PYSEC-2026-1215 XPixelGroup BasicSR Command Injection

XPixelGroup BasicSR through 1.4.2 might locally allow code execution in contrived situations where "scontrol show hostname" is executed in the presence of a crafted SLURMNODELIST environment variable...

Arbitrary Command Injection

Overview basicsr is an Open Source Image and Video Super-Resolution Toolbox Affected versions of this package are vulnerable to Arbitrary Command Injection through the execution of scontrol show hostname in an environment where the SLURMNODELIST variable is manipulated. Remediation There is no...

PT-2025-11079

Name of the Vulnerable Software and Affected Versions: XPixelGroup BasicSR versions 1.4.2 and earlier Description: The issue might locally allow code execution in specific situations where scontrol show hostname is executed with a crafted SLURM NODELIST environment variable. Recommendations: For...

CVE-2024-27763: Improper Neutralization of Special Elements used in a Command

XPixelGroup BasicSR through 1.4.2 might locally allow code execution in contrived situations where "scontrol show hostname" is executed in the presence of a crafted SLURMNODELIST environment variable...