Approved changes feed: RSS · Atom

cpe:2.3:a:bitmessage:pybitmessage:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBitmessage (c4eca1aa-1cdd-5dfb-91d0-bbac8365ec02)
ProductPybitmessage (055a8c65-1e68-5ac9-a25a-e49cda8225e6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:docker/must/pybitmessage purl2cpe 2026-06-01 10:16:02.380963
pkg:github/bitmessage/pybitmessage purl2cpe 2026-06-01 10:16:02.380966
pkg:github/must-/pybitmessage purl2cpe 2026-06-01 10:16:02.380969
pkg:rpm/opensuse/pybitmessage purl2cpe 2026-06-01 10:16:02.380972

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-26917 vulnerable 2026-06-08 05:30:45.568628 Details available
PyBitmessage through 0.6.3.2 allows attackers to write screen captures to Potentially Unwanted Directories via a crafted apinotifypath value. NOTE: the discoverer states "security mitigation may not be necessary as there is no evidence yet that these screen intercepts are actually transported away from the local host." NOTE: it is unclear whether there are any common use cases in which apinotifypath is controlled by an attacker
Published: 2021-02-08T22:22:51.000Z
Updated: 2024-08-03T20:33:41.321Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.