1 matches found
MGASA-2024-0313 Updated python-astropy packages fix security vulnerability
Version 5.3.2 of the Astropy core package is vulnerable to remote code execution due to improper input validation in the TranformGraph.todotgraph function. A malicious user can provide a command or a script file as a value to the savelayout argument, which will be placed as the first value in a...
8.4CVSS9.4AI score0.01124EPSS
SaveExploits1References3
20