Lucene search

K
osvGoogleOSV:GHSA-VCR5-XR9H-MVC5
HistoryNov 06, 2018 - 11:12 p.m.

python-gnupg vulnerable to shell injection

2018-11-0623:12:48
Google
osv.dev
15

AI Score

6.3

Confidence

Low

EPSS

0.011

Percentile

84.6%

python-gnupg 0.3.5 and 0.3.6 allow for shell injection via a failure to escape backslashes in the shell_quote() function. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7323.

AI Score

6.3

Confidence

Low

EPSS

0.011

Percentile

84.6%