{"action":"Upgrade marcador to 0.14 or later.","affected":[{"fixed":"0.14","introduced":"0"}],"component":"marcador","cve_ids":["CVE-2022-28470"],"ecosystem":"PyPI","epss":0.02266,"exploited":false,"fixed_versions":["0.14"],"ghsa_id":"GHSA-57qv-h9m7-jxfg","id":"tcs_01M5KF0A9D6GKGDV44T4EV72G4","modified_at":"2024-11-30T05:43:39.455150Z","published_at":"2022-05-09T00:00:48Z","references":["https://osv.dev/vulnerability/GHSA-57qv-h9m7-jxfg","https://nvd.nist.gov/vuln/detail/CVE-2022-28470","https://github.com/joajfreitas/marcador/issues/5","https://github.com/joajfreitas/marcador/commit/84d84549c6c6d765abc9243ac7e85d810f32d6e7","https://github.com/advisories/GHSA-57qv-h9m7-jxfg","https://github.com/joajfreitas/marcador","https://github.com/pypa/advisory-database/tree/main/vulns/marcador/PYSEC-2022-185.yaml","https://pypi.org/project/marcador","http://pypi.doubanio.com/simple/request"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-57qv-h9m7-jxfg","url":"https://osv.dev/vulnerability/GHSA-57qv-h9m7-jxfg"}],"summary":"Code-execution backdoor in marcador"}