Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mw9f-f52p-chpp

Опубликовано: 01 авг. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

It was discovered that uscan, a tool to scan/watch upstream sources for new releases of software, included in devscripts (a collection of scripts to make the life of a Debian Package maintainer easier), skips OpenPGP verification for files already downloaded even if a previous verification did fail.

It was discovered that uscan, a tool to scan/watch upstream sources for new releases of software, included in devscripts (a collection of scripts to make the life of a Debian Package maintainer easier), skips OpenPGP verification for files already downloaded even if a previous verification did fail.

EPSS

Процентиль: 4%
0.00022
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-347

Связанные уязвимости

CVSS3: 9.8
ubuntu
24 дня назад

It was discovered that uscan, a tool to scan/watch upstream sources for new releases of software, included in devscripts (a collection of scripts to make the life of a Debian Package maintainer easier), skips OpenPGP verification if the upstream source is already downloaded from a previous run even if the verification failed back then.

CVSS3: 9.8
nvd
24 дня назад

It was discovered that uscan, a tool to scan/watch upstream sources for new releases of software, included in devscripts (a collection of scripts to make the life of a Debian Package maintainer easier), skips OpenPGP verification if the upstream source is already downloaded from a previous run even if the verification failed back then.

CVSS3: 9.8
debian
24 дня назад

It was discovered that uscan, a tool to scan/watch upstream sources fo ...

EPSS

Процентиль: 4%
0.00022
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-347