Lucene search
+L

2 matches found

OSV
OSV
added 2026/06/29 4:26 a.m.6 views

MAL-2026-6570 Malicious code in pkg-fallback (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c97ea590e70f499f40938e093cd6a09a13b95030872968b5d325fee8a595f31c Package advertises itself as a small string-manipulation library trim, case, pad, wrap but its install-time behavior is a dropper. package.json...

6AI score
SaveExploits0References1
PyPA
PyPA
added 2021/05/13 11:15 p.m.8 views

PYSEC-2021-13

The Flask-Caching extension through 1.10.1 for Flask relies on Pickle for serialization, which may lead to remote code execution or local privilege escalation. If an attacker gains access to cache storage e.g., filesystem, Memcached, Redis, etc., they can construct a crafted payload, poison the...

9.8CVSS8.1AI score0.07288EPSS
SaveExploits3References2Affected Software1
Rows per page
Query Builder