Every CVE Search/ Get API key

CVE-2022-40898

pypa/wheel vulnerable to Regular Expression denial of service (ReDoS)

7.5 HighFix available

An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
None
Integrity
None
Availability
High

Exploit likelihood

2.84%Up 1.8 points since Dec 23, 2022
90%50%10%1%

What each source reports

NVD Score used 7.5

An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli.

Record
CVE-2022-40898
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-20
Updated
2026-11-02
CVE List 7.5

An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli.

Record
CVE-2022-40898
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-20
Updated
2026-11-02
EUVDEUVD-2022-0364 7.5

An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli.

Record
EUVD-2022-0364
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-qwmp-2cf2-g9g6 7.5

pypa/wheel vulnerable to Regular Expression denial of service (ReDoS)

Python Packaging Authority (PyPA) Wheel is a reference implementation of the Python wheel packaging standard. Wheel 0.37.1 and earlier are vulnerable to a Regular Expression denial of service via attacker controlled input to the wheel cli. The vulnerable regex is used to verify the validity of Wheel file names. This has been patched in version 0.38.1.

Record
GHSA-qwmp-2cf2-g9g6
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-1333
Updated
2026-11-02
OSVAZL-12098 7.5

CVE-2022-40898 affecting package python-wheel for versions less than 0.33.6-8

An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli.

Record
AZL-12098
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSV 7.5

An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli.

Record
CVE-2022-40898
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
Show 20 moreShow less
OSVDEBIAN-CVE-2022-40898 7.5

An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli.

Record
DEBIAN-CVE-2022-40898
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-03
OSVGHSA-qwmp-2cf2-g9g6 7.5

pypa/wheel vulnerable to Regular Expression denial of service (ReDoS)

Python Packaging Authority (PyPA) Wheel is a reference implementation of the Python wheel packaging standard. Wheel 0.37.1 and earlier are vulnerable to a Regular Expression denial of service via attacker controlled input to the wheel cli. The vulnerable regex is used to verify the validity of Wheel file names. This has been patched in version 0.38.1.

Record
GHSA-qwmp-2cf2-g9g6
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-1333
Updated
2026-11-02
OSVOESA-2023-1904 7.5

python-wheel security update

A built-package format for Python. A wheel is a ZIP-format archive with a specially formatted filename and the .whl extension. It is designed to contain all the files for a PEP 376 compatible install in a way that is very close to the on-disk format.

Security Fix(es):

An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli.(CVE-2022-40898)

Record
OESA-2023-1904
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2023:6712 7.5

Red Hat Security Advisory: python-wheel security update

Record
RHSA-2023:6712
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRHSA-2023:6793 8.6

Red Hat Security Advisory: rh-python38-python security update

Record
RHSA-2023:6793
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Updated
2026-11-02
OSVRHSA-2024:10761 7.5

Red Hat Security Advisory: rhc-worker-playbook security update

Record
RHSA-2024:10761
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2023:6712 7.5

Moderate: python-wheel security update

Wheel is the reference implementation of the Python wheel packaging standard, as defined in PEP 427.

Security Fix(es):

  • python-wheel: remote attackers can cause denial of service via attacker controlled input to wheel cli (CVE-2022-40898)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 9.3 Release Notes linked from the References section.

Record
RLSA-2023:6712
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2022-40898 7.5

An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli.

Record
UBUNTU-CVE-2022-40898
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVALSA-2023:6712 No score

Moderate: python-wheel security update

Wheel is the reference implementation of the Python wheel packaging standard, as defined in PEP 427.

Security Fix(es):

  • python-wheel: remote attackers can cause denial of service via attacker controlled input to wheel cli (CVE-2022-40898)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2023:6712
Updated
2026-11-02
OSVMGASA-2023-0218 No score

Updated python-wheel packages fix security vulnerability

Denial of service via attacker controlled input to wheel cli (CVE-2022-40898)

Record
MGASA-2023-0218
Updated
2026-11-02
OSVopenSUSE-SU-2024:12645-1 No score

python310-ciscoconfparse-1.7.7-1.1 on GA media

These are all security issues fixed in the python310-ciscoconfparse-1.7.7-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12645-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:13214-1 No score

python310-wheel-0.41.2-2.1 on GA media

These are all security issues fixed in the python310-wheel-0.41.2-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:13214-1
Updated
2026-11-02
OSVPYSEC-2022-43017 No score

An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli.

