Lucene search
+L

3 matches found

OSV
OSV
added 2026/07/13 2:36 p.m.7 views

PYSEC-2026-3030 PySpector has a Plugin Sandbox Bypass leads to Arbitrary Code Execution

Summary PySpector versions = 0.1.6 are affected by a security validation bypass in the plugin system. The validateplugincode function in pluginsystem.py, performs static AST analysis to block dangerous API calls before a plugin is trusted and executed. However, the internal resolvename helper onl...

8.3CVSS6.5AI score0.00169EPSS
SaveExploits1References5
Vulnrichment
Vulnrichment
added 2026/03/20 7:59 p.m.4 views

CVE-2026-33139 PySpector: Plugin Sandbox Bypass leads to Arbitrary Code Execution

PySpector is a static analysis security testing SAST Framework engineered for modern Python development workflows. PySpector versions 0.1.6 and prior are affected by a security validation bypass in the plugin system. The validateplugincode function in pluginsystem.py, performs static AST analysis...

8.3CVSS5.9AI score0.00169EPSS
SaveExploits1References1
OSV
OSV
added 2026/03/18 4:33 p.m.5 views

GHSA-V3XV-8VC3-H2M6 PySpector has a Plugin Sandbox Bypass leads to Arbitrary Code Execution

Summary PySpector versions = 0.1.6 are affected by a security validation bypass in the plugin system. The validateplugincode function in pluginsystem.py, performs static AST analysis to block dangerous API calls before a plugin is trusted and executed. However, the internal resolvename helper onl...

8.3CVSS6.3AI score0.00169EPSS
SaveExploits1References3
Rows per page
Query Builder