Lucene search
+L

53 matches found

Github Security Blog
Github Security Blog
added 2025/03/27 6:14 p.m.24 views

Mesop Class Pollution vulnerability leads to DoS and Jailbreak attacks

From @jackfromeast and @superboy-zjc: We have identified a class pollution vulnerability in Mesop = 0.14.0 application that allows attackers to overwrite global variables and class attributes in certain Mesop modules during runtime. This vulnerability could directly lead to a denial of service Do...

8.1CVSS6.8AI score0.00645EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
added 2025/03/27 2:49 p.m.13 views

CVE-2025-30358 Mesop Class Pollution vulnerability leads to DoS and Jailbreak attacks

Mesop is a Python-based UI framework that allows users to build web applications. A class pollution vulnerability in Mesop prior to version 0.14.1 allows attackers to overwrite global variables and class attributes in certain Mesop modules during runtime. This vulnerability could directly lead to...

8.1CVSS8.3AI score0.00645EPSS
SaveExploits0References2
CVE
CVE
added 2025/03/27 2:49 p.m.81 views

CVE-2025-30358

Mesop is a Python-based UI framework. A class pollution vulnerability in Mesop before 0.14.1 allows attackers to overwrite global variables and class attributes at runtime in certain modules, enabling DoS on the server and potential identity confusion (e.g., impersonating assistants or system rol...

8.1CVSS8AI score0.00645EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/03/27 12:0 a.m.11 views

Google Mesop 安全漏洞

Google Mesop is a Python-based UI framework from Google, Inc USA. A security vulnerability exists in Google Mesop versions prior to 0.14.1, which stems from class contamination could lead to a denial of service or other serious consequences...

8.1CVSS6.2AI score0.00645EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2025/02/05 3:28 a.m.13 views

CVE-2024-45601

Mesop is a Python-based UI framework designed for rapid web apps development. A vulnerability has been discovered and fixed in Mesop that could potentially allow unauthorized access to files on the server hosting the Mesop application. The vulnerability was related to insufficient input validatio...

7.5CVSS6.8AI score0.0028EPSS
SaveExploits0
Snyk
Snyk
added 2025/02/01 6:37 a.m.2 views

Class Pollution

Overview mesop is a Build UIs in Python Affected versions of this package are vulnerable to Class Pollution via the dataclassutils component. Remediation Upgrade mesop to version 0.14.1 or higher. References - GitHub Commit...

8.8CVSS6.9AI score
SaveExploits0References3
NVD
NVD
added 2024/09/18 6:15 p.m.15 views

CVE-2024-45601

Mesop is a Python-based UI framework designed for rapid web apps development. A vulnerability has been discovered and fixed in Mesop that could potentially allow unauthorized access to files on the server hosting the Mesop application. The vulnerability was related to insufficient input validatio...

7.5CVSS0.0028EPSS
SaveExploits0References2
CVE
CVE
added 2024/09/18 5:49 p.m.66 views

CVE-2024-45601

CVE-2024-45601 concerns Mesop, a Python-based UI framework. The issue is a local file inclusion risk via Mesop’s static file serving endpoint caused by insufficient input validation, potentially allowing access to server files not meant to be served. Evidence across multiple references (CVE entri...

7.5CVSS7.5AI score0.0028EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/09/18 5:49 p.m.25 views

CVE-2024-45601 Local file Inclusion via static file serving functionality in Mesop

Mesop is a Python-based UI framework designed for rapid web apps development. A vulnerability has been discovered and fixed in Mesop that could potentially allow unauthorized access to files on the server hosting the Mesop application. The vulnerability was related to insufficient input validatio...

7.5CVSS0.0028EPSS
SaveExploits0References2
OSV
OSV
added 2024/09/18 5:49 p.m.16 views

CVE-2024-45601 Local file Inclusion via static file serving functionality in Mesop

Mesop is a Python-based UI framework designed for rapid web apps development. A vulnerability has been discovered and fixed in Mesop that could potentially allow unauthorized access to files on the server hosting the Mesop application. The vulnerability was related to insufficient input validatio...

7.5CVSS6.7AI score0.0028EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2024/09/18 5:49 p.m.24 views

Mesop has a local file Inclusion via static file serving functionality

A vulnerability has been discovered and fixed in Mesop that could potentially allow unauthorized access to files on the server hosting the Mesop application. The vulnerability was related to insufficient input validation in a specific endpoint. This could have allowed an attacker to access files...

7.5CVSS6.8AI score0.0028EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2024/09/18 5:49 p.m.18 views

GHSA-PMV9-3XQP-8W42 Mesop has a local file Inclusion via static file serving functionality

A vulnerability has been discovered and fixed in Mesop that could potentially allow unauthorized access to files on the server hosting the Mesop application. The vulnerability was related to insufficient input validation in a specific endpoint. This could have allowed an attacker to access files...

8.7CVSS7.4AI score0.0028EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2024/09/18 12:0 a.m.7 views

Google Mesop 安全漏洞

Google Mesop is a Python-based UI framework from Google, Inc USA. A security vulnerability exists in Google Mesop version 0.9.0 through versions prior to 0.12.4, which stems from insufficient input validation and could allow unauthorized access to files on the server...

7.5CVSS6.2AI score0.0028EPSS
SaveExploits0References3
Rows per page
Query Builder