GHSA-qwqv-j7jr-4hp6

Argument injection in python-libnmap

Source: GitHub Advisory Database (reviewed) Critical CVE-2022-30284

Packages

Ecosystem	Package	Affected	Fixed in
PyPI	python-libnmap	< 0.7.3	0.7.3

Details

As written in the advisory (Markdown source, shown as plain text).

In the python-libnmap package through 0.7.2 for Python, remote command execution can occur (if used in a client application that does not validate arguments).

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2022-30284 advisory
https://github.com/savon-noir/python-libnmap/commit/c36fecde90017befeb4853396d0e2aac93c95b64 web
https://github.com/pypa/advisory-database/tree/main/vulns/python-libnmap/PYSEC-2022-42999.yaml web
https://github.com/savon-noir/python-libnmap package
https://github.com/savon-noir/python-libnmap/releases web
https://github.com/savon-noir/python-libnmap/releases/tag/v0.7.3 web
https://libnmap.readthedocs.io/en/latest/process.html#using-libnmap-process web
https://pypi.org/project/python-libnmap web
https://www.swascan.com/security-advisory-libnmap-2 web