CVE-2026-72577: Missing Authentication for Critical Function

Multiple vulnerabilities in NASA fprime-gds through 3.4.3 allow an unauthenticated remote attacker to achieve arbitrary code execution on the ground station host and inject arbitrary commands to connected spacecraft. The Flask application in src/fprimegds/flask/app.py applies no authentication to...

EUVD-2025-8097

Malicious code in bioql PyPI...

EUVD-2025-8099

Malicious code in bioql PyPI...

EUVD-2025-8096

Malicious code in bioql PyPI...

CVE-2024-55029

NASA Fprime v3.4.3 was discovered to contain multiple cross-site scripting XSS vulnerabilities...

CVE-2024-55030

A command injection vulnerability in the Command Dispatcher Service of NASA Fprime v3.4.3 allows attackers to execute arbitrary commands...

CVE-2024-55028

A template injection vulnerability in the Dashboard of NASA Fprime v3.4.3 allows attackers to execute arbitrary code via uploading a crafted Vue file...

CVE-2024-55028

A template injection vulnerability in the Dashboard of NASA Fprime v3.4.3 allows attackers to execute arbitrary code via uploading a crafted Vue file...

CVE-2024-55029

NASA Fprime v3.4.3 was discovered to contain multiple cross-site scripting XSS vulnerabilities...

CVE-2024-55030

A command injection vulnerability in the Command Dispatcher Service of NASA Fprime v3.4.3 allows attackers to execute arbitrary commands...

CVE-2024-55030

A command injection vulnerability in the Command Dispatcher Service of NASA Fprime v3.4.3 allows attackers to execute arbitrary commands...

CVE-2024-55030

NASA Fprime v3.4.3 contains a command injection vulnerability (CWE-77) within the Command Dispatcher Service . This flaw allows an attacker to execute arbitrary commands on the system. The vulnerability is associated with the fprime-gds (PyPI) package, specifically version 4.3.0 , which may also ...

CVE-2024-55028

The NASA Fprime flight software framework (v3.4.3) is vulnerable to a template injection vulnerability in its Dashboard. Attackers can execute arbitrary code by uploading a specially crafted Vue file . The vulnerability is specifically associated with the fprime-gds (Flight Software Ground Data S...

CVE-2024-55030

A command injection vulnerability in the Command Dispatcher Service of NASA Fprime v3.4.3 allows attackers to execute arbitrary commands...

CVE-2024-55028: Improper Control of Generation of Code

A template injection vulnerability in the Dashboard of NASA Fprime v3.4.3 allows attackers to execute arbitrary code via uploading a crafted Vue file...

PT-2025-12826

Name of the Vulnerable Software and Affected Versions NASA Fprime version 3.4.3 Description A command injection issue in the Command Dispatcher Service allows attackers to execute arbitrary commands. Recommendations For NASA Fprime version 3.4.3, consider disabling the Command Dispatcher Service...

CVE-2024-55030: Improper Neutralization of Special Elements used in a Command

A command injection vulnerability in the Command Dispatcher Service of NASA Fprime v3.4.3 allows attackers to execute arbitrary commands...

CVE-2024-55029: Improper Neutralization of Input During Web Page Generation

NASA Fprime v3.4.3 was discovered to contain multiple cross-site scripting XSS vulnerabilities...

CVE-2024-55029

The NASA Fprime v3.4.3 framework and the fprime-gds (PyPI) package are vulnerable to Cross-site Scripting (XSS) . The root cause is the improper neutralization of input during web page generation, specifically within the Run Commands table of fprime-gds version 4.3.0. An attacker can execute scri...

CVE-2024-55029

NASA Fprime v3.4.3 was discovered to contain multiple cross-site scripting XSS vulnerabilities...