PyPI/jcvi CVE-2023-35932: high 7.1, EPSS 1.79%
jcvi vulnerable to Configuration Injection due to unsanitized user input
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 1.3.5 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-x49m-3cw7-gq5q
- https://github.com/tanghaibao/jcvi/security/advisories/GHSA-x49m-3cw7-gq5q
- https://nvd.nist.gov/vuln/detail/CVE-2023-35932
- https://github.com/tanghaibao/jcvi
- https://github.com/tanghaibao/jcvi/blob/cede6c65c8e7603cb266bc3395ac8f915ea9eac7/jcvi/apps/base.py#LL2227C1-L2228C41
CVE-2023-35932 · published · modified · JSON