CVE-2022-34061

Description

The Catly-Translate package in PyPI v0.0.3 to v0.0.5 was discovered to contain a code execution backdoor. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.

How to fix CVE-2022-34061

To remediate CVE-2022-34061, upgrade the affected package to a fixed version below.

• PyPI/catly-translate—upgrade to 0.0.6 or later

Is CVE-2022-34061 being exploited?

Low — EPSS is 0.7%, meaning exploitation activity has not been observed at scale.

Affected packages (1)

• >= 0.0.3, < 0.0.6

References (3)

• PATCHpypi.org/project/catly-translate/
• REPORTgithub.com/CatNeverCodes/catly_translate/issues/1
• WEBpypi.doubanio.com/simple/request