Search for packages
purl | pkg:pypi/aamiles@0.1.1 |
Next non-vulnerable version | None. |
Latest non-vulnerable version | None. |
Risk score | None |
Advisory | Source | Date Published | Summary | Fixed in package version |
---|---|---|---|---|
pypa_importer_v2/PYSEC-2022-43066
Aliases: CVE-2022-33001 |
https://github.com/pypa/advisory-database/blob/main/vulns/aamiles/PYSEC-2022-43066.yaml | June 24, 2022, 9:15 p.m. | The AAmiles package in PyPI v0.1.0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges. | There are no reported fixed by versions. |
pysec_importer_v2/PYSEC-2022-43066
|
https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip | June 24, 2022, 9:15 p.m. | The AAmiles package in PyPI v0.1.0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges. | There are no reported fixed by versions. |
Advisory | Source | Date Published | Summary | Aliases |
---|---|---|---|---|
gitlab_importer_v2/pypi/aamiles/CVE-2022-33001 | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/aamiles/CVE-2022-33001.yml | June 24, 2022, midnight | Inclusion of Functionality from Untrusted Control Sphere (Malicious Dependency) The AAmiles package in PyPI v0.1.0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges. |
CVE-2022-33001
|