CVE-2022-34054
1 advisory.
PyPI/perdido CVE-2022-34054: unknown
The Perdido package in PyPI v0.0.1 to v0.0.2 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and d
Action: Upgrade perdido to 0.0.3 or later.
pip install perdido==0.0.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.0.1 | 0.0.3 | - |
Fixed versions
| 0.0.3 |
Sources
- osv: PYSEC-2022-216
- https://pypi.org/project/perdido/
- https://github.com/ludovicmoncla/perdido/issues/1
- http://pypi.doubanio.com/simple/request
CVE-2022-34054 · published · modified · JSON