https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-44054.htmlhttps://patchthecve.com/cve/CVE-2022-44054.htmlWed, 17 Jun 2026 05:07:45 +0000CRITICAL 9.8: The d8s-xml for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code execution backdoor inserted by third parties is the democritus-utility package. The affected version of d8s-htm is 0.1.0.https://patchthecve.com/cve/CVE-2022-42043.htmlhttps://patchthecve.com/cve/CVE-2022-42043.htmlWed, 17 Jun 2026 05:04:16 +0000CRITICAL 9.8: The d8s-xml package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-html package. The affected version is 0.1.0.https://patchthecve.com/cve/CVE-2022-38886.htmlhttps://patchthecve.com/cve/CVE-2022-38886.htmlWed, 17 Jun 2026 04:57:17 +0000CRITICAL 9.8: The d8s-xml for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-strings package. The affected version is 0.1.0.