Record
PYSEC-2022-43017
Updated
2026-11-02
OSVROOT-APP-PYPI-CVE-2022-40898 No score

CVE-2022-40898 in rootio-wheel - Patched by Root

Root has patched CVE-2022-40898 in the rootio-wheel package for Root:PyPI. Multiple fixed versions available.

Record
ROOT-APP-PYPI-CVE-2022-40898
Updated
2026-11-02
OSVSUSE-SU-2023:0088-1 No score

Security update for python-wheel

This update for python-wheel fixes the following issues:

  • CVE-2022-40898: Fixed an excessive use of CPU that could be triggered via a crafted regular expression (bsc#1206670).
Record
SUSE-SU-2023:0088-1
Updated
2026-11-02
OSVSUSE-SU-2023:0088-2 No score

Security update for python-wheel

This update for python-wheel fixes the following issues:

  • CVE-2022-40898: Fixed an excessive use of CPU that could be triggered via a crafted regular expression (bsc#1206670).
Record
SUSE-SU-2023:0088-2
Updated
2026-11-02
OSVSUSE-SU-2023:0089-1 No score

Security update for python-wheel

This update for python-wheel fixes the following issues:

  • CVE-2022-40898: Fixed an excessive use of CPU that could be triggered via a crafted regular expression (bsc#1206670).
Record
SUSE-SU-2023:0089-1
Updated
2026-11-02
OSVUSN-5821-1 No score

wheel vulnerability

Sebastian Chnelik discovered that wheel incorrectly handled certain file names when validated against a regex expression. An attacker could possibly use this issue to cause a denial of service.

Record
USN-5821-1
Updated
2026-11-02
OSVUSN-5821-2 No score

wheel vulnerability

USN-5821-1 fixed a vulnerability in wheel. This update provides the corresponding update for Ubuntu 16.04 ESM. Original advisory details:

Sebastian Chnelik discovered that wheel incorrectly handled certain file names when validated against a regex expression. An attacker could possibly use this issue to cause a denial of service.

Record
USN-5821-2
Updated
2026-11-02
OSVUSN-5821-3 No score

python-pip regression

USN-5821-1 fixed a vulnerability in wheel and pip. Unfortunately, it was missing a commit to fix it properly in pip.

We apologize for the inconvenience.

Original advisory details:

Sebastian Chnelik discovered that wheel incorrectly handled certain file names when validated against a regex expression. An attacker could possibly use this issue to cause a denial of service.

Record
USN-5821-3
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
wheel
PyPI
 before 0.38.1
0.38.1
python3-wheel
AlmaLinux:9
 before 1:0.36.2-8.el9
1:0.36.2-8.el9
python3-wheel-wheel
AlmaLinux:9
 before 1:0.36.2-8.el9
1:0.36.2-8.el9
python-wheel
Azure Linux:2
 before 0.33.6-8
0.33.6-8
wheel
Debian:12
 before 0.38.0-1
0.38.0-1
wheel
Debian:13
 before 0.38.0-1
0.38.0-1
wheel
Debian:14
 before 0.38.0-1
0.38.0-1
wheel
PyPI
 before 0.38.1, plus listed versions
0.10.10.00.10.10.10.20.10.3
Show 45 moreShow less
0.11.00.12.00.13.00.14.00.15.00.16.00.17.00.18.00.19.00.20.21.00.22.00.23.00.24.00.25.00.26.00.27.00.28.00.29.00.30.30.00.30.0a00.31.00.31.10.32.00.32.10.32.20.32.30.33.00.33.10.33.40.33.50.33.60.34.00.34.10.34.20.35.00.35.10.36.00.36.10.36.20.37.00.37.10.38.00.4
0.38.1
python-wheel
Mageia:8
 before 0.35.1-2.1.mga8
0.35.1-2.1.mga8
python-wheel
openEuler:20.03-LTS-SP1
 before 0.31.1-6.oe1
0.31.1-6.oe1
Show 61 moreShow less
Affected packages
PackageAffectedFixed
python-wheel
openEuler:20.03-LTS-SP3
 before 0.31.1-6.oe1
0.31.1-6.oe1
python-wheel
openEuler:22.03-LTS
 before 0.37.0-6.oe2203sp2
0.37.0-6.oe2203sp2
python-wheel
openEuler:22.03-LTS-SP1
 before 0.37.0-6.oe2203sp1
0.37.0-6.oe2203sp1
python-wheel
openEuler:22.03-LTS-SP2
 before 0.37.0-6.oe2203sp2
0.37.0-6.oe2203sp2
python-wheel
Red Hat:enterprise_linux:9::crb
 before 1:0.36.2-8.el9
1:0.36.2-8.el9
python3-wheel
Red Hat:enterprise_linux:9::crb
 before 1:0.36.2-8.el9
1:0.36.2-8.el9
python3-wheel-wheel
Red Hat:enterprise_linux:9::crb
 before 1:0.36.2-8.el9
1:0.36.2-8.el9
rh-python38-python
Red Hat:rhel_software_collections:3::el7
From an advisory covering 8 CVEs
 before 0:3.8.18-2.el7
0:3.8.18-2.el7
rh-python38-python-debug
Red Hat:rhel_software_collections:3::el7
From an advisory covering 8 CVEs
 before 0:3.8.18-2.el7
0:3.8.18-2.el7
rh-python38-python-debuginfo
Red Hat:rhel_software_collections:3::el7
From an advisory covering 8 CVEs
 before 0:3.8.18-2.el7
0:3.8.18-2.el7
rh-python38-python-devel
Red Hat:rhel_software_collections:3::el7
From an advisory covering 8 CVEs
 before 0:3.8.18-2.el7
0:3.8.18-2.el7
rh-python38-python-idle
Red Hat:rhel_software_collections:3::el7
From an advisory covering 8 CVEs
 before 0:3.8.18-2.el7
0:3.8.18-2.el7
rh-python38-python-libs
Red Hat:rhel_software_collections:3::el7
From an advisory covering 8 CVEs
 before 0:3.8.18-2.el7
0:3.8.18-2.el7
rh-python38-python-pip
Red Hat:rhel_software_collections:3::el7
From an advisory covering 8 CVEs
 before 0:19.3.1-4.el7
0:19.3.1-4.el7
rh-python38-python-pip-wheel
Red Hat:rhel_software_collections:3::el7
From an advisory covering 8 CVEs
 before 0:19.3.1-4.el7
0:19.3.1-4.el7
rh-python38-python-rpm-macros
Red Hat:rhel_software_collections:3::el7
From an advisory covering 8 CVEs
 before 0:3.8.18-2.el7
0:3.8.18-2.el7
rh-python38-python-srpm-macros
Red Hat:rhel_software_collections:3::el7
From an advisory covering 8 CVEs
 before 0:3.8.18-2.el7
0:3.8.18-2.el7
rh-python38-python-test
Red Hat:rhel_software_collections:3::el7
From an advisory covering 8 CVEs
 before 0:3.8.18-2.el7
0:3.8.18-2.el7
rh-python38-python-tkinter
Red Hat:rhel_software_collections:3::el7
From an advisory covering 8 CVEs
 before 0:3.8.18-2.el7
0:3.8.18-2.el7
rh-python38-python-setuptools
Red Hat:rhel_software_collections:3::el7
From an advisory covering 8 CVEs
 before 0:41.6.0-8.el7
0:41.6.0-8.el7
rh-python38-python-setuptools-wheel
Red Hat:rhel_software_collections:3::el7
From an advisory covering 8 CVEs
 before 0:41.6.0-8.el7
0:41.6.0-8.el7
rh-python38-python-wheel
Red Hat:rhel_software_collections:3::el7
From an advisory covering 8 CVEs
 before 0:0.33.6-9.el7
0:0.33.6-9.el7
rh-python38-python-wheel-wheel
Red Hat:rhel_software_collections:3::el7
From an advisory covering 8 CVEs
 before 0:0.33.6-9.el7
0:0.33.6-9.el7
rh-python38-python-cryptography
Red Hat:rhel_software_collections:3::el7
From an advisory covering 8 CVEs
 before 0:2.8-6.el7
0:2.8-6.el7
rh-python38-python-cryptography-debuginfo
Red Hat:rhel_software_collections:3::el7
From an advisory covering 8 CVEs
 before 0:2.8-6.el7
0:2.8-6.el7
rh-python38-python-requests
Red Hat:rhel_software_collections:3::el7
From an advisory covering 8 CVEs
 before 0:2.22.0-11.el7
0:2.22.0-11.el7
rhc-worker-playbook
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:0.1.10-1.el9_5
0:0.1.10-1.el9_5
rhc-worker-playbook-debuginfo
Red Hat:enterprise_linux:9::appstream
From an advisory covering 4 CVEs
 before 0:0.1.10-1.el9_5
0:0.1.10-1.el9_5
python-wheel
Rocky Linux:9
 before 1:0.36.2-8.el9
1:0.36.2-8.el9
python-wheel
SUSE:Linux Enterprise Module for Basesystem 15 SP4
 before 0.32.3-150100.6.5.1
0.32.3-150100.6.5.1
python-wheel
SUSE:Linux Enterprise Module for Package Hub 15 SP4
 before 0.32.3-150100.6.5.1
0.32.3-150100.6.5.1
python-wheel
SUSE:Linux Enterprise Module for Public Cloud 15 SP1
 before 0.32.3-150100.6.5.1
0.32.3-150100.6.5.1
python-wheel
SUSE:Linux Enterprise Real Time 15 SP3
 before 0.32.3-150100.6.5.1
0.32.3-150100.6.5.1
python-wheel
openSUSE:Leap 15.4
 before 0.32.3-150100.6.5.1
0.32.3-150100.6.5.1
python-wheel
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
 before 0.32.3-150100.6.5.1
0.32.3-150100.6.5.1
python-wheel
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
 before 0.32.3-150100.6.5.1
0.32.3-150100.6.5.1
python-wheel
SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS
 before 0.32.3-150100.6.5.1
0.32.3-150100.6.5.1
python-wheel
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
 before 0.32.3-150100.6.5.1
0.32.3-150100.6.5.1
python-wheel
SUSE:Linux Enterprise Server 15 SP1-LTSS
 before 0.32.3-150100.6.5.1
0.32.3-150100.6.5.1
python-wheel
SUSE:Linux Enterprise Server 15 SP2-LTSS
 before 0.32.3-150100.6.5.1
0.32.3-150100.6.5.1
python-wheel
SUSE:Linux Enterprise Server 15 SP3-LTSS
 before 0.32.3-150100.6.5.1
0.32.3-150100.6.5.1
python-wheel
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
 before 0.32.3-150100.6.5.1
0.32.3-150100.6.5.1
python-wheel
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
 before 0.32.3-150100.6.5.1
0.32.3-150100.6.5.1
python-wheel
