CVE-2022-32998
1 advisory.
PyPI/cryptoasset-data-downloader CVE-2022-32998: unknown, EPSS 2.00%
The cryptoasset-data-downloader package in PyPI v1.0.0 to v1.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive us
Action: Upgrade cryptoasset-data-downloader to 1.0.2 or later.
pip install cryptoasset-data-downloader==1.0.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.0 | 1.0.2 | - |
Fixed versions
| 1.0.2 |
Sources
- osv: PYSEC-2022-217
- https://pypi.org/project/cryptoasset-data-downloader/
- https://github.com/serhatci/cryptocurrency-historical-data-downloader/issues/8
- http://pypi.doubanio.com/simple/request
CVE-2022-32998 · published · modified · JSON