Skip to content

Product

pypi py-candyreplace vulnerabilities

1 published CVE affecting pypi py-candyreplace, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
0
Low
0
Unscored
1
CISA KEV
0

Latest pypi py-candyreplace CVEs

Newest publication first

  1. MAL-2023-5012 Malicious code in py-candyreplace (PyPI)

    Published
    Unknown

    -= Per source details. Do not edit below this line.=- Source: checkmarx (ac521b80fd501a1c0394bdfc0a15912a182575a44e61b6b735ed9c366c792a35) EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.