CVE-2022-42906
2 advisories.
PyPI/powerline-gitstatus CVE-2022-42906: high 7.8, EPSS 0.48%
Powerline Gitstatus vulnerable to arbitrary code execution
Action: Upgrade powerline-gitstatus to 1.3.2 or later.
pip install powerline-gitstatus==1.3.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.3.2 | - |
Fixed versions
| 1.3.2 |
Sources
- osv: GHSA-w67g-6gjv-c599
- https://nvd.nist.gov/vuln/detail/CVE-2022-42906
- https://github.com/jaspernbrouwer/powerline-gitstatus/issues/45
- https://github.com/jaspernbrouwer/powerline-gitstatus/commit/fe8e963b3489e4cceaa2c1f26f2bcc2ef405364c
- https://github.com/jaspernbrouwer/powerline-gitstatus
- https://github.com/jaspernbrouwer/powerline-gitstatus/releases/tag/v1.3.2
- https://lists.debian.org/debian-lts-announce/2023/01/msg00017.html
CVE-2022-42906 · published · modified · JSON
PyPI/powerline-gitstatus CVE-2022-42906: high 7.8, EPSS 0.48%
Powerline Gitstatus vulnerable to arbitrary code execution
Action: Upgrade powerline-gitstatus to 1.3.2 or later.
pip install powerline-gitstatus==1.3.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.3.2 | - |
Fixed versions
| 1.3.2 |
Sources
- osv: PYSEC-2026-898
- https://nvd.nist.gov/vuln/detail/CVE-2022-42906
- https://github.com/jaspernbrouwer/powerline-gitstatus/issues/45
- https://github.com/jaspernbrouwer/powerline-gitstatus/commit/fe8e963b3489e4cceaa2c1f26f2bcc2ef405364c
- https://github.com/jaspernbrouwer/powerline-gitstatus
- https://github.com/jaspernbrouwer/powerline-gitstatus/releases/tag/v1.3.2
- https://lists.debian.org/debian-lts-announce/2023/01/msg00017.html
- https://pypi.org/project/powerline-gitstatus
- https://github.com/advisories/GHSA-w67g-6gjv-c599
CVE-2022-42906 · published · modified · JSON