Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/topydo@0.13
purl pkg:pypi/topydo@0.13
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-r4hv-hkz1-p7bz
Aliases:
CVE-2018-1000523
GHSA-h6h9-pphv-m266
PYSEC-2018-76
topydo contains a CWE-20: Improper Input Validation vulnerability in ListFormatParser::parse, file topydo/lib/ListFormat.py line 292 as of d4f843dac71308b2f29a7c2cdc76f055c3841523 that can result in Injection of arbitrary bytes to the terminal, including terminal escape code sequences. This attack appear to be exploitable via The victim must open a todo.txt with at least one specially crafted line.. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-02T04:38:14.465386+00:00 GitLab Importer Affected by VCID-r4hv-hkz1-p7bz https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/topydo/CVE-2018-1000523.yml 38.6.0