214 matches found
GHSA-5578-W22F-PFX9 vulnerabilities
Vulnerabilities for packages: label-studio...
GHSA-RFR2-MQ9M-X2QX vulnerabilities
Vulnerabilities for packages: label-studio...
CVE-2026-54621 vulnerabilities
Vulnerabilities for packages: label-studio...
CVE-2026-54690 vulnerabilities
Vulnerabilities for packages: label-studio...
CVE-2026-55389 vulnerabilities
Vulnerabilities for packages: label-studio...
PYSEC-2026-1505 HumanSignal label-studio-ml-backend Deserialization of Untrusted Data vulnerability
A vulnerability has been found in HumanSignal label-studio-ml-backend up to 9fb7f4aa186612806af2becfb621f6ed8d9fdbaf and classified as problematic. Affected by this vulnerability is the function load of the file label-studio-ml-backend/labelstudioml/examples/yolo/utils/neuralnets.py of the...
PYSEC-2026-1506 Label Studio has a Path Traversal Vulnerability via image Field
Description A path traversal vulnerability in Label Studio SDK versions prior to 1.0.10 allows unauthorized file access outside the intended directory structure. Label Studio versions before 1.16.0 specified SDK versions prior to 1.0.10 as dependencies, and the issue was confirmed in Label Studio...
PYSEC-2026-1503 Label Studio allows Server-Side Request Forgery in the S3 Storage Endpoint
Description Label Studio's S3 storage integration feature contains a Server-Side Request Forgery SSRF vulnerability in its endpoint configuration. When creating an S3 storage connection, the application allows users to specify a custom S3 endpoint URL via the s3endpoint parameter. This endpoint U...
Label Studio < 1.18.0 - Reflected XSS
Label Studio 1.18.0 contains a stored XSS caused by improper sanitization in POST /projects/upload-example/ endpoint, letting attackers inject malicious scripts to hijack sessions and perform unauthorized actions, exploit requires sending crafted requests. id: CVE-2025-47783 info: name: Label...
GHSA-C38F-WX89-P2XG vulnerabilities
Vulnerabilities for packages: label-studio...
CVE-2026-44660 vulnerabilities
Vulnerabilities for packages: label-studio...
GHSA-3936-CMFR-PM3M vulnerabilities
Vulnerabilities for packages: open-webui, nemo, kserve, label-studio...
GHSA-752W-5FWX-JX9F vulnerabilities
Vulnerabilities for packages: semgrep, airflow, az, request-1276, py3-cassandra-medusa, dbt-snowflake, datadog-agent, keep, authentik, label-studio, open-webui, datadog-agent-fips, superset, airflow-core, metaflow-service-fips, ggshield, pgadmin4-fips, litellm, authentik-fips, kserve,...
CVE-2026-32274 vulnerabilities
Vulnerabilities for packages: open-webui, nemo, kserve, label-studio...
CVE-2026-32597 vulnerabilities
Vulnerabilities for packages: semgrep, airflow, az, request-1276, py3-cassandra-medusa, dbt-snowflake, datadog-agent, keep, authentik, label-studio, open-webui, datadog-agent-fips, superset, airflow-core, metaflow-service-fips, ggshield, pgadmin4-fips, litellm, authentik-fips, kserve,...
GHSA-XVP8-3MHV-424C vulnerabilities
Vulnerabilities for packages: label-studio...
CVE-2026-28350 vulnerabilities
Vulnerabilities for packages: label-studio...
GHSA-HW26-MMPG-FQFG vulnerabilities
Vulnerabilities for packages: label-studio...