python-gnupg allows context-dependent attackers to execute arbitrary commands via shell metacharacters

ALTO 7.5CVE-2013-7323 · GHSA-c2fx-8r76-gh36 · PYSEC-2014-89 · Published 09/06/2014 · updated 17/06/2026

En resumen

CVE-2013-7323 es una vulnerabilidad ALTO (CVSS 7.5) que afecta a python-gnupg, python-gnupg (vinay sajip).
Probabilidad de explotación en los próximos 30 días (EPSS): 2.9%, mayor que el 86.8% de las vulnerabilidades.
Solución: actualizar a 0.3.5, 0.3.7 o posterior.

Package	Affected versions	Patched versions
python-gnupg PyPI	`< 0.3.5< 0.3.7`	`0.3.50.3.7`
python-gnupg vinay_sajip	`= 0.3.0= 0.3.1= 0.3.2= 0.3.3≤ 0.3.4`	No fix yet

python-gnupg before 0.3.5 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in unspecified vectors.

NVD description

python-gnupg before 0.3.5 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in unspecified vectors.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

PyPI

< 0.3.5< 0.3.7

0.3.50.3.7

= 0.3.0= 0.3.1= 0.3.2= 0.3.3≤ 0.3.4

No fix yet

Más vulnerabilidades de python-gnupg

Ver todo →