← All advisories

Critical severity9.8NVD Advisory· Published Mar 14, 2018· Updated Jun 17, 2026

CVE-2018-8097

CVE-2018-8097

Description

io/mongo/parser.py in Eve (aka pyeve) before 0.7.5 allows remote attackers to execute arbitrary code via Code Injection in the where parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
evePyPI	< 0.7.5	0.7.5

Affected products

2

ghsa-coords
pkg:pypi/eve
Range: < 0.7.5
Python Eve/Eve
cpe:2.3:a:python-eve:eve:*:*:*:*:*:*:*:*
Range: <0.7.5

Patches

Vulnerability mechanics

References

5

github.com/pyeve/eve/commit/f8f7019ffdf9b4e05faf95e1f04e204aa4c91f98nvdPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-8jxq-75rw-fhj9ghsaADVISORY
github.com/pyeve/eve/issues/1101nvdThird Party AdvisoryWEB
nvd.nist.gov/vuln/detail/CVE-2018-8097ghsaADVISORY
github.com/pypa/advisory-database/tree/main/vulns/eve/PYSEC-2018-8.yamlghsaWEB

News mentions

0

No linked articles in our index yet.