{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.1"}],"component":"api-res-py","cve_ids":["CVE-2022-31313"],"ecosystem":"PyPI","epss":0.01942,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-6978-4w92-428p","id":"tcs_01M5KGHQ3QQN7C969KNP01V0X4","modified_at":"2026-07-01T20:22:49.403418Z","published_at":"2022-06-08T20:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2022-43071","https://github.com/rakeshrkz7/as_api_res/issues/1","http://pypi.doubanio.com/simple/request","https://pypi.org/project/api-res-py/","https://github.com/advisories/GHSA-6978-4w92-428p"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"PYSEC-2022-43071","url":"https://osv.dev/vulnerability/PYSEC-2022-43071"}],"summary":"api-res-py package in PyPI 0.1 is vulnerable to a code execution backdoor in the request package."}