PyPIPackage

utcp-cli

2 known vulnerabilities (2 high), with the versions each affects and the releases that fix them.

Version timeline

Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

CVE-2026-45369High 8.3
python-utcp: Command Injection via Unsanitized Argument Substitution in CLI Communication Protocol
Affected: fixed in 1.1.2.
Fixed in 1.1.2 (released May 10, 2026, 4 days before disclosure).
The latest release, 1.1.5, is not affected.
CVE-2026-45370High 7.7
python-utcp: Full Process Environment Exposed to CLI Subprocess - Secrets Leakage via Command Injection
Affected: fixed in 1.1.2.
Fixed in 1.1.2 (released May 10, 2026, 4 days before disclosure).
The latest release, 1.1.5, is not affected.