The Python Gnupg Project maintains a wrapper library that interfaces with GnuPG for cryptographic operations within Python applications, a focused but supply-chain-critical component embedded across tools and libraries that depend on programmatic encryption and key management. The sparse observed vulnerability history centers on the library's role as a bridge between Python code and underlying GnuPG functionality. Current severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Python Gnupg Project over time
Signals from CVEs in this vendor scope (3 CVEs).
3 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2014-1927HIGH The shell_quote function in python-gnupg 0.3.5 does not properly quote strings, which allows context-dependent attackers to execute arbitrary code via shell metacharacters in unspe | Oct 25, 2014 | 7.5 | 26 | NO | NO |
CVE-2014-1929MEDIUM python-gnupg 0.3.5 and 0.3.6 allows context-dependent attackers to have an unspecified impact via vectors related to "option injection through positional arguments." NOTE: this vul | Oct 25, 2014 | 4.4 | 14 | NO | NO |
CVE-2014-1928MEDIUM The shell_quote function in python-gnupg 0.3.5 does not properly escape characters, which allows context-dependent attackers to execute arbitrary code via shell metacharacters in u | Oct 25, 2014 | 4.6 | 14 | NO | NO |
Signals from CVEs in this vendor scope (3 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Python Gnupg Project.
Media articles that mention a CVE ID that affects a product developed by Python Gnupg Project — matched by CVE ID, not by vendor name.