CVE-2020-28468: Pwntools Project Pwntools

Critical severity, CVSS 9.8. EPSS: 4.4% chance of exploitation in the next 30 days.

This affects the package pwntools before 4.3.1. The shellcraft generator for affected versions of this module are vulnerable to Server-Side Template Injection (SSTI), which can lead to remote code execution.

Affected products

• Pwntools Project Pwntools: before 4.3.1 (fixed in 4.3.1)

Published 2021-01-08. Last modified 2026-06-17.