Lucene search
+L

5 matches found

PyPA
PyPA
•added 2026/07/13 2:36 p.m.•34 views

PySpector has a Plugin Sandbox Bypass leads to Arbitrary Code Execution

SummaryPySpector versions = 0.1.6 are affected by a security validation bypass in the plugin system. The validateplugincode function in pluginsystem.py, performs static AST analysis to block dangerous API calls before a plugin is trusted and executed. However, the internal resolvename helper only...

8.3CVSS6.5AI score0.00181EPSS
SaveExploits1References5Affected Software1
Positive Technologies
Positive Technologies
•added 2026/07/13 12:00 a.m.•22 views

PT-2026-59652

Summary PySpector versions = 0.1.6 are affected by a security validation bypass in the plugin system. The validate plugin code function in plugin system.py, performs static AST analysis to block dangerous API calls before a plugin is trusted and executed. However, the internal resolve name helper...

8.3CVSS6.5AI score0.00181EPSS
SaveExploits1References6
RedhatCVE
RedhatCVE
•added 2026/03/26 3:01 p.m.•30 views

CVE-2026-33139

PySpector is a static analysis security testing SAST Framework engineered for modern Python development workflows. PySpector versions 0.1.6 and prior are affected by a security validation bypass in the plugin system. The validateplugincode function in pluginsystem.py, performs static AST analysis...

8.3CVSS5.9AI score0.00181EPSS
SaveExploits1References1
Github Security Blog
Github Security Blog
•added 2026/03/18 4:33 p.m.•18 views

PySpector has a Plugin Sandbox Bypass leads to Arbitrary Code Execution

Summary PySpector versions = 0.1.6 are affected by a security validation bypass in the plugin system. The validateplugincode function in pluginsystem.py, performs static AST analysis to block dangerous API calls before a plugin is trusted and executed. However, the internal resolvename helper onl...

8.3CVSS6.3AI score0.00181EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
•added 2026/03/18 12:00 a.m.•20 views

PT-2026-26196

Name of the Vulnerable Software and Affected Versions PySpector versions 0.1.6 and prior Description PySpector, a static analysis security testing framework for Python development, is affected by a security validation bypass in its plugin system. The validate plugin code function in plugin...

8.3CVSS6.4AI score0.00181EPSS
SaveExploits1References9
Rows per page
Query Builder