There are 2 open security issues in buster.
1 important issue:
- CVE-2022-30284:
In the python-libnmap package through 0.7.2 for Python, remote command execution can occur (if used in a client application that does not validate arguments).
1 issue left for the package maintainer to handle:
- CVE-2019-1010017:
(needs triaging)
libnmap < v0.6.3 is affected by: XML Injection. The impact is: Denial of service (DoS) by consuming resources. The component is: XML Parsing. The attack vector is: Specially crafted XML payload.
You can find information about how to handle this issue in the security team's documentation.
![[bug history graph]](https://qa.debian.org/data/bts/graphs/p/python-libnmap.png){kind=link}