What is GHSA-c2fx-8r76-gh36?

GHSA-c2fx-8r76-gh36 is a security advisory published by GitHub Security Advisories with High severity. python-gnupg allows context-dependent attackers to execute arbitrary commands via shell metacharacters

Which CVE IDs does GHSA-c2fx-8r76-gh36 cover?

GHSA-c2fx-8r76-gh36 covers the following CVE IDs: CVE-2013-7323. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-c2fx-8r76-gh36?

GHSA-c2fx-8r76-gh36 has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

Which products are affected by GHSA-c2fx-8r76-gh36?

GHSA-c2fx-8r76-gh36 affects 1 product, including: pip/python-gnupg:\u003c 0.3.5.

GHSA-c2fx-8r76-gh36HighCVSS 9.8

python-gnupg allows context-dependent attackers to execute arbitrary commands via shell metacharacters

Vendor

GitHub Security Advisories

Published

November 6, 2018

Last Modified

April 14, 2025

🔗 CVE IDs covered (1)

CVE-2013-7323 →

📋 Description

python-gnupg before 0.3.5 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in unspecified vectors.

🎯 Affected products1

pip/python-gnupg:< 0.3.5

🔗 References (8)

https://nvd.nist.gov/vuln/detail/CVE-2013-7323
http://seclists.org/oss-sec/2014/q1/243
http://seclists.org/oss-sec/2014/q1/244
http://seclists.org/oss-sec/2014/q1/294
http://www.debian.org/security/2014/dsa-2946
https://code.google.com/p/python-gnupg
https://github.com/pypa/advisory-database/tree/main/vulns/python-gnupg/PYSEC-2014-89.yaml
https://github.com/advisories/GHSA-c2fx-8r76-gh36