Python Pyxdg vulnerabilities

2 vulnerabilities

Known vulnerabilities in Python Pyxdg, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

3.3CVE-2014-1624debianpyxdg+8
EPSS score
0.32%
Race condition in the xdg.BaseDirectory.get_runtime_dir function in python-xdg 0.25 allows local users to overwrite arbitrary files by pre-creating /tmp/pyxdg-runtime-dir-fallback-victim to point to a victim-owned location, then replacing it with a symlink to an attacker-controlled location once the get_runtime_dir function is called.7.5CVE-2019-12761debianpyxdg+13
EPSS score
2.10%
A code injection issue was discovered in PyXDG before 0.26 via crafted Python code in a Category element of a Menu XML document in a .menu file. XDG_CONFIG_DIRS must be set up to trigger xdg.Menu.parse parsing within the directory containing this file. This is due to a lack of sanitization in xdg/Menu.py before an eval call.