385 matches found
dataops-toolkits (>=0.1.1, <=0.1.2), rm-gallery (>=0.1.0, <=0.1.2) potentially affected by CVE-2026-22033 via label-studio (>=1.5.0, <=1.17.0)
label-studio PYPI version =1.5.0, =0.1.1, =0.1.0, =0.1.2 Source cves: CVE-2026-22033 Source advisory: OSV:GHSA-2MQ9-HM29-8QCH...
dataops-toolkits (>=0.1.1, <=0.1.2), rm-gallery (>=0.1.0, <=0.1.2) potentially affected by CVE-2026-22033 via label-studio (>=1.5.0, <=1.17.0)
label-studio PYPI version =1.5.0, =0.1.1, =0.1.0, =0.1.2 Source cves: CVE-2026-22033 Source advisory: GHSA-2MQ9-HM29-8QCH...
hc-nlp (>=0.1.0, <=0.2.0) potentially affected by CVE-2026-22033 via label-studio (0.8.1)
label-studio PYPI version 0.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on label-studio and may be impacted: - hc-nlp =0.1.0, =0.2.0 Source cves: CVE-2026-22033 Source advisory: OSV:GHSA-2MQ9-HM29-8QCH...
CVE-2026-22033: Improper Neutralization of Input During Web Page Generation
Label Studio is a multi-type data labeling and annotation tool. In 1.22.0 and earlier, a persistent stored cross-site scripting XSS vulnerability exists in the customhotkeys functionality of the application. An authenticated attacker or one who can trick a user/administrator into updating their...
Label Studio Access Control Vulnerability
Label Studio is an open source data labeling tool from Heartex Open Source. Allows you to use a simple and clear UI mark audio, text, images, video and time series and other data types , and exported to a variety of model formats. An access control error vulnerability exists in Label Studio 1.22....
PT-2026-2287
Name of the Vulnerable Software and Affected Versions Label Studio versions prior to 1.22.0 Description Label Studio is a multi-type data labeling and annotation tool. A persistent stored cross-site scripting XSS issue exists in the custom hotkeys functionality. An authenticated attacker, or...
Missing Authorization
Overview label-studio-sso is a Native JWT authentication for Label Studio OSS - simple and secure SSO integration Affected versions of this package are vulnerable to Missing Authorization due to missing validation in the SSO token API. The API does not restrict account creation to pre-registered...
Cross-site Request Forgery (CSRF)
Overview label-studio-sso is a Native JWT authentication for Label Studio OSS - simple and secure SSO integration Affected versions of this package are vulnerable to Cross-site Request Forgery CSRF due to an improper exemption in the JWTSSOSessionAuthentication mechanism that disables CSRF token...
aimmo (>=2.4.1, <=2.4.3), cfl-common (>=6.12.5, <=6.17.0) +12 more potentially affected by CVE-2025-64459 via django (3.2.14)
django PYPI version 3.2.14 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aimmo =2.4.1, =6.12.5, =6.12.5, =1.1.2, =4.3.0rc1, =6.11.1, =5.0.0, =5.4.0 Source cves: CVE-2025-64459 Source advisory: OSV:GHSA-FRMV-PR5F-9MCR...
django-dragon (0.1.1), label-studio (>=1.3.0, <=1.4.0) potentially affected by CVE-2025-64459 via django (3.1.13)
django PYPI version 3.1.13 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-dragon 0.1.1 - label-studio =1.3.0, =1.4.0 Source cves: CVE-2025-64459 Source advisory: OSV:GHSA-FRMV-PR5F-9MCR...
directory-constants (>=21.0.1, <=21.0.2), djongo (1.3.7) +2 more potentially affected by CVE-2025-64458 via django (3.1.12)
django PYPI version 3.1.12 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - directory-constants =21.0.1, =1.1.0rc0, =1.2.0 - rest-framework-djongo 0.1.7 Source cves: CVE-2025-64458 Source advisory: OSV:GHSA-QW25-V68C-QJF3...
django-dragon (0.1.1), label-studio (>=1.3.0, <=1.4.0) potentially affected by CVE-2025-64458 via django (3.1.13)
django PYPI version 3.1.13 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-dragon 0.1.1 - label-studio =1.3.0, =1.4.0 Source cves: CVE-2025-64458 Source advisory: OSV:GHSA-QW25-V68C-QJF3...
EUVD-2025-4105
Malicious code in bioql PyPI...
EUVD-2024-0544
Malicious code in bioql PyPI...
EUVD-2023-0107
Malicious code in bioql PyPI...
EUVD-2025-4107
Malicious code in bioql PyPI...
EUVD-2024-0084
Malicious code in bioql PyPI...
EUVD-2024-0082
Malicious code in bioql PyPI...