GHSA-74xw-82v7-hmrm
Improper Input Validation in python-dbusmock
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| PyPI | python-dbusmock | < 0.15.1 | 0.15.1 |
Details
As written in the advisory (Markdown source, shown as plain text).
python-dbusmock before version 0.15.1 AddTemplate() D-Bus method call or DBusTestCase.spawn_server_template() method could be tricked into executing malicious code if an attacker supplies a .pyc file.
References
External links from the advisory. They lead to third-party sites.