The d8s-ip-addresses for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-hypothesis package. The affected version is 0.1.0
{
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/40xxx/CVE-2022-40810.json",
"cna_assigner": "mitre"
}{
"source": "CPE_STRING",
"cpe": "cpe:2.3:a:democritus_ip_addresses_project:democritus_ip_addresses:0.1.0:*:*:*:*:python:*:*",
"extracted_events": [
{
"introduced": "0.1.0"
},
{
"last_affected": "0.1.0"
}
]
}