Lucene search
+L

3 matches found

RedhatCVE
RedhatCVE
added 2026/03/26 3:1 p.m.16 views

CVE-2026-33139

PySpector is a static analysis security testing SAST Framework engineered for modern Python development workflows. PySpector versions 0.1.6 and prior are affected by a security validation bypass in the plugin system. The validateplugincode function in pluginsystem.py, performs static AST analysis...

8.3CVSS5.9AI score0.00169EPSS
SaveExploits1References1
Github Security Blog
Github Security Blog
added 2026/03/18 4:33 p.m.9 views

PySpector has a Plugin Sandbox Bypass leads to Arbitrary Code Execution

Summary PySpector versions = 0.1.6 are affected by a security validation bypass in the plugin system. The validateplugincode function in pluginsystem.py, performs static AST analysis to block dangerous API calls before a plugin is trusted and executed. However, the internal resolvename helper onl...

8.3CVSS6.3AI score0.00169EPSS
SaveExploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2026/03/18 12:0 a.m.9 views

PT-2026-26196

Name of the Vulnerable Software and Affected Versions PySpector versions 0.1.6 and prior Description PySpector, a static analysis security testing framework for Python development, is affected by a security validation bypass in its plugin system. The validate plugin code function in plugin...

8.3CVSS6.4AI score0.00169EPSS
SaveExploits1References9
Rows per page
Query Builder