CVE-2022-30877

Name of the Vulnerable Software and Affected Versions keep versions prior to 1.2

Description The issue is related to a code-execution backdoor inserted by a third party in the keep package for Python. This backdoor is associated with a malicious dependency named request. Exploitation of this issue may allow a remote attacker to execute arbitrary code.

Recommendations For versions prior to 1.2, update to version 1.2 to resolve the issue. As a temporary workaround, consider avoiding the use of the request dependency until the issue is resolved.