PyPI/badkeys CVE-2026-21439: medium 5.3, EPSS 0.33%
badkeys vulnerable to ASCII control character injection on console via malformed input
Action: Upgrade badkeys to 0.0.16 or later.
pip install badkeys==0.0.16Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.0.16 | - |
Fixed versions
| 0.0.16 |
Sources
- osv: PYSEC-2026-1212
- nvd: CVE-2026-21439
- https://github.com/badkeys/badkeys/security/advisories/GHSA-wjpc-4f29-83h3
- https://github.com/badkeys/badkeys/issues/40
- https://github.com/badkeys/badkeys/commit/635a2f3b1b50a895d8b09ec8629efc06189f349a
- https://github.com/badkeys/badkeys/commit/de631f69f040974bb5fb442cdab9a1d904c64087
- https://github.com/badkeys/badkeys
- https://pypi.org/project/badkeys
- https://github.com/advisories/GHSA-wjpc-4f29-83h3
CVE-2026-21439 · published · modified · JSON