pyp2spec vulnerabilities

CVEs whose affected-version data names the pyp2spec package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-42301High· 7.3

4mo ago

pyp2spec: pyp2spec: Arbitrary command execution via unescaped RPM macro directives (CVE-2026-42301)

A flaw was found in pyp2spec, a tool that generates Fedora RPM spec files for Python projects. This vulnerability allows a malicious Python Package Index (PyPI) package to execute arbitrary commands on a build machine. This occurs because …

▾ TwilightRed Hat · pyp2specEPSS 0.20%via CSAF