Approved changes feed: RSS · Atom

cpe:2.3:a:pypi:cryptoasset-data-downloader:*:*:*:*:*:pypi:*:*

part: a version: * update: *

VendorPypi (f8c370c7-9d8a-5066-97a2-e90897980c1d)
ProductCryptoasset Data Downloader (e519fcce-30f2-5340-9a7a-96cb0fea3488)
Edition*
Language*
Software edition*
Target softwarepypi
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-32998 vulnerable 2026-06-03 14:47:23.545015 Details available
The cryptoasset-data-downloader package in PyPI v1.0.0 to v1.0.1 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.
Published: 2022-06-24T20:39:40.000Z
Updated: 2024-08-03T07:54:03.477Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.