7 matches found
EUVD-2026-52692
Perspective 5.0.0 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary operating system commands by submitting crafted expression strings to the PolarsVirtualServer backend, which passes client-supplied input directly to Python's eval with only...
CVE-2026-67195 Perspective 5.0.0 RCE via eval() Expression Injection
Perspective 5.0.0 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary operating system commands by submitting crafted expression strings to the PolarsVirtualServer backend, which passes client-supplied input directly to Python's eval with only...
CVE-2026-67195 Perspective 5.0.0 RCE via eval() Expression Injection
Perspective 5.0.0 contains a remote code execution vulnerability that allows unauthenticated attackers to execute arbitrary operating system commands by submitting crafted expression strings to the PolarsVirtualServer backend, which passes client-supplied input directly to Python's eval with only...
SQL Injection
Overview dagster-snowflake-polars is a Package for integrating Snowflake and Polars with Dagster. Affected versions of this package are vulnerable to SQL Injection via the construction of SQL WHERE clauses in database I/O manager integrations. An attacker can execute arbitrary SQL commands by...
bibjoin (>=0.2.2, <=0.3.0), idhash (0.1.3) +9 more potentially affected by unknown CVE via arrow2 (>=0.5.3, <=0.6.2)
arrow2 CARGO version =0.5.3, =0.2.2, =0.38.0, =0.38.0, =0.39.0 - polars 0.16.0 - polars-arrow 0.16.0 - polars-core 0.16.0 - polars-io 0.16.0 - polars-lazy 0.16.0 - rinfluxdb 0.2.0 - rinfluxdb-polars 0.2.0 Source cves: unknown CVE Source advisory: OSV:GHSA-5J8W-R7G8-5472...
bibjoin (>=0.2.2, <=0.3.0), idhash (0.1.3) +9 more potentially affected by unknown CVE via arrow2 (>=0.5.3, <=0.6.2)
arrow2 CARGO version =0.5.3, =0.2.2, =0.38.0, =0.38.0, =0.39.0 - polars 0.16.0 - polars-arrow 0.16.0 - polars-core 0.16.0 - polars-io 0.16.0 - polars-lazy 0.16.0 - rinfluxdb 0.2.0 - rinfluxdb-polars 0.2.0 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2022-0012...
polars-addict.com XSS vulnerability
Vulnerable URL: http://www.polars-addict.com//search/site/?q= Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 20:52 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 6625933 Google Pagerank| 4 VIP website status...