python-gnupg allows context-dependent attackers to execute arbitrary commands via shell metacharacters

ALTO 7.5CVE-2013-7323 · GHSA-c2fx-8r76-gh36 · PYSEC-2014-89 · Published 09/06/2014 · updated 17/06/2026

Em resumo

CVE-2013-7323 é uma vulnerabilidade ALTO (CVSS 7.5) que afeta python-gnupg, python-gnupg (vinay sajip).
Chance de exploração nos próximos 30 dias (EPSS): 2.9%, maior que 86.8% das vulnerabilidades.
Correção: atualize para 0.3.5, 0.3.7 ou posterior.

Package	Affected versions	Patched versions
python-gnupg PyPI	`< 0.3.5< 0.3.7`	`0.3.50.3.7`
python-gnupg vinay_sajip	`= 0.3.0= 0.3.1= 0.3.2= 0.3.3≤ 0.3.4`	No fix yet

python-gnupg before 0.3.5 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in unspecified vectors.

NVD description

python-gnupg before 0.3.5 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in unspecified vectors.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

PyPI

< 0.3.5< 0.3.7

0.3.50.3.7

= 0.3.0= 0.3.1= 0.3.2= 0.3.3≤ 0.3.4

No fix yet

Mais vulnerabilidades de python-gnupg

Ver tudo →