https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T06:41:56.629395+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2014-1928 CVE-2014-1928 2026-09-28T06:41:56.634726+00:00

The shell_quote function in python-gnupg 0.3.5 does not properly escape characters, which allows context-dependent attackers to execute arbitrary code via shell metacharacters in unspecified vectors, as demonstrated using "\" (backslash) characters to form multi-command sequences, a different vulnerability than CVE-2014-1927. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7323.

 https://vulnerability.circl.lu/vuln/ghsa-2jc8-4r6g-282j GHSA-2jc8-4r6g-282j — python-gnupg's shell_quote function does not properly escape characters 2026-09-28T06:41:56.634815+00:00

Affected: PyPI: python-gnupg

The shell_quote function in python-gnupg 0.3.5 does not properly escape characters, which allows context-dependent attackers to execute arbitrary code via shell metacharacters in unspecified vectors, as demonstrated using "\" (backslash) characters to form multi-command sequences, a different vulnerability than CVE-2014-1927. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7323.

 https://vulnerability.circl.lu/vuln/pysec-2014-91 PYSEC-2014-91 2026-09-28T06:41:56.634866+00:00

Affected: PyPI: python-gnupg

The shell_quote function in python-gnupg 0.3.5 does not properly escape characters, which allows context-dependent attackers to execute arbitrary code via shell metacharacters in unspecified vectors, as demonstrated using "\" (backslash) characters to form multi-command sequences, a different vulnerability than CVE-2014-1927. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7323.