Skip to content

Product

pypi pkg-fallback vulnerabilities

1 published CVE affecting pypi pkg-fallback, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
0
Low
0
Unscored
1
CISA KEV
0

Latest pypi pkg-fallback CVEs

Newest publication first

  1. MAL-2026-6557 Malicious code in pkg-fallback (PyPI)

    Published
    Unknown

    -= Per source details. Do not edit below this line.=- Source: amazon-inspector (7f4ccaa9f059318782cd3b811f5bd6ea926e267e4b05dc4971d6acc6687d5d4f) setup.py performs an unconditional urllib.request.urlopen() at install time to a hardcoded plaintext bare-IP endpoint http://157.254.1...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.