What is GHSA-45fw-qrx2-rj7m?

GHSA-45fw-qrx2-rj7m is a security advisory published by GitHub Security Advisories with High severity. In Python 3.8.4, sys.path restrictions specified in a python38._pth file are ignored, allowing...

Which CVE IDs does GHSA-45fw-qrx2-rj7m cover?

GHSA-45fw-qrx2-rj7m covers the following CVE IDs: CVE-2020-15801. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-45fw-qrx2-rj7m?

GHSA-45fw-qrx2-rj7m has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

GHSA-45fw-qrx2-rj7mHighCVSS 9.8

In Python 3.8.4, sys.path restrictions specified in a python38._pth file are ignored, allowing...

Vendor

GitHub Security Advisories

Published

May 24, 2022

Last Modified

October 14, 2026

🔗 CVE IDs covered (1)

CVE-2020-15801 →

📋 Description

In Python 3.8.4, sys.path restrictions specified in a python38._pth file are ignored, allowing code to be loaded from arbitrary locations. The ._pth file (e.g., the python._pth file) is not affected.

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2020-15801
https://github.com/python/cpython/pull/21495
https://bugs.python.org/issue41304
https://cert-portal.siemens.com/productcert/html/ssa-398330.html
https://security.netapp.com/advisory/ntap-20200731-0003
https://github.com/advisories/GHSA-45fw-qrx2-rj7m