Critical severity9.8NVD Advisory· Published Jun 24, 2022· Updated Jun 17, 2026
CVE-2022-33000
CVE-2022-33000
Description
The ML-Scanner package in PyPI v0.1.0 to v0.1.5 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:pypi:ml-scanner:*:*:*:*:*:pypi:*:*+ 1 more
- cpe:2.3:a:pypi:ml-scanner:*:*:*:*:*:pypi:*:*range: >=0.1.0,<=0.1.5
- (no CPE)range: 0.1.0 to 0.1.5
- PyPI/ML-Scannerdescription
Patches
Vulnerability mechanics
References
3- github.com/bOrionis/mls/issues/1nvdExploitIssue TrackingThird Party Advisory
- pypi.doubanio.com/simple/requestnvdProduct
- pypi.org/project/ml-scanner/nvdProduct
News mentions
0No linked articles in our index yet.