pypi package reportIs nuitka safe?
1 known vulnerability, worst severity HIGH.
// reach6 direct dependencies
2 carry known advisories, worst HIGH
3 packages depend on it
an advisory here reaches each of them
// ai model usageNo published models are known to use this package.
epsschance of exploitation in 30 days, 44th percentile of all CVEs
xyz scoreCyberXYZ composite out of 10
fig. 01 — GHSA-4v3r-hqr9-69jf, the advisory selected below
// 1 advisories
Nuitka 0.8.4 and prior is vulnerable to command injection. A patch is available and anticipated to be part of the 0.9 release.
// cvss v3.1 vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Attack vector
- Local
- Attack complexity
- Low
- Privileges required
- Low
- User interaction
- None
- Scope
- Unchanged
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Checked 2026-10-23 at 18:53 UTC. The most recent advisory here was published 2022-06-13. Updated continuously from NVD, GHSA, OSV and CNA feeds.