pypi ops-cli vulnerabilities

Latest pypi ops-cli CVEs

Newest publication first

1. CVE-2021-40720 Ops CLI Deserialization of Untrusted Data leads to Abritrary Code Execution

   Published 2021-10-15

   Critical·CVSS 9.8 EPSS 9.5%

   Ops CLI version 2.0.4 (and earlier) is affected by a Deserialization of Untrusted Data vulnerability to achieve arbitrary code execution when the checkout_repo function is called on a maliciously crafted file. An attacker can leverage this to execute arbitrary code on the victim...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.