Pypi

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2022-34501 1Pypi 1Pypi Jun 17, 2026 Jul 22, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 The bin-collection package in PyPI before v0.1 included a code execution backdoor inserted by a third party.
CVE-2022-34500 1Pypi 1Pypi Jun 17, 2026 Jul 22, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 The bin-collect package in PyPI before v0.1 included a code execution backdoor inserted by a third party.
CVE-2022-34056 1Pypi 1Watertools Jun 17, 2026 Jun 24, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The Watertools package in PyPI v0.0.0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as we...Show more The Watertools package in PyPI v0.0.0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.Show less
CVE-2022-34055 1Pypi 1Drxhello Jun 17, 2026 Jun 24, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The drxhello package in PyPI v0.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well...Show more The drxhello package in PyPI v0.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.Show less
CVE-2022-34054 1Pypi 1Perdido Jun 17, 2026 Jun 24, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The Perdido package in PyPI v0.0.1 to v0.0.2 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys...Show more The Perdido package in PyPI v0.0.1 to v0.0.2 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.Show less
CVE-2022-34053 1Pypi 1Dr Web Engine Jun 17, 2026 Jun 24, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The DR-Web-Engine package in PyPI v0.2.0b0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys,...Show more The DR-Web-Engine package in PyPI v0.2.0b0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.Show less
CVE-2022-33004 1Pypi 1Beginner Jun 17, 2026 Jun 24, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The Beginner package in PyPI v0.0.2 to v0.0.4 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency key...Show more The Beginner package in PyPI v0.0.2 to v0.0.4 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.Show less
CVE-2022-33003 1Pypi 1Watools Jun 17, 2026 Jun 24, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The watools package in PyPI v0.0.1 to v0.0.8 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys...Show more The watools package in PyPI v0.0.1 to v0.0.8 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.Show less
CVE-2022-33002 1Pypi 1Explore Jun 17, 2026 Jun 24, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The KGExplore package in PyPI v0.1.1 to v0.1.2 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency ke...Show more The KGExplore package in PyPI v0.1.1 to v0.1.2 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.Show less
CVE-2022-33001 1Pypi 1Aamiles Jun 17, 2026 Jun 24, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The AAmiles package in PyPI v0.1.0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well...Show more The AAmiles package in PyPI v0.1.0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.Show less
CVE-2022-33000 1Pypi 1Ml Scanner Jun 17, 2026 Jun 24, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The ML-Scanner package in PyPI v0.1.0 to v0.1.5 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency k...Show more The ML-Scanner package in PyPI v0.1.0 to v0.1.5 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.Show less
CVE-2022-32999 1Pypi 1Cloudlabeling Jun 17, 2026 Jun 24, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The cloudlabeling package in PyPI v0.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as...Show more The cloudlabeling package in PyPI v0.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.Show less
CVE-2022-32998 1Pypi 1Cryptoasset Data Downloader Jun 17, 2026 Jun 24, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The cryptoasset-data-downloader package in PyPI v1.0.0 to v1.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and d...Show more The cryptoasset-data-downloader package in PyPI v1.0.0 to v1.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.Show less
CVE-2022-32997 1Pypi 1Rootinteractive Jun 17, 2026 Jun 24, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The RootInteractive package in PyPI v0.0.5 to v0.0.19b0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital cu...Show more The RootInteractive package in PyPI v0.0.5 to v0.0.19b0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.Show less
CVE-2022-32996 1Pypi 1Django Navbar Client Jun 17, 2026 Jun 24, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 The django-navbar-client package of v0.9.50 to v1.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital curr...Show more The django-navbar-client package of v0.9.50 to v1.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.Show less
CVE-2020-15904 1Pypi 1Bsdiff4 Jun 17, 2026 Jul 22, 2020 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 A buffer overflow in the patching routine of bsdiff4 before 1.2.0 allows an attacker to write to heap memory (beyond allocated bounds) via a crafted patch file.