Eval injection in Supybot/Limnoria

严重 9.8CVE-2019-19010 · GHSA-6g88-vr3v-76mf · PYSEC-2019-102 · Published 16/11/2019 · updated 17/06/2026

要点

CVE-2019-19010 是影响 limnoria, limnoria (limnoria project) 的严重 (CVSS 9.8)漏洞。
未来 30 天内被利用的概率（EPSS）：2.3%，高于 83.6% 的漏洞。
修复：升级到 2019.11.09 或更高版本。

Package	Affected versions	Patched versions
limnoria PyPI	`< 2019.11.09`	`2019.11.09`
limnoria limnoria_project	`< 2019.11.09`	`2019.11.09`

Description

Eval injection in the Math plugin of Limnoria (before 2019.11.09) and Supybot (through 2018-05-09) allows remote unprivileged attackers to disclose information or possibly have unspecified other impact via the calc and icalc IRC commands.

NVD description

References

nvd.nist.gov/vuln/detail/CVE-2019-19010 · ADVISORY
ProgVal/Limnoria commit 3848ae7 · WEB
ProgVal/Limnoria · PACKAGE
ProgVal/Limnoria · WEB
GitHub Advisory GHSA-6g88-vr3v-76mf · ADVISORY
pypa/advisory-database · WEB
lists.fedoraproject.org/archives/list/[email protected]/message/54CQM2TEXRADLE77VOMCPHL5PBHR3ZWJ · WEB
lists.fedoraproject.org/archives/list/[email protected]/message/5P2AGND54UIJV3WHOYO2YINIXSDGAAPO · WEB
lists.fedoraproject.org/archives/list/[email protected]/message/DRNOUHFEN75QAIKT4Y3HDN3TT5LSIWN2 · WEB

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free