CVE-2026-72577: Missing Authentication for Critical Function

Multiple vulnerabilities in NASA fprime-gds through 3.4.3 allow an unauthenticated remote attacker to achieve arbitrary code execution on the ground station host and inject arbitrary commands to connected spacecraft. The Flask application in src/fprimegds/flask/app.py applies no authentication to...

EUVD-2025-8097

Malicious code in bioql PyPI...

EUVD-2025-8099

Malicious code in bioql PyPI...

EUVD-2025-8096

Malicious code in bioql PyPI...

CVE-2024-55029

NASA Fprime v3.4.3 was discovered to contain multiple cross-site scripting XSS vulnerabilities...

CVE-2024-55030

A command injection vulnerability in the Command Dispatcher Service of NASA Fprime v3.4.3 allows attackers to execute arbitrary commands...

CVE-2024-55028

A template injection vulnerability in the Dashboard of NASA Fprime v3.4.3 allows attackers to execute arbitrary code via uploading a crafted Vue file...

CVE-2024-55028

A template injection vulnerability in the Dashboard of NASA Fprime v3.4.3 allows attackers to execute arbitrary code via uploading a crafted Vue file...

CVE-2024-55029

NASA Fprime v3.4.3 was discovered to contain multiple cross-site scripting XSS vulnerabilities...

CVE-2024-55030

A command injection vulnerability in the Command Dispatcher Service of NASA Fprime v3.4.3 allows attackers to execute arbitrary commands...

CVE-2024-55029

NASA Fprime v3.4.3 contains multiple cross-site scripting (XSS) vulnerabilities. Specifically, the fprime-gds package (a F Prime Flight Software Ground Data System layer) is vulnerable on the Run Commands table . An attacker can execute scripts in the context of a user's browser by injecting mali...

CVE-2024-55028

A template injection vulnerability in the Dashboard of NASA Fprime v3.4.3 allows attackers to execute arbitrary code via uploading a crafted Vue file...

CVE-2024-55030

NASA Fprime v3.4.3 is vulnerable to a command injection vulnerability within the Command Dispatcher Service . This flaw allows an attacker to execute arbitrary commands on the system. Additionally, the fprime-gds Python package (version 4.3.0) is affected, where repeated invocation of send_comman...

CVE-2024-55029

NASA Fprime v3.4.3 was discovered to contain multiple cross-site scripting XSS vulnerabilities...

CVE-2024-55030

A command injection vulnerability in the Command Dispatcher Service of NASA Fprime v3.4.3 allows attackers to execute arbitrary commands...

CVE-2024-55029

NASA Fprime v3.4.3 was discovered to contain multiple cross-site scripting XSS vulnerabilities...

CVE-2024-55030

A command injection vulnerability in the Command Dispatcher Service of NASA Fprime v3.4.3 allows attackers to execute arbitrary commands...

CVE-2024-55028

A template injection vulnerability in the Dashboard of NASA Fprime v3.4.3 allows attackers to execute arbitrary code via uploading a crafted Vue file...

CVE-2024-55028

The NASA Fprime flight software framework (v3.4.3) contains a template injection vulnerability in its Dashboard. An attacker can achieve arbitrary code execution by uploading a specially crafted Vue file . Additionally, the fprime-gds Python package is susceptible to Cross-site Scripting (XSS) wh...