VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Jul 28, 2022· Updated Jun 17, 2026

CVE-2022-34558

CVE-2022-34558

Description

WMAgent v1.3.3rc2 and 1.3.3rc1, reqmgr 2 1.4.1rc5 and 1.4.0rc2, reqmon 1.4.1rc5, and global-workqueue 1.4.1rc5 allows attackers to execute arbitrary code via a crafted dbs-client package.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
wmagentPyPI
>= 1.3.3rc1, < 2.0.42.0.4
reqmgr2PyPI
>= 1.4.0rc2, < 2.0.42.0.4
reqmonPyPI
>= 1.4.1rc5, < 2.0.42.0.4
global-workqueuePyPI
>= 1.4.1rc5, < 2.0.42.0.4

Affected products

11
  • Global Workqueue Project/Global Workqueue
    cpe:2.3:a:global-workqueue_project:global-workqueue:1.4.1:rc5:*:*:*:python:*:*
  • Reqmgr2 Project/Reqmgr22 versions
    cpe:2.3:a:reqmgr2_project:reqmgr2:1.4.0:rc2:*:*:*:python:*:*+ 1 more
    • cpe:2.3:a:reqmgr2_project:reqmgr2:1.4.0:rc2:*:*:*:python:*:*
    • cpe:2.3:a:reqmgr2_project:reqmgr2:1.4.1:rc5:*:*:*:python:*:*
  • Reqmon Project/Reqmon
    cpe:2.3:a:reqmon_project:reqmon:1.4.1:rc5:*:*:*:python:*:*
  • Wmagent Project/Wmagent2 versions
    cpe:2.3:a:wmagent_project:wmagent:1.3.3:rc1:*:*:*:python:*:*+ 1 more
    • cpe:2.3:a:wmagent_project:wmagent:1.3.3:rc1:*:*:*:python:*:*
    • cpe:2.3:a:wmagent_project:wmagent:1.3.3:rc2:*:*:*:python:*:*
  • WMAgent/WMAgentdescription
  • ghsa-coords4 versions
    pkg:pypi/global-workqueuepkg:pypi/reqmgr2pkg:pypi/reqmonpkg:pypi/wmagent
    >= 1.4.1rc5, < 2.0.4+ 3 more
    • (no CPE)range: >= 1.4.1rc5, < 2.0.4
    • (no CPE)range: >= 1.4.0rc2, < 2.0.4
    • (no CPE)range: >= 1.4.1rc5, < 2.0.4
    • (no CPE)range: >= 1.3.3rc1, < 2.0.4

Patches

Vulnerability mechanics

References

6

News mentions

0

No linked articles in our index yet.