Lucene search
+L

9 matches found

PyPA
PyPA
•added 2026/06/29 11:50 a.m.•24 views

imgaug contains an insecure deserialization vulnerability in BackgroundAugmenter class within multicore.py module

The imgaug library thru 0.4.0 contains an insecure deserialization vulnerability in its BackgroundAugmenter class within the multicore.py module. The class uses Python's pickle module to deserialize data received via a multiprocessing queue in the augmentimagesworker method without any safety...

9.8CVSS6.9AI score0.00473EPSS
SaveExploits0References5Affected Software1
osv_pysec
osv_pysec
•added 2026/06/29 11:50 a.m.•29 views

PYSEC-2026-356 imgaug contains an insecure deserialization vulnerability in BackgroundAugmenter class within multicore.py module

The imgaug library thru 0.4.0 contains an insecure deserialization vulnerability in its BackgroundAugmenter class within the multicore.py module. The class uses Python's pickle module to deserialize data received via a multiprocessing queue in the augmentimagesworker method without any safety...

9.8CVSS6.9AI score0.00473EPSS
SaveExploits0References5
osv_ghsa
osv_ghsa
•added 2026/05/12 6:30 p.m.•27 views

GHSA-G82G-J283-HJ97 imgaug contains an insecure deserialization vulnerability in BackgroundAugmenter class within multicore.py module

The imgaug library thru 0.4.0 contains an insecure deserialization vulnerability in its BackgroundAugmenter class within the multicore.py module. The class uses Python's pickle module to deserialize data received via a multiprocessing queue in the augmentimagesworker method without any safety...

9.8CVSS6.9AI score0.00473EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2026/05/12 6:30 p.m.•24 views

imgaug contains an insecure deserialization vulnerability in BackgroundAugmenter class within multicore.py module

The imgaug library thru 0.4.0 contains an insecure deserialization vulnerability in its BackgroundAugmenter class within the multicore.py module. The class uses Python's pickle module to deserialize data received via a multiprocessing queue in the augmentimagesworker method without any safety...

6.9AI score0.00473EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/12 12:00 a.m.•3 views

CVE-2026-31235: Deserialization of Untrusted Data

The imgaug library thru 0.4.0 contains an insecure deserialization vulnerability in its BackgroundAugmenter class within the multicore.py module. The class uses Python's pickle module to deserialize data received via a multiprocessing queue in the augmentimagesworker method without any safety...

9.8CVSS6.9AI score0.00473EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/12 12:00 a.m.•21 views

imgaug security vulnerabilities

imgaug is a image enhancement tool library developed by Alexander Jung, used for data augmentation in machine learning. Imgaug versions 0.4.0 and earlier contain security vulnerabilities. These vulnerabilities stem from the BackgroundAugmenter class using the Python pickle module for...

9.8CVSS6.8AI score0.00473EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/05/12 12:00 a.m.•54 views

CVE-2026-31235

The imgaug library thru 0.4.0 contains an insecure deserialization vulnerability in its BackgroundAugmenter class within the multicore.py module. The class uses Python's pickle module to deserialize data received via a multiprocessing queue in the augmentimagesworker method without any safety...

0.00473EPSS
SaveExploits0References2
Mend
Mend
•added 2026/05/12 12:00 a.m.•24 views

CVE-2026-31235

The imgaug library thru 0.4.0 contains an insecure deserialization vulnerability in its BackgroundAugmenter class within the multicore.py module. The class uses Python's pickle module to deserialize data received via a multiprocessing queue in the augmentimagesworker method without any safety...

9.8CVSS6.9AI score0.00473EPSS
SaveExploits0References5
CVE
CVE
•added 2026/05/12 12:00 a.m.•72 views

CVE-2026-31235

The imgaug library, versions 0.4.0 and earlier , is vulnerable to an insecure deserialization flaw in the BackgroundAugmenter class within the multicore.py module. The vulnerability exists because the _augment_images_worker() method uses Python's pickle module to deserialize data from a multiproc...

6.9AI score0.00473EPSS
SaveExploits0References2
Rows per page
Query Builder