Arbitrary Byte Injection Affecting topydo package, versions [0,]
Threat Intelligence
EPSS
0.11% (45th
percentile)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-PYTHON-TOPYDO-42160
- published 28 Jun 2018
- disclosed 26 Jun 2018
- credit Unknown
Introduced: 26 Jun 2018
CVE-2018-1000523 Open this link in a new tabHow to fix?
There is no fix version for topydo.
Overview
topydo is a powerful and customizable todo.txt application for the console, inspired by the todo.txt CLI by Gina Trapani.
Affected versions of this package are vulnerable to Arbitrary Byte Injection to the terminal, including terminal escape code sequences.
References
CVSS Scores
version 3.1