VulnerableCode Package Details - pkg:pypi/motioneye@0.40rc2

Staging Environment: Content and features may be unstable or change without notice.

Search for packages

Package details: pkg:pypi/motioneye@0.40rc2

Essentials
History (6)

purl	pkg:pypi/motioneye@0.40rc2

Next non-vulnerable version	0.43.1b5
Latest non-vulnerable version	0.43.1b5
Risk	10.0

Vulnerabilities affecting this package (4)

Vulnerability	Summary	Fixed by
VCID-19se-6amw-xbhq Aliases: CVE-2022-25568 GHSA-2c7w-v459-cwgf PYSEC-2022-43141	MotionEye allows attackers to access sensitive information	0.43.1b1 Affected by 3 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-61vg-qm9f-gbhp Aliases: GHSA-26f6-wm47-7h7j	Duplicate Advisory: motionEye vulnerable to RCE via unsanitized motion config parameter	There are no reported fixed by versions.
VCID-akjw-q2d4-d7ac Aliases: CVE-2021-44255 GHSA-m2c7-42rf-c62f	Unrestricted Upload of File with Dangerous Type in motionEye	0.42.1 Affected by 4 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-ntf9-j7zg-zqes Aliases: CVE-2025-60787 GHSA-j945-qm58-4gjx	MotionEye v0.43.1b4 and before is vulnerable to OS Command Injection in configuration parameters such as image_file_name. Unsanitized user input is written to Motion configuration files, allowing remote authenticated attackers with admin access to achieve code execution when Motion is restarted.	0.43.1b5 Affected by 0 other vulnerabilities.

Vulnerabilities fixed by this package (0)

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-06-12T20:28:33.383636+00:00	GitLab Importer	Affected by	VCID-ntf9-j7zg-zqes	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/motioneye/CVE-2025-60787.yml	38.6.0
2026-06-12T20:22:56.085221+00:00	GitLab Importer	Affected by	VCID-61vg-qm9f-gbhp	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/motioneye/GHSA-26f6-wm47-7h7j.yml	38.6.0
2026-06-12T18:03:21.325878+00:00	GitLab Importer	Affected by	VCID-19se-6amw-xbhq	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/motioneye/CVE-2022-25568.yml	38.6.0
2026-06-12T17:56:53.361719+00:00	GitLab Importer	Affected by	VCID-akjw-q2d4-d7ac	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/motioneye/CVE-2021-44255.yml	38.6.0
2026-06-12T04:14:56.322270+00:00	Pypa Importer	Affected by	VCID-19se-6amw-xbhq	https://github.com/pypa/advisory-database/blob/main/vulns/motioneye/PYSEC-2022-43141.yaml	38.6.0
2026-06-11T20:57:16.666204+00:00	PyPI Importer	Affected by	VCID-19se-6amw-xbhq	https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip	38.6.0