-07-22 No fix listed