CVE-2026-31254

The flash-attention project thru commit e724e2588cbe754beb97cf7c011b5e7e34119e62 2025-13-04 contains a code injection vulnerability CWE-94 in its training script. The script registers the Python eval function as a Hydra configuration resolver under the name eval. This allows configuration files t...

adaro-rl (0.3.0), advermorel (>=0.1.1, <=0.1.6) +16 more potentially affected by CVE-2026-31229 via adversarial-robustness-toolbox (>=0.5.0, <=1.20.1)

adversarial-robustness-toolbox PYPI version =0.5.0, =0.1.1, =0.1.0, =0.0.5, =24.6.0, =23.10.1, =1.0.1, =23.7.1, =0.2.1, =1.0.0, =0.2.0, =0.3.0, =0.4.0, =0.1.0b3, =0.1.0b6 and more Source cves: CVE-2026-31229 Source advisory: SNYK:PYTHON-ADVERSARIALROBUSTNESSTOOLBOX-17675445...

CLSA-2026-1778613560 python3.11: Fix of 2 CVEs

CVE-2025-15282: reject control characters in data: URL mediatypes - CVE-2025-11468: preserve parens when folding email comments to prevent header injection...

GHSA-G76P-4VG5-F4QH llm CLI tool contains a code injection vulnerability via `--functions` command-line argument

The llm CLI tool thru 0.27.1 contains a critical code injection vulnerability via its --functions command-line argument. This argument is intended to allow users to provide custom Python function definitions. However, the tool directly executes the provided code using the unsafe exec function...

change-analyzer (>=0.14.0, <=0.16.1), mindsdb (>=0.9.1.0, <=1.3.1) potentially affected by CVE-2026-31237 via ludwig (>=0.1.1, <=0.17.9)

ludwig PYPI version =0.1.1, =0.14.0, =0.9.1.0, =1.3.1 Source cves: CVE-2026-31237 Source advisory: SNYK:PYTHON-LUDWIG-17057195...

EUVD-2026-29554

Cognee thru v0.4.0 contains a critical remote code execution vulnerability in its notebook cell execution API endpoint. The endpoint is designed to execute arbitrary Python code provided by the user, but it does so using the unsafe exec function without any sandboxing, validation, or security...

athina (1.1.0), atlas-mcp (0.1.0) +78 more potentially affected by CVE-2026-31233 via guardrails-ai (>=0.3.3, <=0.11.0)

guardrails-ai PYPI version =0.3.3, =0.1.39, =0.1.0, =0.1.0, =0.3.1, =0.0.2, =0.1.0, =0.1.0, =0.1.6, =0.0.6, =0.1.1a1 - guardrails-ai-detect-prompt-injection 0.2.1a1 and more Source cves: CVE-2026-31233 Source advisory: SNYK:PYTHON-GUARDRAILSAI-17074770...

b2aiprep (>=0.20.0, <=3.3.3), capstone-text-mining (>=0.0.6, <=0.1.2) +10 more potentially affected by CVE-2026-31223 via snorkel (>=0.9.3, <=0.10.0)

snorkel PYPI version =0.9.3, =0.20.0, =0.0.6, =1.0.2, =0.8.0, =0.1.1, =0.1.2, =0.1.0, =0.6.1, =0.0.0, =1.3.1a1 - t2r2 0.0.1 - ws-benchmark 1.1.2rc0 Source cves: CVE-2026-31223 Source advisory: SNYK:PYTHON-SNORKEL-16758051...

GHSA-CFPG-C974-JFHQ PySyft server-side arbitrary Python execution after code approval

PySyft Syft Datasite/Server versions 0.9.5 and earlier are vulnerable to remote code execution due to insufficient validation and sandboxing of user-submitted code. The system allows low-privileged users to submit Python functions via @sy.syftfunction for remote execution on the server. While a...

b2aiprep (>=0.20.0, <=3.3.3), capstone-text-mining (>=0.0.6, <=0.1.2) +10 more potentially affected by CVE-2026-31222 via snorkel (>=0.9.3, <=0.10.0)

snorkel PYPI version =0.9.3, =0.20.0, =0.0.6, =1.0.2, =0.8.0, =0.1.1, =0.1.2, =0.1.0, =0.6.1, =0.0.0, =1.3.1a1 - t2r2 0.0.1 - ws-benchmark 1.1.2rc0 Source cves: CVE-2026-31222 Source advisory: SNYK:PYTHON-SNORKEL-16758049...

Superduper: Remote code execution via unsafe eval in superduper query parsing

The superduper project thru v0.10.0 contains a critical remote code execution vulnerability in its query parsing component. The parseoppart function in query.py uses the unsafe eval function to dynamically evaluate user-supplied query operands without proper sanitization or restriction. Although...

EUVD-2026-29509

The superduper project thru v0.10.0 contains a critical remote code execution vulnerability in its query parsing component. The parseoppart function in query.py uses the unsafe eval function to dynamically evaluate user-supplied query operands without proper sanitization or restriction. Although...

EUVD-2026-29501

The loadmodel function in the neuralmagictraining.py script of the optimate project in commit a6d302f912b481c94370811af6b11402f51d377f 2024-07-21 allows arbitrary code execution. When a user supplies a directory path via the --model command-line argument, the function reads a module.py file from...

PYSEC-2026-29

changedetection.io is a free open source web page change detection tool. In 0.54.9 and earlier, xpathfilter switches to XML mode for XML/RSS content and creates etree.XMLParserstripcdata=False without explicitly disabling external entity resolution, external DTD loading, or network-backed entity...

CVE-2026-31236

The llm CLI tool thru 0.27.1 contains a critical code injection vulnerability via its --functions command-line argument. This argument is intended to allow users to provide custom Python function definitions. However, the tool directly executes the provided code using the unsafe exec function...

Exploit for CVE-2024-28397

CVE-2024-28397 - Js2Py Sandbox Escape Payload Generator This...

CVE-2026-31224

The snorkel library thru v0.10.0 contains an insecure deserialization vulnerability CWE-502 in the MultitaskClassifier.load method of the MultitaskClassifier class. The method loads model weight files using torch.load without enabling the security-restrictive weightsonly=True parameter. This...

CVE-2026-31225

The superduper project thru v0.10.0 contains a critical remote code execution vulnerability in its query parsing component. The parseoppart function in query.py uses the unsafe eval function to dynamically evaluate user-supplied query operands without proper sanitization or restriction. Although...

CVE-2026-31228

The Adversarial Robustness Toolbox ART thru 1.20.1 contains a remote code execution vulnerability in its Kubeflow component. The robustness evaluation function for PyTorch models uses the unsafe eval function to dynamically evaluate user-supplied strings for the LossFn and Optimizer parameters...

CVE-2026-31220

PySyft Syft Datasite/Server versions 0.9.5 and earlier are vulnerable to remote code execution due to insufficient validation and sandboxing of user-submitted code. The system allows low-privileged users to submit Python functions via @sy.syftfunction for remote execution on the server. While a...