PyPI/limnoria CVE-2019-19010: unknown, EPSS 2.33%
Eval injection in the Math plugin of Limnoria (before 2019.11.09) and Supybot (through 2018-05-09) allows remote unprivileged attackers to disclose information or possibly have unspecified other impac
Action: Upgrade limnoria to 2019.11.09 or later.
pip install limnoria==2019.11.09Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2019.11.09 | - |
Fixed versions
| 2019.11.09 |
Sources
- osv: PYSEC-2019-102
- https://github.com/ProgVal/Limnoria/commit/3848ae78de45b35c029cc333963d436b9d2f0a35
- https://github.com/ProgVal/Limnoria/wiki/math-eval-vulnerability
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/54CQM2TEXRADLE77VOMCPHL5PBHR3ZWJ/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5P2AGND54UIJV3WHOYO2YINIXSDGAAPO/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DRNOUHFEN75QAIKT4Y3HDN3TT5LSIWN2/
- https://github.com/advisories/GHSA-6g88-vr3v-76mf
CVE-2019-19010 · published · modified · JSON