VYPR

PyPI package

lookatme

pkg:pypi/lookatme

Vulnerabilities (1)

  • CVE-2020-15271Oct 26, 2020
    affected < 2.3.0fixed 2.3.0

    In lookatme (python/pypi package) versions prior to 2.3.0, the package automatically loaded the built-in "terminal" and "file_loader" extensions. Users that use lookatme to render untrusted markdown may have malicious shell commands automatically run on their system. This is fixe