CVE-2022-30877
1 advisory.
PyPI/keep CVE-2022-30877: critical 9.8
The keep for python, as distributed on PyPI, included a code-execution backdoor inserted by a third party. The current version, without this backdoor, is 1.2.
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2022-43056
- https://github.com/OrkoHunter/keep/issues/85
- https://pypi.org/project/keep
- http://pypi.doubanio.com/simple/request
CVE-2022-30877 · published · modified · JSON