215 matches found
CVE-2026-34444
CVE-2026-34444 CVE-2026-34444Sandbox escape and RCE due to incomplete attributefilter enforcement in getattr/setattr...
PT-2026-132124
Name of the Vulnerable Software and Affected Versions Agno versions prior to 3.1.12 Description An unsafe reflection issue exists in PandasTools where model-controlled function names are passed to the getattr function. This allows an attacker to use prompt injection to invoke arbitrary pandas...
CVE-2026-115533
The LeRobot library is vulnerable to arbitrary code execution via unsafe dynamic class instantiation in the frompretrained method and related paths. When loading a policy's processor configuration from a repository, the library uses the class field within the JSON configuration to dynamically...
EUVD-2026-110078
The LeRobot library is vulnerable to arbitrary code execution via unsafe dynamic class instantiation in the frompretrained method and related paths. When loading a policy's processor configuration from a repository, the library uses the class field within the JSON configuration to dynamically...
CVE-2026-115533
The LeRobot library is vulnerable to arbitrary code execution via unsafe dynamic class instantiation in the frompretrained method and related paths. When loading a policy's processor configuration from a repository, the library uses the class field within the JSON configuration to dynamically...
CVE-2026-115533 CVE-2026-115533
The LeRobot library is vulnerable to arbitrary code execution via unsafe dynamic class instantiation in the frompretrained method and related paths. When loading a policy's processor configuration from a repository, the library uses the class field within the JSON configuration to dynamically...
CVE-2026-115533
The LeRobot library is vulnerable to arbitrary code execution due to unsafe dynamic class instantiation. When the from_pretrained() method or related paths load a policy's processor configuration from a repository, the library utilizes the class field in the JSON configuration to resolve and inst...
PT-2026-125102
The LeRobot library is vulnerable to arbitrary code execution via unsafe dynamic class instantiation in the from pretrained method and related paths. When loading a policy's processor configuration from a repository, the library uses the class field within the JSON configuration to dynamically...
Zope AccessControl vulnerable to information disclosure through Python string `format` and `format_map` functions
ImpactPython's string format functionality allows someone controlling the format string to "read" objects accessible recursively via attribute access and subscription from accessible objects. Those attribute accesses and subscriptions use Python's full blown getattr and getitem, not the policy...
PYSEC-2026-4022 Zope AccessControl vulnerable to information disclosure through Python string `format` and `format_map` functions
Impact Python's string format functionality allows someone controlling the format string to "read" objects accessible recursively via attribute access and subscription from accessible objects. Those attribute accesses and subscriptions use Python's full blown getattr and getitem, not the policy...
OESA-2026-3977 python-starlette security update
%expand: Security Fixes: Starlette is a lightweight ASGI framework/toolkit. In versions 1.0.1 and below, when dispatching a request, HTTPEndpoint selects the handler by lowercasing the HTTP method and looking it up as an attribute with getattr, without restricting the lookup to a known set of HTT...
Updated python-starlette package fixes security vulnerabilities
Arbitrary HTTP method dispatched to HTTPEndpoint attributes via getattr. CVE-2026-48817 Unvalidated request path concatenated into authority poisons request.url.hostname. CVE-2026-54282...
MGASA-2026-0413 Updated python-starlette package fixes security vulnerabilities
Arbitrary HTTP method dispatched to HTTPEndpoint attributes via getattr. CVE-2026-48817 Unvalidated request path concatenated into authority poisons request.url.hostname. CVE-2026-54282...
CVE-2026-77401
Zope AccessControl provides a general security framework for use in Zope. Prior to 7.4, applications that allow untrusted users to create and execute AccessControl-controlled Python code do not safely guard str.format and str.formatmap when those methods are reached through a str subclass. In bot...
CVE-2026-77401
Zope AccessControl prior to version 7.4 is vulnerable to information disclosure through Python string str.format and str.format_map functions. When these methods are reached via a str subclass in applications allowing untrusted users to execute AccessControl-controlled Python code, formatting in ...
CVE-2026-77401 Zope AccessControl: Information disclosure through Python string `format` and `format_map` functions
Zope AccessControl provides a general security framework for use in Zope. Prior to 7.4, applications that allow untrusted users to create and execute AccessControl-controlled Python code do not safely guard str.format and str.formatmap when those methods are reached through a str subclass. In bot...
CVE-2026-53710
MCP Context Forge is an AI gateway, registry, and proxy for MCP, A2A, REST, and gRPC APIs. Prior to 1.0.2, the pythonsandboxserver in mcp-servers/python/pythonsandboxserver/src/pythonsandboxserver/serverfastmcp.py exposes raw getattr through safebuiltins, omits a required getattr guard, and relie...
CVE-2026-53710 MCP Context Forge: RestrictedPython sandbox bypass via getattr builtin in python_sandbox_server
MCP Context Forge is an AI gateway, registry, and proxy for MCP, A2A, REST, and gRPC APIs. Prior to 1.0.2, the pythonsandboxserver in mcp-servers/python/pythonsandboxserver/src/pythonsandboxserver/serverfastmcp.py exposes raw getattr through safebuiltins, omits a required getattr guard, and relie...
CVE-2026-53710 MCP Context Forge: RestrictedPython sandbox bypass via getattr builtin in python_sandbox_server
MCP Context Forge is an AI gateway, registry, and proxy for MCP, A2A, REST, and gRPC APIs. Prior to 1.0.2, the pythonsandboxserver in mcp-servers/python/pythonsandboxserver/src/pythonsandboxserver/serverfastmcp.py exposes raw getattr through safebuiltins, omits a required getattr guard, and relie...
EUVD-2026-78933
MCP Context Forge is an AI gateway, registry, and proxy for MCP, A2A, REST, and gRPC APIs. Prior to 1.0.2, the pythonsandboxserver in mcp-servers/python/pythonsandboxserver/src/pythonsandboxserver/serverfastmcp.py exposes raw getattr through safebuiltins, omits a required getattr guard, and relie...