CVE-2025-46762 vulnerabilities

Vulnerabilities for packages: trino...

GHSA-4WP7-92PW-Q264 vulnerabilities

Vulnerabilities for packages: apache-nifi, apache-nifi-registry, thingsboard, keycloak-config-cli, jenkins, camunda-zeebe...

GHSA-53WX-PR6Q-M3J5 vulnerabilities

Vulnerabilities for packages: trino...

CVE-2025-22233 vulnerabilities

Vulnerabilities for packages: apache-nifi, apache-nifi-registry, thingsboard, keycloak-config-cli, jenkins, camunda-zeebe...

CVE-2024-12718

Allows modifying some file metadata e.g. last modified with filter="data" or file permissions chmod with filter="tar" of files outside the extraction directory. You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall or...

CVE-2025-4330

Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination directory, and the modification of some file metadata. You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall or...

GHSA-WC36-9694-F9RF vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm...

CVE-2024-8768 vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm...

CVE-2024-9053 vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm...

CVE-2025-5279 vulnerabilities

Vulnerabilities for packages: airflow...

CVE-2024-11041 vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm...

GHSA-GGPF-24JW-3FCW vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm...

CVE-2024-8939 vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm...

GHSA-R244-WG5G-6W2R vulnerabilities

Vulnerabilities for packages: airflow...

GHSA-W2R7-9579-27HF vulnerabilities

Vulnerabilities for packages: tritonserver-backend-vllm...

CVE-2025-4517

Allows arbitrary filesystem writes outside the extraction directory during extraction with filter="data". You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall or TarFile.extract using the filter= parameter with a value of...

CVE-2024-12718

Allows modifying some file metadata e.g. last modified with filter="data" or file permissions chmod with filter="tar" of files outside the extraction directory. You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall or...

GHSA-R244-WG5G-6W2R vulnerabilities

Vulnerabilities for packages: airflow...

CVE-2025-5279 vulnerabilities

Vulnerabilities for packages: airflow...

CVE-2024-52035

An integer overflow vulnerability exists in the OLE Document File Allocation Table Parser functionality of catdoc 0.95. A specially crafted malformed file can lead to heap-based memory corruption. An attacker can provide a malicious file to trigger this vulnerability...