p PatchFirst

PatchFirst · Свежие уязвимости

Уязвимости uniapi

За последние 30 дней в uniapi опубликовано уязвимостей: 0; в каталоге KEV: 0.

Фильтры уязвимостей
Сбросить фильтры

Уязвимостей: 2

  1. GHSA-gvvw-rr8m-fj76

    Без оценкиНет опубликованного исправления

    uniapi version 1.0.7 contained an information harvesting script.

    uniapi version 1.0.7 introduces code that would execute on import of the module and download a script from a remote URL, and would then execute the downloaded script in a thread. The downloaded script would harvest system information and `POST` the information to another remote URL. This code was found in the PyPI release artifacts and was not present in the public GitHub repository.

    Опубликовано Обновлено
  2. PYSEC-2025-2

    Без оценкиНет опубликованного исправления

    uniapi version 1.0.7 contained an information harvesting script.

    uniapi version 1.0.7 introduces code that would execute on import of the module and download a script from a remote URL, and would then execute the downloaded script in a thread. The downloaded script would harvest system information and `POST` the information to another remote URL. This code was found in the PyPI release artifacts and was not present in the public GitHub repository.

    Опубликовано Обновлено

Проверьте свой сервер

Сопоставьте установленный стек и версии со свежими базами уязвимостей.

Проверьте свой сервер →