PyPI/python-dbusmock CVE-2015-1326: unknown, EPSS 1.82%
python-dbusmock before version 0.15.1 AddTemplate() D-Bus method call or DBusTestCase.spawn_server_template() method could be tricked into executing malicious code if an attacker supplies a .pyc file.
Action: Upgrade python-dbusmock to 0.15.1 or later.
pip install python-dbusmock==0.15.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.15.1 | - |
Fixed versions
| 0.15.1 |
Sources
- osv: PYSEC-2019-155
- https://github.com/martinpitt/python-dbusmock/commit/4e7d0df9093
- https://github.com/advisories/GHSA-74xw-82v7-hmrm
CVE-2015-1326 · published · modified · JSON