PyPI/lookatme CVE-2020-15271: critical 9.3, EPSS 2.31%

Markdown-supplied Shell Command Execution

Action: Upgrade lookatme to 2.3.0 or later.

pip install lookatme==2.3.0

Affected

Fixed versions

Sources

• osv: GHSA-c84h-w6cr-5v8q
• https://github.com/d0c-s4vage/lookatme/security/advisories/GHSA-c84h-w6cr-5v8q
• https://nvd.nist.gov/vuln/detail/CVE-2020-15271
• https://github.com/d0c-s4vage/lookatme/pull/110
• https://github.com/d0c-s4vage/lookatme/commit/72fe36b784b234548d49dae60b840c37f0eb8d84
• https://github.com/d0c-s4vage/lookatme
• https://github.com/d0c-s4vage/lookatme/releases/tag/v2.3.0
• https://github.com/pypa/advisory-database/tree/main/vulns/lookatme/PYSEC-2020-61.yaml
• https://pypi.org/project/lookatme/#history

CVE-2020-15271 · published 2020-10-27T17:59:54Z · modified 2026-09-10T03:48:59.655044527Z · JSON