ZDI-CAN-25377 HIGH 7.3 Overdue Nov 14, 2024

Python Packaging Authority

The Python Packaging Authority maintains critical infrastructure for Python package distribution and management. This high-severity vulnerability requires local access and user interaction but can compromise confidentiality, integrity, and availability once exploited by an authenticated attacker. Security teams should monitor for patches between now and the March 2025 deadline and prioritize updates for systems that handle Python package management or dependencies.

Advisory Details
Researcher Discovered by: Anonymous
Reported November 14, 2024
Deadline March 14, 2025 398d overdue
CVSS Vector AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy