10 matches found
CVE-2026-108382 dataclasses-avroschema allows code injection through generated enum-symbol string literals
dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, EnumRepresentation.rendersymbols concatenates each schema-controlled enum symbol between double quotes in a...
CVE-2026-108382 dataclasses-avroschema allows code injection through generated enum-symbol string literals
dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.38.0 through 0.70.5, EnumRepresentation.rendersymbols concatenates each schema-controlled enum symbol between double quotes in a...
EUVD-2026-75801
IBM Langflow OSS 1.0.0 through 1.11.5 An attacker who could submit custom component source code could bypass the static security scanner by crafting an annotated class-body assignment that resolved to a dangerous callable through alias tracking; the resolved value was never checked against the...
EUVD-2021-33024
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2021-46336
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - There is an Assertion 'opts & PARSERCLASSLITERALCTORPRESENT' failed at /parser/js/js-parser- expr.cparserparseclassbody in JerryScript 3.0.0. CVE-2021-46336 Not...
CVE-2021-46336
There is an Assertion 'opts & PARSERCLASSLITERALCTORPRESENT' failed at /parser/js/js-parser-expr.cparserparseclassbody in JerryScript 3.0.0...
CVE-2021-46336
There is an Assertion 'opts & PARSERCLASSLITERALCTORPRESENT' failed at /parser/js/js-parser-expr.cparserparseclassbody in JerryScript 3.0.0...
UBUNTU-CVE-2021-46336
There is an Assertion 'opts & PARSERCLASSLITERALCTORPRESENT' failed at /parser/js/js-parser-expr.cparserparseclassbody in JerryScript 3.0.0...
JerryScript security vulnerabilities
JerryScript, a lightweight JavaScript engine from the JerryScript project, has a security vulnerability in JerryScript 3.0.0, which originates in /parser/js/js-parser-expr.cparserparseclassbody. classbody has a failed assertion opts & PARSERCLASSLITERALCTORPRESENT. No detailed vulnerability detai...
PT-2022-12650
Name of the Vulnerable Software and Affected Versions JerryScript version 3.0.0 Description The issue is related to an assertion failure in the parser parse class body function at /parser/js/js-parser-expr.c in JerryScript. The assertion opts & PARSER CLASS LITERAL CTOR PRESENT failed...