CVE-2022-33004
1 advisory.
PyPI/beginner CVE-2022-33004: unknown
The Beginner package in PyPI v0.0.2 to v0.0.4 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and
Action: Upgrade beginner to 0.0.5 or later.
pip install beginner==0.0.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.0.2 | 0.0.5 | - |
Fixed versions
| 0.0.5 |
Sources
- osv: PYSEC-2022-214
- https://pypi.org/project/beginner/
- https://github.com/Dreambuilder4028/coder/issues/1
- http://pypi.doubanio.com/simple/request
CVE-2022-33004 · published · modified · JSON