3 matches found
CVE-2026-33057: Improper Control of Generation of Code
Mesop is a Python-based UI framework that allows users to build web applications. In versions 1.2.2 and below, an explicit web endpoint inside the ai/ testing module infrastructure directly ingests untrusted Python code strings unconditionally without authentication measures, yielding standard...
9.8CVSS5.8AI score0.04111EPSS
SaveExploits1References1
EUVD-2024-37394
Malicious code in bioql PyPI...
9.8CVSS6.6AI score0.00776EPSS
SaveExploits1References2
CVE-2024-38530
The Open eClass platform formerly known as GUnet eClass is a complete Course Management System. An arbitrary file upload vulnerability in the "save" functionality of the H5P module enables unauthenticated users to upload arbitrary files on the server's filesystem. This may lead in unrestricted RC...
9.8CVSS7AI score0.00776EPSS
SaveExploits1
20