https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-21T01:55:38.334456+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/brew-duplicity-cve-2014-1928 BREW-duplicity-CVE-2014-1928 — python-gnupg's shell_quote function does not properly escape characters 2026-10-21T01:55:38.340522+00:00

Affected: Homebrew: duplicity

The shell_quote function in python-gnupg 0.3.5 does not properly escape characters, which allows context-dependent attackers to execute arbitrary code via shell metacharacters in unspecified vectors, as demonstrated using "\" (backslash) characters to form multi-command sequences, a different vulnerability than CVE-2014-1927. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7323.

 https://cve.radiocsirt.org/vuln/euvd-2026-98017 EUVD-2026-98017 2026-10-21T01:55:38.340577+00:00 EUVD-2026-98017 https://cve.radiocsirt.org/vuln/fkie_cve-2014-1928 fkie_cve-2014-1928 2026-10-21T01:55:38.340594+00:00

The shell_quote function in python-gnupg 0.3.5 does not properly escape characters, which allows context-dependent attackers to execute arbitrary code via shell metacharacters in unspecified vectors, as demonstrated using "\" (backslash) characters to form multi-command sequences, a different vulnerability than CVE-2014-1927. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7323.

 https://cve.radiocsirt.org/vuln/ghsa-2jc8-4r6g-282j GHSA-2jc8-4r6g-282j — python-gnupg's shell_quote function does not properly escape characters 2026-10-21T01:55:38.340619+00:00

Affected: PyPI: python-gnupg

The shell_quote function in python-gnupg 0.3.5 does not properly escape characters, which allows context-dependent attackers to execute arbitrary code via shell metacharacters in unspecified vectors, as demonstrated using "\" (backslash) characters to form multi-command sequences, a different vulnerability than CVE-2014-1927. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7323.

 https://cve.radiocsirt.org/vuln/gsd-2014-1928 gsd-2014-1928 2026-10-21T01:55:38.340641+00:00 gsd-2014-1928 https://cve.radiocsirt.org/vuln/pysec-2014-91 PYSEC-2014-91 2026-10-21T01:55:38.340653+00:00

Affected: PyPI: python-gnupg

The shell_quote function in python-gnupg 0.3.5 does not properly escape characters, which allows context-dependent attackers to execute arbitrary code via shell metacharacters in unspecified vectors, as demonstrated using "\" (backslash) characters to form multi-command sequences, a different vulnerability than CVE-2014-1927. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7323.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2014-1928 Withdrawn: UBUNTU-CVE-2014-1928 2026-10-21T01:55:38.340671+00:00

Withdrawn by the publisher.

Affected: Ubuntu:14.04:LTS: python-gnupg, Ubuntu:16.04:LTS: python-gnupg

The shell_quote function in python-gnupg 0.3.5 does not properly escape characters, which allows context-dependent attackers to execute arbitrary code via shell metacharacters in unspecified vectors, as demonstrated using "\" (backslash) characters to form multi-command sequences, a different vulnerability than CVE-2014-1927. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7323.