CVE-2022-34057

9.8 criticalEPSS 1.4%

Critical (9.8) in scoptrial project scoptrial. EPSS 1.4% chance of exploitation in the next 30 days.

The Scoptrial package in PyPI version v0.0.5 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 73% of CVEs (scores of 2026-10-31)
Published: 2022-06-24
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

scoptrial_project:scoptrial

References

http://pypi.doubanio.com/simple/request
https://pypi.org/project/scoptrial/
http://pypi.doubanio.com/simple/request
https://pypi.org/project/scoptrial/

Check your stack JSON