CVE-2022-44050

CRITICAL

d8s-networking <0.1.0 - Code Injection

Title source: llm

Description

The d8s-networking for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-json package. The affected version of d8s-htm is 0.1.0.

References (3)

Core 3

Core References

Issue Tracking, Third Party Advisory

https://github.com/dadadadada111/info/issues/14

Product

https://pypi.org/project/d8s-networking/

Product

https://pypi.org/project/democritus-json/

Scores

CVSS v3 9.8

EPSS 0.0053

EPSS Percentile 67.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-434

Status published

Products (1)

democritus/d8s-networking 0.1.0

Published Nov 07, 2022

Tracked Since Feb 18, 2026