~ / search / GHSA-jhjh-ghwx-6h7r

GHSA-jhjh-ghwx-6h7r

modulemd uses an unsafe function for processing externally provided data

Source: GitHub Advisory Database (reviewed) Critical CVE-2017-1002157

Packages

EcosystemPackageAffectedFixed in
PyPI modulemd < 1.3.2 1.3.2

Details

As written in the advisory (Markdown source, shown as plain text).

modulemd 1.3.1 and earlier uses an unsafe function for processing externally provided data, leading to remote code execution.

References

External links from the advisory. They lead to third-party sites.