PyPI/scu-captcha CVE-2022-34983: critical 9.8, EPSS 1.68%
The scu-captcha package in PyPI v0.0.1 to v0.0.4 included a code execution backdoor inserted by a third party.
Action: Upgrade scu-captcha to 0.0.5 or later.
pip install scu-captcha==0.0.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.0.1 | 0.0.5 | - |
Fixed versions
| 0.0.5 |
Sources
- osv: PYSEC-2022-43166
- https://pypi.org/project/scu-captcha/
- https://github.com/SunnyHaze/SCU-Captcha/issues/1
- http://pypi.doubanio.com/simple/request
CVE-2022-34983 · published · modified · JSON