CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

DataChain is a version control software from Iterative open source. A code issue vulnerability exists in DataChain 0.34.1 and prior versions, which stems from failure to validate data when reading serialized objects from environment variables, which could lead to code execution...

2.5CVSS7AI score0.0015EPSS

Exploits0References3

RedhatCVE•added 2025/10/02 4:44 p.m.•4 views

CVE-2025-59952

MinIO Java SDK is a Simple Storage Service aka S3 client to perform bucket and object operations to any Amazon S3 compatible object storage service. In minio-java versions prior to 8.6.0, XML tag values containing references to system properties or environment variables were automatically...

8.7CVSS6.2AI score0.00458EPSS

Exploits0References5

Github Security Blog•added 2025/10/02 4:24 p.m.•5 views

DataChain Vulnerable to Deserialization of Untrusted Data from Environment Variables

The DataChain library reads serialized objects from environment variables such as DATACHAINMETASTORE and DATACHAINWAREHOUSE in the loader.py module. An attacker with the ability to set these environment variables can trigger code execution when the application loads...

2.5CVSS7.7AI score0.0015EPSS

Exploits0References5Affected Software1

Snyk•added 2025/10/02 4:24 p.m.•2 views

Deserialization of Untrusted Data

Overview datachain is a Wrangle unstructured AI data at scale Affected versions of this package are vulnerable to Deserialization of Untrusted Data via the loader.py module. An attacker can execute arbitrary code by setting crafted environment variables that are deserialized by the application...

2.5CVSS7.6AI score0.0015EPSS

Exploits0References2

OSV•added 2025/10/02 4:24 p.m.•2 views

GHSA-6PX8-MR29-CJ4R DataChain Vulnerable to Deserialization of Untrusted Data from Environment Variables

2.5CVSS7.7AI score0.0015EPSS

Exploits0References5

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by