PyPI/marcador CVE-2022-28470: unknown, EPSS 2.27%

marcador package in PyPI 0.1 through 0.13 included a code-execution backdoor.

Action: Upgrade marcador to 0.14 or later.

pip install marcador==0.14

Affected

Fixed versions

Sources

• osv: PYSEC-2022-185
• https://pypi.org/project/marcador/
• http://pypi.doubanio.com/simple/request
• https://github.com/joajfreitas/marcador/issues/5
• https://github.com/advisories/GHSA-57qv-h9m7-jxfg

CVE-2022-28470 · published 2022-05-08T20:15:00Z · modified 2025-10-09T08:23:23.365211Z · JSON