CVE-2022-31313 - api-res-py package in PyPI 0.1 is vulnerable to a code execution backdoor in the request package

CRITICAL

api-res-py package in PyPI 0.1 is vulnerable to a code execution backdoor in the request package

Published Jun 8, 2022

9.8

CRITICAL

CVSS 3.1

EPSS 1.82%

api-res-py package in PyPI 0.1 is vulnerable to a code execution backdoor in the request package.

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

Link	Providers	Tags
http://pypi.doubanio.com/simple/request		x_refsource_MISCThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-0368		Advisory
https://github.com/advisories/GHSA-6978-4w92-428p		Advisory
https://github.com/pypa/advisory-database/tree/main/vulns/api-res-py/PYSEC-2022-43071.yaml
https://github.com/rakeshrkz7/as_api_res/issues/1		x_refsource_MISCBroken Link
https://nvd.nist.gov/vuln/detail/CVE-2022-31313
https://pypi.org/project/api-res-py		x_refsource_MISCThird Party Advisory