69 matches found
CVE-2024-38459: Incorrect Default Permissions
langchainexperimental aka LangChain Experimental before 0.0.61 for LangChain provides Python REPL access without an opt-in step. NOTE; this issue exists because of an incomplete fix for CVE-2024-27444...
PYSEC-2023-147
An issue in langchain langchain-ai v.0.0.232 and before allows a remote attacker to execute arbitrary code via a crafted script to the PythonAstREPLTool.run component...
K31130692: GNU Guile vulnerabilities CVE-2016-8605 and CVE-2016-8606
Security Advisory Description CVE-2016-8605 The mkdir procedure of GNU Guile temporarily changed the process umask to zero. During that time window, in a multithreaded application, other threads could end up creating files with insecure permissions. For example, mkdir without the optional mode...
SUSE CVE-2016-8606
The REPL server --listen in GNU Guile 2.0.12 allows an attacker to execute arbitrary code via an HTTP inter-protocol attack...
SUSE CVE-2021-3514
When using a syncrepl client in 389-ds-base, an authenticated attacker can cause a NULL pointer dereference using a specially crafted query, causing a crash...
389-ds-base: SIGSEGV in sync_repl
A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a specially crafted query. This flaw allows an authenticated attacker to cause a denial of service...
Malicious code in sdk_repl_app (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ae02b51801addee1d7d9465bfadddd598ae7933bb807a06a29da4093ef17a072 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-21671
@replit/crosis is a JavaScript client that speaks Replit's container protocol. A vulnerability that involves exposure of sensitive information exists in versions prior to 7.3.1. When using this library as a way to programmatically communicate with Replit in a standalone fashion, if there are...
clarity-repl (>=0.12.3, <=0.13.3) potentially affected by CVE-2021-38191 via tokio (1.6.1)
tokio CARGO version 1.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on tokio and may be impacted: - clarity-repl =0.12.3, =0.13.3 Source cves: CVE-2021-38191 Source advisory: OSV:GHSA-2GRH-HM3W-W7HV...
clarity-repl (>=0.12.3, <=0.13.3) potentially affected by CVE-2021-38191 via tokio (1.6.1)
tokio CARGO version 1.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on tokio and may be impacted: - clarity-repl =0.12.3, =0.13.3 Source cves: CVE-2021-38191 Source advisory: OSV:RUSTSEC-2021-0072...
CVE-2021-30502
The unofficial vscode-ghc-simple aka Simple Glasgow Haskell Compiler extension before 0.2.3 for Visual Studio Code allows remote code execution via a crafted workspace configuration with replCommand...
[SECURITY] Fedora 34 Update: rubygem-pry-0.13.1-5.fc34
Pry is a runtime developer console and IRB alternative with powerful introspection capabilities. Pry aims to be more than an IRB replacement. It is an attempt to bring REPL driven programming to the Ruby language...
SUSE SLES12 Security Update : nodejs4 (SUSE-SU-2017:0855-1)
This update for nodejs4 fixes the following issues : - New upstream LTS release 4.7.3 The embedded openssl sources were updated to 1.0.2k CVE-2017-3731, CVE-2017-3732, CVE-2016-7055, bsc1022085, bsc1022086, bsc1009528 - No changes in LTS version 4.7.2 - New upstream LTS release 4.7.1 - build:...
openSUSE Security Update : nodejs6 (openSUSE-2018-444)
This update for nodejs6 fixes the following issues : - Fix some node-gyp permissions - New upstream LTS release 6.14.1 : - Security fixes : + CVE-2018-7160: Fix for inspector DNS rebinding vulnerability bsc1087463 + CVE-2018-7158: Fix for 'path' module regular expression denial of service...
ALPINE-CVE-2016-8606
The REPL server --listen in GNU Guile 2.0.12 allows an attacker to execute arbitrary code via an HTTP inter-protocol attack...
Code injection
The REPL server --listen in GNU Guile 2.0.12 allows an attacker to execute arbitrary code via an HTTP inter-protocol attack...
CVE-2016-8606
The REPL server --listen in GNU Guile 2.0.12 allows an attacker to execute arbitrary code via an HTTP inter-protocol attack...
UBUNTU-CVE-2016-8606
The REPL server --listen in GNU Guile 2.0.12 allows an attacker to execute arbitrary code via an HTTP inter-protocol attack...