PyPI/limnoria CVE-2019-19010: critical 9.8, EPSS 2.33%

Eval injection in Supybot/Limnoria

Action: Upgrade limnoria to 2019.11.09 or later.

pip install limnoria==2019.11.09

Affected

Fixed versions

Sources

• osv: GHSA-6g88-vr3v-76mf
• https://nvd.nist.gov/vuln/detail/CVE-2019-19010
• https://github.com/ProgVal/Limnoria/commit/3848ae78de45b35c029cc333963d436b9d2f0a35
• https://github.com/ProgVal/Limnoria
• https://github.com/ProgVal/Limnoria/wiki/math-eval-vulnerability
• https://github.com/advisories/GHSA-6g88-vr3v-76mf
• https://github.com/pypa/advisory-database/tree/main/vulns/limnoria/PYSEC-2019-102.yaml
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/54CQM2TEXRADLE77VOMCPHL5PBHR3ZWJ
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5P2AGND54UIJV3WHOYO2YINIXSDGAAPO
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DRNOUHFEN75QAIKT4Y3HDN3TT5LSIWN2

CVE-2019-19010 · published 2019-11-20T01:31:31Z · modified 2025-02-21T05:29:16.226177Z · JSON