alaas (>=0.1.6 <=0.2.1), annlite (>=0.3.14 <=0.4.0) +73 more potentially affected by CVE-2025-5150 via docarray (>=0.12.9 <=0.41.0)

docarray PYPI version =0.12.9, =0.1.6, =0.3.14, =0.0.3, =0.1.0, =0.1.0, =0.1.7, =0.3.9, =0.3.9, =0.5.2, =0.3.9, =0.3.9, =0.5.2, =0.5.7 - fasr-enhancement-deepfilternet =0.5.7 - fasr-enhancement-dtln =0.5.7 and more Source cves: CVE-2025-5150 Source advisory: SNYK:PYTHON-DOCARRAY-10246594...

arcodeai (>=0.1.0 <=0.1.2), auto-retrieval-plugin (>=0.1.0 <=0.1.5) +46 more potentially affected by CVE-2025-5150 via docarray (>=0.12.9 <=0.40.0)

docarray PYPI version =0.12.9, =0.1.0, =0.1.0, =0.2.5, =0.3.9, =0.3.9, =0.5.2, =0.3.9, =0.3.9, =0.5.2, =0.3.9, =0.5.7 and more Source cves: CVE-2025-5150 Source advisory: OSV:GHSA-J9WP-865G-RF48...

CVE-2025-5150

creationtimestamp| type| source ---|---|--- 2025-05-25 15:21:55+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lpyxlq2vzqc2 2025-05-25 15:45:58+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/17508 2025-05-25...

CVE-2025-5150 docarray Web API torch_dataset.py __getitem__ prototype pollution

A vulnerability was found in docarray up to 0.40.1. It has been rated as critical. Affected by this issue is the function getitem of the file /docarray/data/torchdataset.py of the component Web API. The manipulation leads to improperly controlled modification of object prototype attributes...

CVE-2025-5150 docarray Web API torch_dataset.py __getitem__ prototype pollution

A vulnerability was found in docarray up to 0.40.1. It has been rated as critical. Affected by this issue is the function getitem of the file /docarray/data/torchdataset.py of the component Web API. The manipulation leads to improperly controlled modification of object prototype attributes...

CVE-2025-5150

CVE-2025-5150 affects docarray ≤ 0.40.1, specifically the Web API file /docarray/data/torch_dataset.py, where the vulnerable function is getitem . The issue enables prototype pollution via object prototype attributes, potentially allowing remote exploitation. Multiple sources corroborate a remote...