{"action":"Upgrade perdido to 0.0.3 or later.","affected":[{"fixed":"0.0.3","introduced":"0.0.1"}],"component":"perdido","cve_ids":["CVE-2022-34054"],"ecosystem":"PyPI","epss":0.02,"exploited":false,"fixed_versions":["0.0.3"],"id":"tcs_01M5KGGJVFB1PSNWZANB8NV5NP","modified_at":"2023-11-08T04:09:41.369674Z","published_at":"2022-06-24T21:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2022-216","https://pypi.org/project/perdido/","https://github.com/ludovicmoncla/perdido/issues/1","http://pypi.doubanio.com/simple/request"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2022-216","url":"https://osv.dev/vulnerability/PYSEC-2022-216"}],"summary":"The Perdido package in PyPI v0.0.1 to v0.0.2 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and d"}