Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2022-41387: d8s-pdfs

The d8s-pdfs package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-urls package. The affected version is 0.1.0.

CVE
#backdoor#pdf

Project description

Democritus Pdfs

Democritus functions[1] for working with PDFs.

[1] Democritus functions are simple, effective, modular, well-tested, and well-documented Python functions.

We use d8s (pronounced “dee-eights”) as an abbreviation for democritus (you can read more about this here).

Installation

pip install d8s-pdfs

Usage

You import the library like:

from d8s_pdfs import *

Once imported, you can use any of the functions listed below.

Functions

  • def pdf_read(pdf_path: str) -> Iterable[str]: “""Get the string from the PDF at the given path/URL.""”

Development

👋 If you want to get involved in this project, we have some short, helpful guides below:

  • contribute to this project 🥇
  • test it 🧪
  • lint it 🧹
  • explore it 🔭

If you have any questions or there is anything we did not cover, please raise an issue and we’ll be happy to help.

Credits

This package was created with Cookiecutter and Floyd Hightower’s Python project template.

Download files

Download the file for your platform. If you’re not sure which to choose, learn more about installing packages.

Source Distribution****Built Distribution

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda
CVE-2023-6905
CVE-2023-6903
CVE-2023-6904
CVE-2023-3907