Lucene search
+L

4 matches found

Mageia
Mageia
•added 2024/09/25 6:08 p.m.•24 views

Updated python-astropy packages fix security vulnerability

Version 5.3.2 of the Astropy core package is vulnerable to remote code execution due to improper input validation in the TranformGraph.todotgraph function. A malicious user can provide a command or a script file as a value to the savelayout argument, which will be placed as the first value in a...

8.4CVSS7.7AI score0.01134EPSS
SaveExploits1References2
OSV
OSV
•added 2024/03/18 7:15 p.m.•7 views

DEBIAN-CVE-2023-41334

Astropy is a project for astronomy in Python that fosters interoperability between Python astronomy packages. Version 5.3.2 of the Astropy core package is vulnerable to remote code execution due to improper input validation in the TranformGraph.todotgraph function. A malicious user can provide a...

8.4CVSS8.5AI score0.01134EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/03/18 12:00 a.m.•15 views

Astropy Security Breach

Astropy is a Python astronomy project designed to promote interoperability between Python astronomy packages. A security vulnerability exists in Astropy version 5.3.2, which stems from an improper input validation issue in the function TranformGraph.todotgraph, leading to a remote code execution...

8.4CVSS8.1AI score0.01134EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/18 12:00 a.m.•1 views

CVE-2023-41334: Improper Neutralization of Special Elements used in a Command

Astropy is a project for astronomy in Python that fosters interoperability between Python astronomy packages. Version 5.3.2 of the Astropy core package is vulnerable to remote code execution due to improper input validation in the TranformGraph.todotgraph function. A malicious user can provide a...

8.4CVSS6.2AI score0.01134EPSS
SaveExploits1References2
Rows per page
Query Builder