{"action":"No fix published. Pin and monitor.","affected":[],"component":"exotel","cve_ids":["CVE-2022-38792"],"ecosystem":"PyPI","epss":0.01565,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-cv6j-9835-p7fh","id":"tcs_01M5KFDR6KTGRG1SQWNZJFDQMR","modified_at":"2024-11-26T16:11:48Z","published_at":"2022-08-28T00:00:26Z","references":["https://osv.dev/vulnerability/GHSA-cv6j-9835-p7fh","https://nvd.nist.gov/vuln/detail/CVE-2022-38792","https://github.com/sarathsp06/exotel-py/issues/10","https://github.com/jertel/elastalert2/pull/931","https://github.com/pypa/advisory-database/tree/main/vulns/exotel/PYSEC-2022-43134.yaml","https://github.com/sarathsp06/exotel-py","https://inspector.pypi.io/project/exotel/0.1.6/packages/8b/ed/9ebeb34d4adb9b01151d73ccfde9c1cb2d629c3b146953c8727559a65446/exotel-0.1.6.tar.gz/exotel-0.1.6/setup.py","https://pypi.org/project/exotel"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-cv6j-9835-p7fh","url":"https://osv.dev/vulnerability/GHSA-cv6j-9835-p7fh"}],"summary":"exotel-py includes code execution backdoor inserted by a third party"}