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
 before 0.32.3-150100.6.5.1
0.32.3-150100.6.5.1
python-wheel
SUSE:Manager Proxy 4.2
 before 0.32.3-150100.6.5.1
0.32.3-150100.6.5.1
python-wheel
SUSE:Manager Server 4.2
 before 0.32.3-150100.6.5.1
0.32.3-150100.6.5.1
python-wheel
SUSE:Enterprise Storage 6
 before 0.32.3-150100.6.5.1
0.32.3-150100.6.5.1
python-wheel
SUSE:Enterprise Storage 7
 before 0.32.3-150100.6.5.1
0.32.3-150100.6.5.1
python-wheel
SUSE:Enterprise Storage 7.1
 before 0.32.3-150100.6.5.1
0.32.3-150100.6.5.1
python-wheel
SUSE:Linux Enterprise Module for Public Cloud 12
 before 0.30.0-2.7.1
0.30.0-2.7.1
python-pip
Ubuntu:Pro:14.04:LTS
 before 1.5.4-1ubuntu4+esm3, plus listed versions
1.4.1-21.5.4-11.5.4-1ubuntu11.5.4-1ubuntu31.5.4-1ubuntu41.5.4-1ubuntu4+esm11.5.4-1ubuntu4+esm2
1.5.4-1ubuntu4+esm3
wheel
Ubuntu:Pro:14.04:LTS
 before 0.24.0-1~ubuntu1.1+esm1, plus listed versions
0.24.0-1~ubuntu10.24.0-1~ubuntu1.1
0.24.0-1~ubuntu1.1+esm1
python-pip
Ubuntu:Pro:16.04:LTS
 before 8.1.1-2ubuntu0.6+esm4, plus listed versions
1.5.6-7ubuntu11.5.6-7ubuntu28.0.2-78.0.3-18.0.3-2
Show 10 moreShow less
8.1.0-18.1.0-28.1.1-18.1.1-28.1.1-2ubuntu0.18.1.1-2ubuntu0.28.1.1-2ubuntu0.48.1.1-2ubuntu0.68.1.1-2ubuntu0.6+esm28.1.1-2ubuntu0.6+esm3
8.1.1-2ubuntu0.6+esm4
wheel
Ubuntu:Pro:16.04:LTS
 before 0.29.0-1ubuntu0.1~esm1, plus listed versions
0.26.0-10.29.0-1
0.29.0-1ubuntu0.1~esm1
python-pip
Ubuntu:18.04:LTS
 before 9.0.1-2.3~ubuntu1.18.04.7, plus listed versions
9.0.1-29.0.1-2.3~ubuntu19.0.1-2.3~ubuntu1.18.04.19.0.1-2.3~ubuntu1.18.04.29.0.1-2.3~ubuntu1.18.04.39.0.1-2.3~ubuntu1.18.04.49.0.1-2.3~ubuntu1.18.04.59.0.1-2.3~ubuntu1.18.04.6
9.0.1-2.3~ubuntu1.18.04.7
wheel
Ubuntu:18.04:LTS
 before 0.30.0-0.2ubuntu0.1, plus listed versions
0.29.0-20.30.0-0.2
0.30.0-0.2ubuntu0.1
python-pip
Ubuntu:20.04:LTS
 before 20.0.2-5ubuntu1.8, plus listed versions
18.1-518.1-5build118.1-5ubuntu120.0.2-220.0.2-4
Show 8 moreShow less
20.0.2-520.0.2-5ubuntu120.0.2-5ubuntu1.120.0.2-5ubuntu1.320.0.2-5ubuntu1.420.0.2-5ubuntu1.520.0.2-5ubuntu1.620.0.2-5ubuntu1.7
20.0.2-5ubuntu1.8
wheel
Ubuntu:20.04:LTS
 before 0.34.2-1ubuntu0.1, plus listed versions
0.32.3-20.33.6-10.33.6-1ubuntu10.33.6-20.34.2-1
0.34.2-1ubuntu0.1
python-pip
Ubuntu:22.04:LTS
 before 22.0.2+dfsg-1ubuntu0.2, plus listed versions
20.3.4-421.3.1+dfsg-322.0.2+dfsg-122.0.2+dfsg-1ubuntu0.1
22.0.2+dfsg-1ubuntu0.2
wheel
Ubuntu:22.04:LTS
 before 0.37.1-2ubuntu0.22.04.1, plus listed versions
0.34.2-10.37.1-2
0.37.1-2ubuntu0.22.04.1
python-ciscoconfparse
openSUSE:Tumbleweed
 before 1.7.7-1.1
1.7.7-1.1

History

History
RecordedChangedSources
affected, factsOSV
affected
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-40898 is a high vulnerability (CVSS 7.5) in Wheel Project Wheel, published December 22, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.84%, the 86th percentile. Fixed in wheel 0.38.1.

References

Show 84 moreShow less
This page doesn't list everything

Left out here: 14 versions. The JSON record has them.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open