Gallopsled/pwntools
GitHub
Releases125
Frequency1 month 6 days
Last Release
Stars13.6K
CTF framework and exploit development library
CVE History
| CVE | Affected | Published | CVSS v3 | CVSS v2 |
|---|---|---|---|---|
| < 4.3.1 | 8.1 HIGH | 7.5 HIGH | ||
This affects the package pwntools before 4.3.1. The shellcraft generator for affected versions of this module are vulnerable to Server-Side Template Injection (SSTI), which can lead to remote code execution. | ||||