PyPI/reqmgr2 CVE-2022-34558: critical 9.8, EPSS 1.30%

WMAgent arbitrary code execution via a crafted dbs-client package

Action: Upgrade reqmgr2 to 2.0.4 or later.

pip install reqmgr2==2.0.4

Affected

Fixed versions

Sources

• osv: GHSA-4vq7-8699-4xgc#PyPI/reqmgr2
• https://nvd.nist.gov/vuln/detail/CVE-2022-34558
• https://github.com/dmwm/WMCore/issues/11188
• https://github.com/dmwm/WMCore
• https://github.com/pypa/advisory-database/tree/main/vulns/global-workqueue/PYSEC-2022-43136.yaml
• https://github.com/pypa/advisory-database/tree/main/vulns/reqmon/PYSEC-2022-43163.yaml
• https://github.com/pypa/advisory-database/tree/main/vulns/wmagent/PYSEC-2022-43174.yaml

CVE-2022-34558 · published 2022-07-29T00:00:17Z · modified 2026-06-29T12:26:22.121568254Z · JSON