CVE-2017-1002157
2 advisories.
PyPI/modulemd CVE-2017-1002157: critical 9.8, EPSS 2.88%
modulemd uses an unsafe function for processing externally provided data
Action: Upgrade modulemd to 1.3.2 or later.
pip install modulemd==1.3.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.3.2 | - |
Fixed versions
| 1.3.2 |
Sources
- osv: GHSA-jhjh-ghwx-6h7r
- https://nvd.nist.gov/vuln/detail/CVE-2017-1002157
- https://github.com/pypa/advisory-database/tree/main/vulns/modulemd/PYSEC-2019-153.yaml
- https://github.com/xsuchy/modulemd
- https://pagure.io/modulemd/issue/55
CVE-2017-1002157 · published · modified · JSON
PyPI/modulemd CVE-2017-1002157: unknown, EPSS 2.88%
modulemd 1.3.1 and earlier uses an unsafe function for processing externally provided data, leading to remote code execution.
Action: Upgrade modulemd to 1.3.2 or later.
pip install modulemd==1.3.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.3.2 | - |
Fixed versions
| 1.3.2 |
Sources
- osv: PYSEC-2019-153
- https://pagure.io/modulemd/issue/55
- https://github.com/advisories/GHSA-jhjh-ghwx-6h7r
CVE-2017-1002157 · published · modified · JSON