What’s Vulnerable › Vulnerabilities
CVE-2022-30286
- Severity: high (CVSS 7.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 13.6% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2022-05-09 · updated 2026-06-17
Description
pyscriptjs (aka PyScript Demonstrator) in PyScript through 2022-05-04 allows a remote user to read Python source code.
Affected products
- Pyscript: through 2022-05-04
References
- http://packetstormsecurity.com/files/167069/PyScript-2022-05-04-Alpha-Source-Code-Disclosure.html
- https://cyber-guy.gitbook.io/cyber-guy/blogs/the-art-of-vulnerability-chaining-pyscript
- https://cyber-guy.gitbook.io/cyber-guy/pocs/pyscript-file-read
- https://github.com/pyscript/pyscript/commits/main
- https://www.exploit-db.com/exploits/50918
- http://packetstormsecurity.com/files/167069/PyScript-2022-05-04-Alpha-Source-Code-Disclosure.html
- https://cyber-guy.gitbook.io/cyber-guy/blogs/the-art-of-vulnerability-chaining-pyscript
- https://cyber-guy.gitbook.io/cyber-guy/pocs/pyscript-file-read
- https://github.com/pyscript/pyscript/commits/main
- https://www.exploit-db.com/exploits/50918
Get alerted when CVE-2022-30286 or the next vulnerability affects your stack