PyPI/modulemd CVE-2017-1002157: unknown, EPSS 2.88%
modulemd 1.3.1 and earlier uses an unsafe function for processing externally provided data, leading to remote code execution.
Action: Upgrade modulemd to 1.3.2 or later.
pip install modulemd==1.3.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.3.2 | - |
Fixed versions
| 1.3.2 |
Sources
- osv: PYSEC-2019-153
- https://pagure.io/modulemd/issue/55
- https://github.com/advisories/GHSA-jhjh-ghwx-6h7r
CVE-2017-1002157 · published · modified · JSON