CVE-2020-15271
2 advisories.
PyPI/lookatme CVE-2020-15271: critical 9.3
Markdown-supplied Shell Command Execution
Action: Upgrade lookatme to 2.3.0 or later.
pip install lookatme==2.3.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.3.0 | - |
Fixed versions
| 2.3.0 |
Sources
- osv: GHSA-c84h-w6cr-5v8q
- https://github.com/d0c-s4vage/lookatme/security/advisories/GHSA-c84h-w6cr-5v8q
- https://nvd.nist.gov/vuln/detail/CVE-2020-15271
- https://github.com/d0c-s4vage/lookatme/pull/110
- https://github.com/d0c-s4vage/lookatme/commit/72fe36b784b234548d49dae60b840c37f0eb8d84
- https://github.com/d0c-s4vage/lookatme
- https://github.com/d0c-s4vage/lookatme/releases/tag/v2.3.0
- https://github.com/pypa/advisory-database/tree/main/vulns/lookatme/PYSEC-2020-61.yaml
- https://pypi.org/project/lookatme/#history
CVE-2020-15271 · published · modified · JSON
PyPI/lookatme CVE-2020-15271: unknown
In lookatme (python/pypi package) versions prior to 2.3.0, the package automatically loaded the built-in "terminal" and "file_loader" extensions. Users that use lookatme to render untrusted markdown m
Action: Upgrade lookatme to 2.3.0 or later.
pip install lookatme==2.3.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.3.0 | - |
Fixed versions
| 2.3.0 |
Sources
- osv: PYSEC-2020-61
- https://github.com/d0c-s4vage/lookatme/security/advisories/GHSA-c84h-w6cr-5v8q
- https://github.com/d0c-s4vage/lookatme/commit/72fe36b784b234548d49dae60b840c37f0eb8d84
- https://pypi.org/project/lookatme/#history
- https://github.com/d0c-s4vage/lookatme/releases/tag/v2.3.0
- https://github.com/d0c-s4vage/lookatme/pull/110
CVE-2020-15271 · published · modified · JSON