HIGH8.8PyPI
GHSA-jjxg-hpm7-g95f· CVE-2017-14176, PYSEC-2017-149Bazaar allows remote attackers to execute arbitrary commands via a bzr+ssh URL with initial dash character in hostname
Modified: 5/29/2026
package
PyPI/bzr
pkg:pypi/bzr
HIGH8.8PyPI
PYSEC-2017-149· CVE-2017-14176, GHSA-jjxg-hpm7-g95fModified: 6/10/2026