Skip to content

← Public intelligence

PyPI package

python-libnmap

Open actionable advisories and recorded vendor fixes. This public package view has no inventory attached and cannot establish whether your deployment is affected. A vendor fix never resolves your finding; verify your installed version and the source guidance.

Open advisories

2 actionable advisories, newest first. Withdrawn advisories and news are excluded. Coverage is partial.

  1. Critical, CVSS 9.3PyPIAmendedPublished

    Argument injection in python-libnmap

    CVE-2022-30284 · GHSA-qwqv-j7jr-4hp6

    Affected
    • PyPI python-libnmap <= 0.7.2
    Fixed in
    0.7.3· Vendor fix available
    Issue
    In the python-libnmap package through 0.7.2 for Python, remote command execution can occur (if used in a client application that does not validate arguments).

    Recommended action: Upgrade to 0.7.3 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.

    Sources:osv.dev (1)github.com (2)Source checked Evidence →
  2. High, CVSS 7.5PyPIAmendedPublished

    XML Injection in python-libnmap

    CVE-2019-1010017 · GHSA-9ccv-p7fg-m73x

    Affected
    • PyPI python-libnmap < 0.7.2
    Fixed in
    0.7.2· Vendor fix available
    Issue
    python-libnmap is affected by a Billion-Laughs -style XML injection vulnerability. PoC

    Recommended action: Upgrade to 0.7.2 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.

    Sources:osv.dev (1)github.com (2)Source checked Evidence →