Skip to content

Product

debian/pyxdg vulnerabilities

4 published CVES affecting debian/pyxdg, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
4
Critical
0
High
1
Medium
0
Low
1
Unscored
2
CISA KEV
0

Latest debian/pyxdg CVEs

Newest publication first

  3. CVE-2019-12761 Code Injection in PyXDG

    Published
    HighCVSS 7.5 EPSS 2.1%

    A code injection issue was discovered in PyXDG before 0.26 via crafted Python code in a Category element of a Menu XML document in a .menu file. XDG_CONFIG_DIRS must be set up to trigger xdg.Menu.parse parsing within the directory containing this file. This is due to a lack of sa...

  4. CVE-2014-1624 pyxdg Arbitrary File Overwrite via Race Condition

    Published
    LowCVSS 3.3 EPSS 0.32%

    Race condition in the xdg.BaseDirectory.get_runtime_dir function in python-xdg 0.25 allows local users to overwrite arbitrary files by pre-creating /tmp/pyxdg-runtime-dir-fallback-victim to point to a victim-owned location, then replacing it with a symlink to an attacker-controll...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.