Critical severity9.8OSV Advisory· Published Feb 9, 2019· Updated Jun 17, 2026

CVE-2019-7653

Description

The Debian python-rdflib-tools 4.2.2-1 package for RDFLib 4.2.2 has CLI tools that can load Python modules from the current working directory, allowing code injection, because "python -m" looks in this directory, as demonstrated by rdf2dot. This issue is specific to use of the debian/scripts directory.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Rdflib/RdflibOSV
Range: 2.0.6, 2.3.0, 2.3.1, …
Rdflib Project/Rdflib
cpe:2.3:a:rdflib_project:rdflib:4.2.2:*:*:*:*:*:*:*
Canonical/Ubuntu Linux
cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:esm:*:*:*
Debian/linux2 versions
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
Debian/python-rdflib-toolsllm-fuzzy
Range: =4.2.2-1

Patches

Vulnerability mechanics

References

bugs.debian.org/921751nvdExploitMailing ListThird Party Advisory
lists.debian.org/debian-lts-announce/2019/03/msg00019.htmlnvdMailing ListThird Party Advisory
lists.debian.org/debian-lts-announce/2021/12/msg00026.htmlnvdMailing ListThird Party Advisory
usn.ubuntu.com/4535-1/nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000