EUVD-2022-3496

Malicious code in bioql PyPI...

CVE-2014-1972: Undefined Security Weakness

Apache Tapestry before 5.3.6 relies on client-side object storage without checking whether a client has modified an object, which allows remote attackers to cause a denial of service resource consumption or execute arbitrary code via crafted serialized data...

PT-2015-3696

Name of the Vulnerable Software and Affected Versions Apache Tapestry versions prior to 5.3.6 Description The issue allows remote attackers to cause a denial of service or execute arbitrary code via crafted serialized data, due to the reliance on client-side object storage without proper checks...