13 matches found
PYSEC-2026-356 imgaug contains an insecure deserialization vulnerability in BackgroundAugmenter class within multicore.py module
The imgaug library thru 0.4.0 contains an insecure deserialization vulnerability in its BackgroundAugmenter class within the multicore.py module. The class uses Python's pickle module to deserialize data received via a multiprocessing queue in the augmentimagesworker method without any safety...
aait (>=1.0.4, <=1.0.5), adess (1.0.0) +225 more potentially affected by CVE-2026-31235 via imgaug (>=0.2.5, <=0.4.0)
imgaug PYPI version =0.2.5, =1.0.4, =0.1.0, =0.10.0, =0.1.0, =1.3.0, =0.5.0, =0.3.2, =0.7.0.dev134, =0.1.4, =0.1.0, =0.5.2, =2.0.4, =2.0.7 and more Source cves: CVE-2026-31235 Source advisory: OSV:PYSEC-2026-356...
PT-2026-53445
The imgaug library thru 0.4.0 contains an insecure deserialization vulnerability in its BackgroundAugmenter class within the multicore.py module. The class uses Python's pickle module to deserialize data received via a multiprocessing queue in the augment images worker method without any safety...
CVE-2026-31235
The imgaug library thru 0.4.0 contains an insecure deserialization vulnerability in its BackgroundAugmenter class within the multicore.py module. The class uses Python's pickle module to deserialize data received via a multiprocessing queue in the augmentimagesworker method without any safety...
imgaug contains an insecure deserialization vulnerability in BackgroundAugmenter class within multicore.py module
The imgaug library thru 0.4.0 contains an insecure deserialization vulnerability in its BackgroundAugmenter class within the multicore.py module. The class uses Python's pickle module to deserialize data received via a multiprocessing queue in the augmentimagesworker method without any safety...
aait (>=1.0.4, <=1.0.5), adess (1.0.0) +225 more potentially affected by CVE-2026-31235 via imgaug (>=0.2.5, <=0.4.0)
imgaug PYPI version =0.2.5, =1.0.4, =0.1.0, =0.10.0, =0.1.0, =1.3.0, =0.5.0, =0.3.2, =0.7.0.dev134, =0.1.4, =0.1.0, =0.5.2, =2.0.4, =2.0.7 and more Source cves: CVE-2026-31235 Source advisory: OSV:GHSA-G82G-J283-HJ97...
EUVD-2026-29558
The imgaug library thru 0.4.0 contains an insecure deserialization vulnerability in its BackgroundAugmenter class within the multicore.py module. The class uses Python's pickle module to deserialize data received via a multiprocessing queue in the augmentimagesworker method without any safety...
GHSA-G82G-J283-HJ97 imgaug contains an insecure deserialization vulnerability in BackgroundAugmenter class within multicore.py module
The imgaug library thru 0.4.0 contains an insecure deserialization vulnerability in its BackgroundAugmenter class within the multicore.py module. The class uses Python's pickle module to deserialize data received via a multiprocessing queue in the augmentimagesworker method without any safety...
aait (>=1.0.4, <=1.0.5), adess (1.0.0) +225 more potentially affected by CVE-2026-31235 via imgaug (>=0.2.5, <=0.4.0)
imgaug PYPI version =0.2.5, =1.0.4, =0.1.0, =0.10.0, =0.1.0, =1.3.0, =0.5.0, =0.3.2, =0.7.0.dev134, =0.1.4, =0.1.0, =0.5.2, =2.0.4, =2.0.7 and more Source cves: CVE-2026-31235 Source advisory: GHSA-G82G-J283-HJ97...
CVE-2026-31235
The imgaug library thru 0.4.0 contains an insecure deserialization vulnerability in its BackgroundAugmenter class within the multicore.py module. The class uses Python's pickle module to deserialize data received via a multiprocessing queue in the augmentimagesworker method without any safety...
CVE-2026-31235: Deserialization of Untrusted Data
The imgaug library thru 0.4.0 contains an insecure deserialization vulnerability in its BackgroundAugmenter class within the multicore.py module. The class uses Python's pickle module to deserialize data received via a multiprocessing queue in the augmentimagesworker method without any safety...
CVE-2026-31235
The imgaug library thru 0.4.0 contains an insecure deserialization vulnerability in its BackgroundAugmenter class within the multicore.py module. The class uses Python's pickle module to deserialize data received via a multiprocessing queue in the augmentimagesworker method without any safety...
CVE-2026-31235
The imgaug library thru 0.4.0 contains an insecure deserialization vulnerability in its BackgroundAugmenter class within the multicore.py module. The class uses Python's pickle module to deserialize data received via a multiprocessing queue in the augmentimagesworker method without any safety...