GHSA-747F-WW56-4Q4H Kedro deserialization vulnerability

A Remote Code Execution RCE vulnerability has been identified in the Kedro ShelveStore class version 0.19.8. This vulnerability allows an attacker to execute arbitrary Python code via deserialization of malicious payloads, potentially leading to a full system compromise. The ShelveStore class use...

CVE-2024-9701

CVE-2024-9701 —Kedro’s ShelveStore (version 0.19.8) is vulnerable to Remote Code Execution due to unsafe deserialization: it uses Python’s shelve (pickle-based) and a crafted payload stored in the shelve file can execute arbitrary code upon deserialization. Details are tied to Kedro 0.19.8; no re...

Kedro 代码问题漏洞

Kedro is a production-ready data science toolkit from Kedro Open Source. A code issue vulnerability exists in Kedro version 0.19.8, which stems from deserializing a malicious payload and could lead to remote code execution...

Lemmy 代码问题漏洞

Lemmy is Lemmy open source free software for building social news aggregators and web forums. A code issue vulnerability exists in Lemmy 0.19.8 and earlier versions, which stems from a dependency in activitypubfederation that does not properly handle Webfinger requests, leading to server-side...

CVE-2022-26255

Clash for Windows v0.19.8 was discovered to allow arbitrary code execution via a crafted payload injected into the Proxies name column...

PT-2022-17746 · Unknown · Clash For Windows

Name of the Vulnerable Software and Affected Versions: Clash for Windows version 0.19.8 Description: The issue allows for arbitrary code execution via a crafted payload injected into the Proxies name column. Recommendations: For Clash for Windows version 0.19.8, consider restricting access to the...

GNU gettext 'default_add_message' function double release vulnerability

GNU gettext is an open source package for writing multilingual programs developed by the GNU Project. A double release vulnerability exists in the 'defaultaddmessage' function of the read-catalog.c file in GNU gettext version 0.19.8. No details of the vulnerability are provided at this time...