pyp2spec

PyPI1 known CVE affecting this package

Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.

CVEs affecting pyp2specpage 1 of 1

CVE-2026-42301HIGHCVSS 7.8EG 7.8✓ Fixed in 0.14.1
2026-05-09
vulnerable: 0.1.0 ... 0.9.0 (21 versions)
pyp2spec generates working Fedora RPM spec file for Python projects. Prior to version 0.14.1, pyp2spec was writing PyPI package metadata (e.g. the summary field) into the generated spec file without escaping RPM macro directives. When a pa…

Check whether pyp2spec is used in your infrastructure

EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for pyp2spec CVEs against the assets you own.

Start Free Scan →