VDB
GCVE-110-OSM-2026-2268
GCVE-110-OSM-2026-2268
Advisory PublishedCVSS 8.8/10
Malicious package detected. Behaviors: data exfiltration, code execution, obfuscated code.
Payload: asciitoart/fonts/otparse/sax/saxutils.py
Key findings:
- Shell Command Execution in asciitoart/fonts/list.py: "os.system("
- Python File Upload to Remote in asciitoart/fonts/otparse/sax/saxutils.py: "open(sysidfilename, "rb")
else:
source.setSystemId(urllib...."
IOCs:
- urls: http://www.pythonware.com, http://javascript.crockford.com/tdop/tdop.html, http://schemas.xmlsoap.org/wsdl/, http://purl.org/dc/elements/1.1/, http://www.iana.org/assignments/character-sets (+12 more)
- domains: source.byteStream.info, pythonware.com, www.pythonware.com, javascript.crockford.com, schemas.xmlsoap.org (+5 more)
- emails: fredrik@pythonware.com
- payloadFileHash: 3ec6d8e4a1414ee7c52e23a58dbcece9653021705a4d0c0aba0e96961258c5f3
Weaknesses (CWE)
CWE-506Embedded Malicious Code
Risk Scores
CVSS 3.1
8.8/10
High · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| unknown | asciitoart | * (affected) | — |
Aliases
Browse GCVE Records
74,581 records in the GCVE database · Updated July 24, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.