CVE-2023-31543 (published 2023-06-30T00:00:00)
A dependency confusion in pipreqs v0.3.0 to v0.4.11 allows attackers to execute arbitrary code via uploading a crafted PyPI package to the chosen repository server.
Affected products: Vendor: n/a
Product: n/a
Versions: n/a