Lucene search
K

293 matches found

CVE
CVE
added 2025/11/04 1:24 p.m.6 views

CVE-2025-12695

The CVE-2025-12695 vulnerability affects DSPy where an overly permissive sandbox around the PythonInterpreter allows reading sensitive files when running untrusted code in an AI agent. Public sources describe an arbitrary-file-read risk via the sandbox, with the affected component being DSPy’s sa...

5.9CVSS6.5AI score0.00012EPSS
Exploits0References1
EUVD
EUVD
added 2025/11/04 1:24 p.m.1 views

EUVD-2025-37741

The overly permissive sandbox configuration in DSPy allows attackers to steal sensitive files in cases when users build an AI agent which consumes user input and uses the “PythonInterpreter” class...

5.9CVSS6.3AI score0.00012EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/11/04 1:24 p.m.7 views

CVE-2025-12695 Insecure configuration in DSPy lead to arbitrary file read when running untrusted code inside the sandbox

The overly permissive sandbox configuration in DSPy allows attackers to steal sensitive files in cases when users build an AI agent which consumes user input and uses the “PythonInterpreter” class...

5.9CVSS0.00012EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/11/04 1:24 p.m.5 views

CVE-2025-12695 Insecure configuration in DSPy lead to arbitrary file read when running untrusted code inside the sandbox

The overly permissive sandbox configuration in DSPy allows attackers to steal sensitive files in cases when users build an AI agent which consumes user input and uses the “PythonInterpreter” class...

5.9CVSS6.5AI score0.00012EPSS
Exploits0References1
Fedora
Fedora
added 2025/10/19 2:41 a.m.2 views

[SECURITY] Fedora 42 Update: python3.10-3.10.19-1.fc42

Python 3.10 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries. The python3.10 package provides the "python3.10" executable:...

7.5CVSS7.2AI score0.01007EPSS
Exploits0
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2019-0149

Malware in sbrugna...

7.5CVSS7.4AI score0.0136EPSS
Exploits0References13
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2015-2055

Malware in sbrugna...

4.6CVSS6.4AI score0.00075EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2019-0150

Malware in sbrugna...

7.5CVSS7.4AI score0.0136EPSS
Exploits0References13
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2015-4257

Malware in sbrugna...

7.2CVSS6.4AI score0.00122EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2015-4254

Malware in sbrugna...

3.6CVSS6.4AI score0.00112EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2024-18000

Malicious code in bioql PyPI...

8.8CVSS8.4AI score0.00103EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.3 views

EUVD-2022-0334

Malicious code in bioql PyPI...

6.5CVSS6.4AI score0.00303EPSS
Exploits1References8
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-24141

Malicious code in bioql PyPI...

7.8CVSS6.4AI score0.00029EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2024-18001

Malicious code in bioql PyPI...

8.8CVSS6.4AI score0.00103EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2025-16108

Malicious code in bioql PyPI...

4.8CVSS6.4AI score0.00064EPSS
Exploits0References5
EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2024-17999

Malicious code in bioql PyPI...

8.8CVSS6.4AI score0.00103EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2022-52519

Malicious code in bioql PyPI...

7.8CVSS7.5AI score0.00051EPSS
Exploits2References8
Redos
Redos
added 2025/09/25 12:0 a.m.5 views

ROS-20250925-03

Vulnerability of TarFile.extractall and TarFile.extract functions of tarfile module of Python programming language interpreter CPython is related to incorrect restriction of path name of the directory with restricted directory. Python programming language interpreter CPython functions...

9.4CVSS6.4AI score0.01012EPSS
Exploits14
Redos
Redos
added 2025/09/25 12:0 a.m.4 views

ROS-20250925-01

Vulnerability of TarFile.extractall and TarFile.extract functions of tarfile module of Python programming language interpreter CPython is related to incorrect restriction of path name of the directory with restricted directory. Python programming language interpreter CPython functions...

9.4CVSS7AI score0.01012EPSS
Exploits14
Redos
Redos
added 2025/09/23 12:0 a.m.2 views

ROS-20250923-04

A vulnerability in the Python programming language interpreter CPython is related to insufficient validation of user data in Lib/email/headervalueparser.py. user data in Lib/email/headervalueparser.py. Exploitation of the vulnerability could allow an attacker acting remotely to execute a spoofing...

2.3CVSS5.6AI score0.00753EPSS
Exploits0
Rows per page
Query Builder