CVE-2023-41334
2 advisories.
PyPI/astropy CVE-2023-41334: high 8.4, EPSS 1.13%
RCE in TranformGraph().to_dot_graph function
Action: Upgrade astropy to 5.3.3 or later.
pip install astropy==5.3.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.3.3 | - |
Fixed versions
| 5.3.3 |
Sources
- osv: GHSA-h2x6-5jx5-46hf
- https://github.com/astropy/astropy/security/advisories/GHSA-h2x6-5jx5-46hf
- https://nvd.nist.gov/vuln/detail/CVE-2023-41334
- https://github.com/astropy/astropy/commit/22057d37b1313f5f5a9b5783df0a091d978dccb5
- https://github.com/astropy/astropy
- https://github.com/astropy/astropy/blob/9b97d98802ee4f5350a62b681c35d8687ee81d91/astropy/coordinates/transformations.py#L539
CVE-2023-41334 · published · modified · JSON
PyPI/astropy CVE-2023-41334: high 8.4, EPSS 1.13%
RCE in TranformGraph().to_dot_graph function
Action: Upgrade astropy to 5.3.3 or later.
pip install astropy==5.3.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.3.3 | - |
Fixed versions
| 5.3.3 |
Sources
- osv: PYSEC-2026-1199
- https://github.com/astropy/astropy/security/advisories/GHSA-h2x6-5jx5-46hf
- https://nvd.nist.gov/vuln/detail/CVE-2023-41334
- https://github.com/astropy/astropy/commit/22057d37b1313f5f5a9b5783df0a091d978dccb5
- https://github.com/astropy/astropy
- https://github.com/astropy/astropy/blob/9b97d98802ee4f5350a62b681c35d8687ee81d91/astropy/coordinates/transformations.py#L539
- https://pypi.org/project/astropy
- https://github.com/advisories/GHSA-h2x6-5jx5-46hf
CVE-2023-41334 · published · modified · JSON