Vulnerabilities for python-gnupg

First version without a known vulnerability: 0.4.4

Details

• GHSA-2fch-jvg5-crf62019-03-25

  Improper Input Validation python-gnupg

  Fixed in: 0.4.4

• GHSA-r3vr-prwv-86g92018-11-06

  python-gnupg's shell_quote function does not properly quote strings

  Fixed in: 0.3.6

• GHSA-c2fx-8r76-gh362018-11-06

  python-gnupg allows context-dependent attackers to execute arbitrary commands via shell metacharacters

  Fixed in: 0.3.7, 0.3.5

• GHSA-2jc8-4r6g-282j2018-11-06

  python-gnupg's shell_quote function does not properly escape characters

  Fixed in: 0.3.6

• GHSA-vcr5-xr9h-mvc52018-11-06

  python-gnupg vulnerable to shell injection

  Fixed in: 0.3.7