p PatchFirst

PatchFirst · Latest vulnerabilities

aiocpa vulnerabilities

Vulnerabilities published for aiocpa in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗
Filter vulnerabilities
Clear filters

Vulnerabilities: 2

  1. GHSA-486g-47cc-8wxf

    High · CVSS 8.3No fix published

    aiocpa contains credential harvesting code

    aiocpa is a user-facing library for generating color gradients of text. Version 0.1.13 introduced obfuscated, malicious code targeting Crypto Pay users, forwarding client credentials to a remote Telegram bot. All versions have been removed from PyPI.

    aiocpaPython
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

  2. PYSEC-2024-152

    Not ratedNo fix published

    aiocpa 0.1.13 contains credential harvesting code

    aiocpa is a user-facing library for generating color gradients of text. Version 0.1.13 introduced obfuscated, malicious code targeting Crypto Pay users, forwarding client credentials to a remote Telegram bot. All versions have been removed from PyPI.

    aiocpaPython
    Published Updated
    Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →