CVE-2022-34983

Name of the Vulnerable Software and Affected Versions scu-captcha versions 0.0.1 through 0.0.4

Description The issue concerns a code execution backdoor that was inserted by a third party into the scu-captcha package. This backdoor allows for code execution, posing a significant risk.

Recommendations For versions 0.0.1 through 0.0.4, remove the scu-captcha package to prevent potential code execution by the backdoor. As a temporary workaround, consider restricting access to any functionality that utilizes the scu-captcha package until a secure alternative is implemented.