Lucene search
+L

8 matches found

PyPA
PyPA
•added 2026/06/29 11:50 a.m.•22 views

imgaug contains an insecure deserialization vulnerability in BackgroundAugmenter class within multicore.py module

The imgaug library thru 0.4.0 contains an insecure deserialization vulnerability in its BackgroundAugmenter class within the multicore.py module. The class uses Python's pickle module to deserialize data received via a multiprocessing queue in the augmentimagesworker method without any safety...

9.8CVSS6.7AI score0.00689EPSS
SaveExploits0References5Affected Software1
OSV
OSV
•added 2026/06/29 11:50 a.m.•19 views

PYSEC-2026-356 imgaug contains an insecure deserialization vulnerability in BackgroundAugmenter class within multicore.py module

The imgaug library thru 0.4.0 contains an insecure deserialization vulnerability in its BackgroundAugmenter class within the multicore.py module. The class uses Python's pickle module to deserialize data received via a multiprocessing queue in the augmentimagesworker method without any safety...

9.8CVSS6.6AI score0.00689EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2026/05/12 6:30 p.m.•22 views

imgaug contains an insecure deserialization vulnerability in BackgroundAugmenter class within multicore.py module

The imgaug library thru 0.4.0 contains an insecure deserialization vulnerability in its BackgroundAugmenter class within the multicore.py module. The class uses Python's pickle module to deserialize data received via a multiprocessing queue in the augmentimagesworker method without any safety...

6.5AI score0.00689EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2026/05/12 6:30 p.m.•18 views

GHSA-G82G-J283-HJ97 imgaug contains an insecure deserialization vulnerability in BackgroundAugmenter class within multicore.py module

The imgaug library thru 0.4.0 contains an insecure deserialization vulnerability in its BackgroundAugmenter class within the multicore.py module. The class uses Python's pickle module to deserialize data received via a multiprocessing queue in the augmentimagesworker method without any safety...

9.8CVSS6.5AI score0.00689EPSS
SaveExploits0References3
CVE
CVE
•added 2026/05/12 12:00 a.m.•67 views

CVE-2026-31235

The imgaug library, versions 0.4.0 and earlier , is vulnerable to an insecure deserialization flaw in the BackgroundAugmenter class within the multicore.py module. The vulnerability exists because the _augment_images_worker() method uses Python's pickle module to deserialize data from a multiproc...

6.9AI score0.00689EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/12 12:00 a.m.•2 views

CVE-2026-31235: Deserialization of Untrusted Data

The imgaug library thru 0.4.0 contains an insecure deserialization vulnerability in its BackgroundAugmenter class within the multicore.py module. The class uses Python's pickle module to deserialize data received via a multiprocessing queue in the augmentimagesworker method without any safety...

9.8CVSS6.7AI score0.00689EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2026/05/12 12:00 a.m.•19 views

imgaug 安全漏洞

imgaug is a image enhancement tool library developed by Alexander Jung, used for data augmentation in machine learning. Imgaug versions 0.4.0 and earlier contain security vulnerabilities. These vulnerabilities stem from the BackgroundAugmenter class using the Python pickle module for...

9.8CVSS6.2AI score0.00689EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/05/12 12:00 a.m.•53 views

CVE-2026-31235

The imgaug library thru 0.4.0 contains an insecure deserialization vulnerability in its BackgroundAugmenter class within the multicore.py module. The class uses Python's pickle module to deserialize data received via a multiprocessing queue in the augmentimagesworker method without any safety...

0.00689EPSS
SaveExploits0References2
Rows per page
Query Builder