CVE-2022-41383 : faille critique democritus d8s-archives (CVSS 9.8)

The d8s-archives package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-file-system package. The affected version is 0.1.0.

Sévérité

Critique (CVSS 9.8)

Vecteur CVSS

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitation active

Non signalée par la CISA

Publication

11 oct. 2022

Dernière mise à jour

17 juin 2026

• democritus d8s-archives

• Fiche CVE-2022-41383 sur le NVD (NIST)
• github.com/democritus-project/d8s-archives/issues/13
• pypi.org/project/d8s-archives/
• pypi.org/project/democritus-file-system/