Lucene search
+L

1 matches found

OSV
OSV
added 2024/09/25 6:8 p.m.11 views

MGASA-2024-0313 Updated python-astropy packages fix security vulnerability

Version 5.3.2 of the Astropy core package is vulnerable to remote code execution due to improper input validation in the TranformGraph.todotgraph function. A malicious user can provide a command or a script file as a value to the savelayout argument, which will be placed as the first value in a...

8.4CVSS9.4AI score0.01124EPSS
SaveExploits1References3
Rows per page
Query Builder