cde (0.2.0.1), env-wrappers (>=0.1.1, <=0.1.22) +1 more potentially affected by CVE-2025-10950 via ml-logger (0.10.36)

ml-logger PYPI version 0.10.36 is affected by a known vulnerability. The following packages have a transitive dependency on ml-logger and may be impacted: - cde 0.2.0.1 - env-wrappers =0.1.1, =0.1.22 - graph-search 0.1.0 Source cves: CVE-2025-10950 Source advisory: OSV:GHSA-57HM-8RJV-498W...

cde (0.2.0.1), env-wrappers (>=0.1.1, <=0.1.22) +1 more potentially affected by CVE-2025-10951 via ml-logger (0.10.36)

ml-logger PYPI version 0.10.36 is affected by a known vulnerability. The following packages have a transitive dependency on ml-logger and may be impacted: - cde 0.2.0.1 - env-wrappers =0.1.1, =0.1.22 - graph-search 0.1.0 Source cves: CVE-2025-10951 Source advisory: OSV:GHSA-8X9J-2P8R-7XC6...

cde (0.2.0.1), env-wrappers (>=0.1.1, <=0.1.22) +1 more potentially affected by CVE-2025-10951 via ml-logger (0.10.36)

ml-logger PYPI version 0.10.36 is affected by a known vulnerability. The following packages have a transitive dependency on ml-logger and may be impacted: - cde 0.2.0.1 - env-wrappers =0.1.1, =0.1.22 - graph-search 0.1.0 Source cves: CVE-2025-10951 Source advisory: GHSA-8X9J-2P8R-7XC6...

cde (0.2.0.1), env-wrappers (>=0.1.1, <=0.1.22) +1 more potentially affected by CVE-2025-10950 via ml-logger (0.10.36)

ml-logger PYPI version 0.10.36 is affected by a known vulnerability. The following packages have a transitive dependency on ml-logger and may be impacted: - cde 0.2.0.1 - env-wrappers =0.1.1, =0.1.22 - graph-search 0.1.0 Source cves: CVE-2025-10950 Source advisory: GHSA-57HM-8RJV-498W...

CVE-2025-10950

A vulnerability was determined in geyang ml-logger up to acf255bade5be6ad88d90735c8367b28cbe3a743. Affected is the function loghandler of the file mllogger/server.py of the component Ping Handler. This manipulation of the argument data causes deserialization. It is possible to initiate the attack...

CVE-2025-10951

A vulnerability was identified in geyang ml-logger up to acf255bade5be6ad88d90735c8367b28cbe3a743. Affected by this vulnerability is the function loghandler of the file mllogger/server.py. Such manipulation of the argument File leads to path traversal. It is possible to launch the attack remotely...

CVE-2025-10951

CVE-2025-10951 targets geyang ml-logger up to acf255bade5be6ad88d90735c8367b28cbe3a743. The vulnerability resides in log_handler (ml_logger/server.py) where manipulation of the File argument enables path traversal. It is described as exploitable remotely and a public exploit exists. Connected sou...

CVE-2025-10951 geyang ml-logger server.py log_handler path traversal

A vulnerability was identified in geyang ml-logger up to acf255bade5be6ad88d90735c8367b28cbe3a743. Affected by this vulnerability is the function loghandler of the file mllogger/server.py. Such manipulation of the argument File leads to path traversal. It is possible to launch the attack remotely...

CVE-2025-10951 geyang ml-logger server.py log_handler path traversal

A vulnerability was identified in geyang ml-logger up to acf255bade5be6ad88d90735c8367b28cbe3a743. Affected by this vulnerability is the function loghandler of the file mllogger/server.py. Such manipulation of the argument File leads to path traversal. It is possible to launch the attack remotely...

CVE-2025-10951 geyang ml-logger server.py log_handler path traversal

A vulnerability was identified in geyang ml-logger up to acf255bade5be6ad88d90735c8367b28cbe3a743. Affected by this vulnerability is the function loghandler of the file mllogger/server.py. Such manipulation of the argument File leads to path traversal. It is possible to launch the attack remotely...

CVE-2025-10950

ml-logger (geyang) Ping Handler deserialization vulnerability in ml_logger/server.py log_handler; remote attacker could deserialize crafted data. Exploitation is publicly disclosed. Affected versions are not specified due to rolling releases; no fixed version is publicly available in the provided...

CVE-2025-10950 geyang ml-logger Ping server.py log_handler deserialization

A vulnerability was determined in geyang ml-logger up to acf255bade5be6ad88d90735c8367b28cbe3a743. Affected is the function loghandler of the file mllogger/server.py of the component Ping Handler. This manipulation of the argument data causes deserialization. It is possible to initiate the attack...

CVE-2025-10950 geyang ml-logger Ping server.py log_handler deserialization

A vulnerability was determined in geyang ml-logger up to acf255bade5be6ad88d90735c8367b28cbe3a743. Affected is the function loghandler of the file mllogger/server.py of the component Ping Handler. This manipulation of the argument data causes deserialization. It is possible to initiate the attack...

CVE-2025-10950 geyang ml-logger Ping server.py log_handler deserialization

A vulnerability was determined in geyang ml-logger up to acf255bade5be6ad88d90735c8367b28cbe3a743. Affected is the function loghandler of the file mllogger/server.py of the component Ping Handler. This manipulation of the argument data causes deserialization. It is possible to initiate the attack...

Malicious code in @sev-ui-verse/logger (npm)

The package @sev-ui-verse/logger was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 736b665dd1cabd04e5660ae170127b7763b9e45f24f4044635de3ce7b1753401 Any computer that has this package installed or running should be considered fully...

MAL-2025-47542 Malicious code in @sev-ui-verse/logger (npm)

The package @sev-ui-verse/logger was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 736b665dd1cabd04e5660ae170127b7763b9e45f24f4044635de3ce7b1753401 Any computer that has this package installed or running should be considered fully...

Malware in @sev-ui-verse/logger

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

PT-2025-39393

Name of the Vulnerable Software and Affected Versions geyang ml-logger affected versions not specified Description A flaw exists in geyang ml-logger. The log handler function within the ml logger/server.py file, specifically in the Ping Handler component, is susceptible to deserialization due to...

CVE-2025-10952: Exposure of Sensitive Information to an Unauthorized Actor

A security flaw has been discovered in geyang ml-logger up to acf255bade5be6ad88d90735c8367b28cbe3a743. Affected by this issue is the function streamhandler of the file mllogger/server.py of the component File Handler. Performing manipulation of the argument key results in information disclosure...

PT-2025-39407

Name of the Vulnerable Software and Affected Versions geyang ml-logger versions prior to acf255bade5be6ad88d90735c8367b28cbe3a743 Description A security flaw exists in geyang ml-logger. The issue resides in the stream handler function within the ml logger/server.py file of the File Handler...