Debian Pipenv vulnerabilities

1 known vulnerability affecting debian/pipenv.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

LOW1

Vulnerabilities

Page 1 of 1

CVE-2022-21668LOWCVSS 8.02022

CVE-2022-21668 [HIGH] CVE-2022-21668: pipenv - pipenv is a Python development workflow tool. Starting with version 2018.10.9 an... pipenv is a Python development workflow tool. Starting with version 2018.10.9 and prior to version 2022.1.8, a flaw in pipenv's parsing of requirements files allows an attacker to insert a specially crafted string inside a comment anywhere within a requirements.txt file, which will cause victims who use pipenv to install the requirements file to download dependencies