PyPI/topydo CVE-2018-1000523: unknown, EPSS 1.17%
topydo contains a CWE-20: Improper Input Validation vulnerability in ListFormatParser::parse, file topydo/lib/ListFormat.py line 292 as of d4f843dac71308b2f29a7c2cdc76f055c3841523 that can result in I
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2018-76
- https://github.com/bram85/topydo/issues/240
- https://github.com/bram85/topydo/blob/master/topydo/lib/ListFormat.py#L292
- https://github.com/advisories/GHSA-h6h9-pphv-m266
CVE-2018-1000523 · published · modified · JSON