Improper Neutralization of Special Elements

Overview intugle is an A GenAI-powered Python library for building semantic layers. Affected versions of this package are vulnerable to Improper Neutralization of Special Elements via user-supplied data. An attacker can execute arbitrary code by providing Pandas DataFrames that contain Python cod...

Rust-WebSocket memory allocation based on untrusted length

Impact Untrusted websocket connections can cause an out-of-memory OOM process abort in a client or a server. The root cause of the issue is during dataframe parsing. Affected versions would allocate a buffer based on the declared dataframe size, which may come from an untrusted source. When...

Msticpy - Microsoft Threat Intelligence Security Tools

Microsoft Threat Intelligence Python Security Tools. msticpy is a library for InfoSec investigation and hunting in Jupyter Notebooks. It includes functionality to: query log data from multiple sources enrich the data with Threat Intelligence, geolocations and Azure resource data extract Indicator...