Lucene search
+L

4 matches found

PyPA
PyPA
•added 2026/07/13 2:36 p.m.•40 views

PySpector has a Plugin Sandbox Bypass leads to Arbitrary Code Execution

SummaryPySpector versions = 0.1.6 are affected by a security validation bypass in the plugin system. The validateplugincode function in pluginsystem.py, performs static AST analysis to block dangerous API calls before a plugin is trusted and executed. However, the internal resolvename helper only...

8.3CVSS6.3AI score0.00181EPSS
SaveExploits1References5Affected Software1
OSV
OSV
•added 2026/07/13 2:36 p.m.•21 views

PYSEC-2026-3030 PySpector has a Plugin Sandbox Bypass leads to Arbitrary Code Execution

Summary PySpector versions = 0.1.6 are affected by a security validation bypass in the plugin system. The validateplugincode function in pluginsystem.py, performs static AST analysis to block dangerous API calls before a plugin is trusted and executed. However, the internal resolvename helper onl...

8.3CVSS6.3AI score0.00181EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2026/07/13 12:00 a.m.•25 views

PT-2026-59652

Summary PySpector versions = 0.1.6 are affected by a security validation bypass in the plugin system. The validate plugin code function in plugin system.py, performs static AST analysis to block dangerous API calls before a plugin is trusted and executed. However, the internal resolve name helper...

8.3CVSS6.3AI score0.00181EPSS
SaveExploits1References6
Veracode
Veracode
•added 2026/01/07 3:10 p.m.•23 views

Out-of-bounds Write

wasm3 is vulnerable to Out-of-bounds Write. The vulnerability is due to improper handling of slot setting and indirect function calls in opSetSloti32 and opCallIndirect, which allows a local attacker to manipulate execution and trigger memory corruption...

7.8CVSS6.7AI score0.00203EPSS
SaveExploits1References8Affected Software1
Rows per page
Query Builder