PYSEC-2021-348

See a problem?

Import Source

https://github.com/pypa/advisory-database/blob/main/vulns/simiki/PYSEC-2021-348.yaml

JSON Data

https://api.test.osv.dev/v1/vulns/PYSEC-2021-348

Aliases

Published

2021-08-27T19:15:00Z

Modified

2023-11-01T04:52:12.580051Z

Summary

[none]

Details

Command Injection in Simiki v1.6.2.1 and prior allows remote attackers to execute arbitrary system commands via line 64 of the component 'simiki/blob/master/simiki/config.py'.

References

Affected packages

PyPI / simiki

Package

Name: simiki; View open source insights on deps.dev
Purl: pkg:pypi/simiki

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

1.6.2.2

Affected versions

0.*

0.1.0

0.2.0

0.2.1

0.2.2

0.3.0

0.3.1

0.4.0

0.4.1

0.5.0

1.*

1.0.0

1.0.1

1.0.2

1.0.3

1.1

1.2

1.2.1

1.2.2

1.2.3

1.2.4

1.3

1.4

1.4.1

1.5.0-1

1.5.0.post1

1.5.1

1.6.0

1.6.0.1

1.6.2

1.6.2.1

Database specific

source

"https://github.com/pypa/advisory-database/blob/main/vulns/simiki/PYSEC-2021-348.yaml"