Lucene search
+L

8 matches found

Positive Technologies
Positive Technologies
•added 2026/07/13 12:00 a.m.•53 views

PT-2026-60014

A vulnerability was identified in ByteDance verl up to 0.7.1. Affected is the function math equal of the file prime math/grader.py. The manipulation leads to a sandbox issue. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to ...

6.3CVSS5.5AI score0.00422EPSS
SaveExploits0References10
OSV
OSV
•added 2026/04/23 12:31 a.m.•11 views

GHSA-H57C-V2V3-5V3V verl's math_equal() Vulnerable to Arbitrary Code Execution via Unsafe eval()

A vulnerability was identified in ByteDance verl up to 0.7.1. Affected is the function mathequal of the file primemath/grader.py. The manipulation leads to a sandbox issue. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be...

6.3CVSS5.3AI score0.00422EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
•added 2026/04/23 12:31 a.m.•22 views

verl's math_equal() Vulnerable to Arbitrary Code Execution via Unsafe eval()

A vulnerability was identified in ByteDance verl up to 0.7.1. Affected is the function mathequal of the file primemath/grader.py. The manipulation leads to a sandbox issue. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be...

6.3CVSS5.1AI score0.00422EPSS
SaveExploits0References7Affected Software1
NVD
NVD
•added 2026/04/23 12:16 a.m.•15 views

CVE-2026-6878

A vulnerability was identified in ByteDance verl up to 0.7.0. Affected is the function mathequal of the file primemath/grader.py. The manipulation leads to sandbox issue. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be...

6.3CVSS0.00422EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/04/23 12:00 a.m.•8 views

CVE-2026-6878 ByteDance verl grader.py math_equal sandbox

A vulnerability was identified in ByteDance verl up to 0.7.0. Affected is the function mathequal of the file primemath/grader.py. The manipulation leads to sandbox issue. It is possible to initiate the attack remotely. The complexity of an attack is rather high. The exploitability is told to be...

6.3CVSS5.2AI score0.00422EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/04/23 12:00 a.m.•19 views

PT-2026-34591

Name of the Vulnerable Software and Affected Versions ByteDance verl versions prior to 0.7.1 Description A sandbox issue exists in the math equal function within the prime math/grader.py file. This flaw allows for remote attacks, although the complexity is high and exploitability is considered...

6.3CVSS6.3AI score0.00422EPSS
SaveExploits0References12
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/02/03 5:07 p.m.•18 views

Malicious code in prime-math (PyPI)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSV
OSV
•added 2025/02/03 5:07 p.m.•16 views

MAL-2025-952 Malicious code in prime-math (PyPI)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
Rows per page
Query Builder