There is 1 open security issue in bookworm.
1 issue left for the package maintainer to handle:
- CVE-2022-24065:
(needs triaging)
The package cookiecutter before 2.1.1 are vulnerable to Command Injection via hg argument injection. When calling the cookiecutter function from Python code with the checkout parameter, it is passed to the hg checkout command in a way that additional flags can be set. The additional flags can be used to perform a command injection.
You can find information about how to handle this issue in the security team's documentation.
![[bug history graph]](https://qa.debian.org/data/bts/graphs/c/cookiecutter.png){kind=link}