# sonatype-2022-1044

aiohttp-socks5 at 22 February 2022 - Malicious Package

Published Feb 22, 2022

[help.sonatype.com](https://help.sonatype.com/en/sonatype-malware-data.html)

## Security Details

### Components Impacted

#### Security Details

- **CVE ID**: sonatype-2022-1044  
- **CVE Description**: aiohttp-socks5 at 22 February 2022 - Malicious Package  
- **Published**: Feb 22, 2022  
- **CVSS Score & Severity**: 10.0 Critical  
- **CVSS Vector**: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H  
- **EPSS Score**: 0%  
- **Malware**: malware  
- **KEV Status**: Not in KEV Catalog: No known exploits  
- **Affected Ecosystems**: affected  
- **Source**: Sonatype

### References

[help.sonatype.com](https://help.sonatype.com/en/sonatype-malware-data.html "https://help.sonatype.com/en/sonatype-malware-data.html") THIRD_PARTY