python-poetry

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

python-poetry records in CISA KEV

No python-poetry vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Poetry 4 records HIGH Cleo 1 record HIGH

Records

1 record in Cleo · all components

TI-2022-20946 CVE-2022-42966 · GHSA-2p9h-ccw7-33gf

Exponential ReDoS in cleo leads to denial of service

HIGH 66

An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the cleo PyPI package, when an attacker is able to supply arbitrary input to the Table.set_rows method

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01165 Published 2022-11-09 Fixed in 1.0.0, 2.0.0 CWE-1333

Open these records in search →

Critical	1
High	4
Medium	0
Low	1
No CVSS	0