199 matches found
Label Studio < 1.16.0 - Cross-Site Scripting
Label Studio prior to version 1.16.0 contains a cross-site scripting caused by rendering unsanitized user-provided HTML in the /projects/upload-example endpoint, letting attackers execute arbitrary JavaScript via crafted labelconfig in a GET request, exploit requires victims to visit malicious UR...
Label Studio - Sensitive Information Exposure
An attacker can construct a filter chain to filter tasks based on sensitive fields for all user accounts on the platform by exploiting Django's Object Relational Mapper ORM. Since the results of query can be manipulated by the ORM filter, an attacker can leak these sensitive fields character by...
Label Studio - Cross-Site Scripting
Versions prior to 1.9.2 have a cross-site scripting XSS vulnerability that could be exploited when an authenticated user uploads a crafted image file for their avatar that gets rendered as a HTML file on the website. id: CVE-2023-47115 info: name: Label Studio - Cross-Site Scripting author: isaca...
CVE-2026-54691 vulnerabilities
Vulnerabilities for packages: label-studio...
GHSA-8359-H9FX-J6V9 vulnerabilities
Vulnerabilities for packages: label-studio...
GHSA-R5VV-FF45-PRP2 vulnerabilities
Vulnerabilities for packages: label-studio...
GHSA-954P-556P-R752 vulnerabilities
Vulnerabilities for packages: label-studio...
CVE-2026-55391 vulnerabilities
Vulnerabilities for packages: label-studio...
CVE-2026-55403 vulnerabilities
Vulnerabilities for packages: label-studio...
CVE-2026-55415 vulnerabilities
Vulnerabilities for packages: label-studio...
GHSA-386Q-5HP3-95M9 vulnerabilities
Vulnerabilities for packages: label-studio...
CVE-2026-54654 vulnerabilities
Vulnerabilities for packages: label-studio...
GHSA-WJV6-JCFJ-MF9R vulnerabilities
Vulnerabilities for packages: label-studio...
CVE-2026-55389 vulnerabilities
Vulnerabilities for packages: label-studio...
GHSA-J884-Q54Q-MMX3 vulnerabilities
Vulnerabilities for packages: label-studio...
GHSA-VX7X-VCC2-C44G vulnerabilities
Vulnerabilities for packages: label-studio...
CVE-2026-54621 vulnerabilities
Vulnerabilities for packages: label-studio...
GHSA-5578-W22F-PFX9 vulnerabilities
Vulnerabilities for packages: label-studio...