446 matches found
CVE-2024-41112
streamlit-geospatial is a streamlit multipage app for geospatial applications. Prior to commit c4f81d9616d40c60584e36abb15300853a66e489, the palette variable in pages/1📷Timelapse.py takes user input, which is later used in the eval function on line 380, leading to remote code execution. Commit...
CVE-2024-41117
streamlit-geospatial is a streamlit multipage app for geospatial applications. Prior to commit c4f81d9616d40c60584e36abb15300853a66e489, the visparams variable on line 115 in pages/10🌍EarthEngineDatasets.py takes user input, which is later used in the eval function on line 126, leading to remote...
CVE-2024-41113
streamlit-geospatial is a streamlit multipage app for geospatial applications. Prior to commit c4f81d9616d40c60584e36abb15300853a66e489, the visparams variable on line 383 or line 390 in pages/1📷Timelapse.py takes user input, which is later used in the eval function on line 395, leading to remote...
anomalydetection (0.0.0.dev1), dataprep (>=0.2.10a0, <=0.2.14) +12 more potentially affected by CVE-2025-67725 via tornado (5.0.2)
tornado PYPI version 5.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - anomalydetection 0.0.0.dev1 - dataprep =0.2.10a0, =1.4.0, =0.2.3, =0.10.4, =3.0.4, =1.3.0, =1.1.0, =0.0.6rc1, =0.5.18, =0.5.21 Source cves:...
EUVD-2022-0282
Malicious code in bioql PyPI...
EUVD-2023-0247
Malicious code in bioql PyPI...
EUVD-2024-38934
Malicious code in bioql PyPI...
EUVD-2024-38937
Malicious code in bioql PyPI...
EUVD-2024-0164
Malicious code in bioql PyPI...
EUVD-2024-38931
Malicious code in bioql PyPI...
EUVD-2024-38933
Malicious code in bioql PyPI...
EUVD-2024-38935
Malicious code in bioql PyPI...
EUVD-2024-38936
Malicious code in bioql PyPI...
EUVD-2024-38938
Malicious code in bioql PyPI...
EUVD-2024-38939
Malicious code in bioql PyPI...
EUVD-2024-38932
Malicious code in bioql PyPI...
Cross-site Scripting (XSS)
Overview streamlit-shortcuts is a Streamlit keyboard shortcuts for your buttons. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the addshortcuts function which fails to properly escape special characters when injecting JavaScript code into the DOM. Details...
graph-rag-poc
Graph RAG Pipeline - Proof of Concept A locally-executable Gr...
