Homepage
About Snyk

pwntools@3.4.0b2 vulnerabilities

Pwntools CTF framework and exploit development library.

Go back to all versions of this package
Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the pwntools package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • H
Improper Control of Generation of Code ('Code Injection')

pwntools is a CTF framework and exploit development library. Written in Python, it is designed for rapid prototyping and development, and intended to make exploit writing as simple as possible.

Affected versions of this package are vulnerable to Improper Control of Generation of Code ('Code Injection'). The shellcraft generator for affected versions of this module are vulnerable to Server-Side Template Injection (SSTI), which can lead to remote code execution.

How to fix Improper Control of Generation of Code ('Code Injection')?

Upgrade pwntools to version 4.3.1 or higher.

[,4.3.1)
Go back to all versions of this package