CVE-2019-7653

Name of the Vulnerable Software and Affected Versions Debian python-rdflib-tools version 4.2.2-1

Description The issue allows code injection due to the CLI tools loading Python modules from the current working directory. This is because the "python -m" command looks in this directory, as shown with rdf2dot. The problem is specific to the use of the debian/scripts directory.

Recommendations For Debian python-rdflib-tools version 4.2.2-1, consider restricting access to the debian/scripts directory to minimize the risk of code injection until a fix is available. As a temporary workaround, avoid using the CLI tools from the current working directory.