36 matches found
medical-data (0.2.0.dev0), ptlflow (>=0.3.0, <=0.3.2) +4 more potentially affected by CVE-2024-8019 via lightning (1.9.5)
lightning PYPI version 1.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on lightning and may be impacted: - medical-data 0.2.0.dev0 - ptlflow =0.3.0, =0.0.1, =0.1.0, =0.2.13, =0.3.3 Source cves: CVE-2024-8019 Source advisory: OSV:PYSEC-2026-3970...
medical-data (0.2.0.dev0), ptlflow (>=0.3.0, <=0.3.2) +4 more potentially affected by CVE-2024-8020 via lightning (1.9.5)
lightning PYPI version 1.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on lightning and may be impacted: - medical-data 0.2.0.dev0 - ptlflow =0.3.0, =0.0.1, =0.1.0, =0.2.13, =0.3.3 Source cves: CVE-2024-8020 Source advisory: OSV:PYSEC-2026-3971...
medical-data (0.2.0.dev0), ptlflow (>=0.3.0, <=0.3.2) +4 more potentially affected by CVE-2026-31221 via lightning (1.9.5)
lightning PYPI version 1.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on lightning and may be impacted: - medical-data 0.2.0.dev0 - ptlflow =0.3.0, =0.0.1, =0.1.0, =0.2.13, =0.3.3 Source cves: CVE-2026-31221 Source advisory: OSV:PYSEC-2026-3972...
medical-data (0.2.0.dev0), ptlflow (>=0.3.0, <=0.3.2) +4 more potentially affected by CVE-2026-58659 via lightning (1.9.5)
lightning PYPI version 1.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on lightning and may be impacted: - medical-data 0.2.0.dev0 - ptlflow =0.3.0, =0.0.1, =0.1.0, =0.2.13, =0.3.3 Source cves: CVE-2026-58659 Source advisory: OSV:GHSA-QQMF-GPG7-G8GW...
medical-data (0.2.0.dev0), ptlflow (>=0.3.0, <=0.3.2) +4 more potentially affected by CVE-2026-58659 via lightning (1.9.5)
lightning PYPI version 1.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on lightning and may be impacted: - medical-data 0.2.0.dev0 - ptlflow =0.3.0, =0.0.1, =0.1.0, =0.2.13, =0.3.3 Source cves: CVE-2026-58659 Source advisory: OSV:PYSEC-2026-3624...
medical-data (0.2.0.dev0), ptlflow (>=0.3.0, <=0.3.2) +4 more potentially affected by CVE-2024-5452 via lightning (1.9.5)
lightning PYPI version 1.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on lightning and may be impacted: - medical-data 0.2.0.dev0 - ptlflow =0.3.0, =0.0.1, =0.1.0, =0.2.13, =0.3.3 Source cves: CVE-2024-5452 Source advisory: OSV:PYSEC-2026-385...
medical-data (0.2.0.dev0), ptlflow (>=0.3.0, <=0.3.2) +4 more potentially affected by CVE-2024-5980 via lightning (1.9.5)
lightning PYPI version 1.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on lightning and may be impacted: - medical-data 0.2.0.dev0 - ptlflow =0.3.0, =0.0.1, =0.1.0, =0.2.13, =0.3.3 Source cves: CVE-2024-5980 Source advisory: OSV:PYSEC-2026-386...
TorchGeo Remote Code Execution Vulnerability
Impact TorchGeo 0.4–0.6.0 used an eval statement in its model weight API that could allow an unauthenticated, remote attacker to execute arbitrary commands. All platforms that expose torchgeo.models.getweight or torchgeo.trainers as an external API could be affected. Patches The eval statement wa...
geotils (0.3.0.post2), satseg (>=0.1.0, <=0.1.1) potentially affected by CVE-2024-49048 via torchgeo (>=0.4.1, <=0.5.2)
torchgeo PYPI version =0.4.1, =0.1.0, =0.1.1 Source cves: CVE-2024-49048 Source advisory: GHSA-GHQ9-VC6F-8QJF...
geotils (0.3.0.post2), satseg (>=0.1.0, <=0.1.1) potentially affected by CVE-2024-49048 via torchgeo (>=0.4.1, <=0.5.2)
torchgeo PYPI version =0.4.1, =0.1.0, =0.1.1 Source cves: CVE-2024-49048 Source advisory: OSV:GHSA-GHQ9-VC6F-8QJF...
GHSA-GHQ9-VC6F-8QJF TorchGeo Remote Code Execution Vulnerability
Impact TorchGeo 0.4–0.6.0 used an eval statement in its model weight API that could allow an unauthenticated, remote attacker to execute arbitrary commands. All platforms that expose torchgeo.models.getweight or torchgeo.trainers as an external API could be affected. Patches The eval statement wa...
EUVD-2024-0217
TorchGeo Remote Code Execution Vulnerability...
TorchGeo Remote Code Execution Vulnerability
Impact TorchGeo 0.4–0.6.0 used an ""eval"" https://docs.python.org/3/library/functions.htmleval statement in its model weight API that could allow an unauthenticated, remote attacker to execute arbitrary commands. All platforms that expose ""torchgeo.models.getweight""...
torchgeo Python Library < 0.6.1 RCE
The version of the torchgeo Python library installed on the remote host is prior to 0.6.1. It is, therefore, affected by a remote code execution vulnerability. The usage of 'eval' in torchgeo's 'getweight' API function could allow an unauthenticated, remote attacker to execute arbitrary commands...
Microsoft TorchGeo Code Execution
The vulnerability of the Microsoft TorchGeo library for working with geospatial data is related to improper code generation management. Exploiting this vulnerability can allow an attacker operating remotely to execute arbitrary code...
Arbitrary Code Injection
Overview torchgeo is a TorchGeo: datasets, samplers, transforms, and pre-trained models for geospatial data Affected versions of this package are vulnerable to Arbitrary Code Injection via the handling of specific data inputs. An attacker can execute arbitrary code on the system. Remediation...
geotils (0.3.0.post2), satseg (>=0.1.0, <=0.1.1) potentially affected by CVE-2024-49048 via torchgeo (>=0.4.1, <=0.5.2)
torchgeo PYPI version =0.4.1, =0.1.0, =0.1.1 Source cves: CVE-2024-49048 Source advisory: SNYK:PYTHON-TORCHGEO-8370211...
GHSA-G5VP-J278-8PJH Duplicate Advisory: TorchGeo Remote Code Execution Vulnerability
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-ghq9-vc6f-8qjf. This link is maintained to preserve external references. Original Description TorchGeo Remote Code Execution Vulnerability...
Duplicate Advisory: TorchGeo Remote Code Execution Vulnerability
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-ghq9-vc6f-8qjf. This link is maintained to preserve external references. Original Description TorchGeo Remote Code Execution Vulnerability...