https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-21T01:55:41.190911+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/brew-duplicity-cve-2014-1927 BREW-duplicity-CVE-2014-1927 — python-gnupg's shell_quote function does not properly quote strings 2026-10-21T01:55:41.195002+00:00

Affected: Homebrew: duplicity

The shell_quote function in python-gnupg 0.3.5 does not properly quote strings, which allows context-dependent attackers to execute arbitrary code via shell metacharacters in unspecified vectors, as demonstrated using "$(" command-substitution sequences, a different vulnerability than CVE-2014-1928. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7323.

 https://cve.radiocsirt.org/vuln/euvd-2026-98022 EUVD-2026-98022 2026-10-21T01:55:41.195063+00:00 EUVD-2026-98022 https://cve.radiocsirt.org/vuln/fkie_cve-2014-1927 fkie_cve-2014-1927 2026-10-21T01:55:41.195080+00:00

The shell_quote function in python-gnupg 0.3.5 does not properly quote strings, which allows context-dependent attackers to execute arbitrary code via shell metacharacters in unspecified vectors, as demonstrated using "$(" command-substitution sequences, a different vulnerability than CVE-2014-1928. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7323.

 https://cve.radiocsirt.org/vuln/ghsa-r3vr-prwv-86g9 GHSA-r3vr-prwv-86g9 — python-gnupg's shell_quote function does not properly quote strings 2026-10-21T01:55:41.195106+00:00

Affected: PyPI: python-gnupg

The shell_quote function in python-gnupg 0.3.5 does not properly quote strings, which allows context-dependent attackers to execute arbitrary code via shell metacharacters in unspecified vectors, as demonstrated using "$(" command-substitution sequences, a different vulnerability than CVE-2014-1928. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7323.

 https://cve.radiocsirt.org/vuln/gsd-2014-1927 gsd-2014-1927 2026-10-21T01:55:41.195128+00:00 gsd-2014-1927 https://cve.radiocsirt.org/vuln/pysec-2014-90 PYSEC-2014-90 2026-10-21T01:55:41.195139+00:00

Affected: PyPI: python-gnupg

The shell_quote function in python-gnupg 0.3.5 does not properly quote strings, which allows context-dependent attackers to execute arbitrary code via shell metacharacters in unspecified vectors, as demonstrated using "$(" command-substitution sequences, a different vulnerability than CVE-2014-1928. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7323.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-1927 UBUNTU-CVE-2014-1927 2026-10-21T01:55:41.195158+00:00

Affected: Ubuntu:14.04:LTS: python-gnupg

The shell_quote function in python-gnupg 0.3.5 does not properly quote strings, which allows context-dependent attackers to execute arbitrary code via shell metacharacters in unspecified vectors, as demonstrated using "$(" command-substitution sequences, a different vulnerability than CVE-2014-1928. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7323.