CVE-2020-26292

CRITICO 9.8CVE-2020-26292 · Published 04/01/2021 · updated 17/06/2026

In breve

CVE-2020-26292 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda creeper (chatter-social).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.87%, superiore al 59.0% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
creeper chatter-social	`= 1.1.3`	No fix yet

Description

Creeper is an experimental dynamic, interpreted language. The binary release of Creeper Interpreter 1.1.3 contains potential malware. The compromised binary release was available for a few hours between December 26, 2020 at 3:22 PM EST to December 26, 2020 at 11:00 PM EST. If you used the source code, you are **NOT** affected. This only affects the binary releases. The binary of unknown quality has been removed from the release. If you have downloaded the binary, please delete it and run a reputable antivirus scanner to ensure that your computer is clean.

References

chatter-social/Creeper security advisory · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free