python-gnupg project vulnerabilities

Products

• python-gnupg 3

Latest python-gnupg project CVEs

Newest publication first

1. CVE-2014-1929 python-gnupg vulnerable to shell injection

   Published 2014-10-25

   Medium·CVSS 4.4

   python-gnupg 0.3.5 and 0.3.6 allows context-dependent attackers to have an unspecified impact via vectors related to "option injection through positional arguments." NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7323.

2. CVE-2014-1927 python-gnupg's shell_quote function does not properly quote strings

   Published 2014-10-25

   High·CVSS 7.5

   The shell_quote function in python-gnupg 0.3.5 does not properly quote strings, which allows context-dependent attackers to execute arbitrary code via shell metacharacters in unspecified vectors, as demonstrated using "$(" command-substitution sequences, a different vulnerability...

3. CVE-2014-1928 python-gnupg's shell_quote function does not properly escape characters

   Published 2014-10-25

   Medium·CVSS 4.6 EPSS 0.61%

   The shell_quote function in python-gnupg 0.3.5 does not properly escape characters, which allows context-dependent attackers to execute arbitrary code via shell metacharacters in unspecified vectors, as demonstrated using "" (backslash) characters to form multi-command sequences,...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.