PyPI/wheel CVE-2022-40898: unknown, EPSS 2.84%
An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli.
Action: Upgrade wheel to 0.38.1 or later.
pip install wheel==0.38.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.38.1 | - |
Fixed versions
| 0.38.1 |
Sources
- osv: PYSEC-2022-43017
- https://pypi.org/project/wheel/
- https://github.com/pypa/wheel/blob/main/src/wheel/wheelfile.py#L18
- https://pyup.io/posts/pyup-discovers-redos-vulnerabilities-in-top-python-packages/
- https://github.com/advisories/GHSA-qwmp-2cf2-g9g6
CVE-2022-40898 · published · modified · JSON