GCVE-110-PYPI-2026-015671

Advisory Published

Vulnetix · Advisory published October 3, 2026

[P-SYSINFO-RECON] System information gathering (reconnaissance) — matched: hostname -I 2>/dev/null | sed 's/^/IPS=/' || ip -4 addr show 2>/dev/null | grep inet | awk '{print $2}' | tr '\\n' ' ' | sed 's/^/IPS=/'

Download JSON Open in Console

Weaknesses (CWE)

CWE-522Insufficiently Protected CredentialsCWE-200Exposure of Sensitive Information to an Unauthorized ActorCWE-506Embedded Malicious CodeCWE-94Improper Control of Generation of Code ('Code Injection')

Affected Products

Vendor	Product	Versions	Platforms
pypi	koi-handler	0.10.7 (affected), 0.10.10 (affected), 0.11.1 (affected), 0.11.2 (affected), 0.11.3 (affected), 0.11.4 (affected), 0.11.5 (affected)	—

References

advisory

Browse GCVE Records

3,105 records in the GCVE database · Updated October 4, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON