Lucene search
+L
PypaMost viewed

7249 matches found

PyPA
PyPA
added 2026/07/13 3:15 p.m.19 views

Open WebUI's Base Model Routing Bypasses Access Control via Model Chaining

Base Model Routing Bypasses Access Control via Model Chaining Affected ComponentModel chaining via basemodelid:- backend/openwebui/routers/models.py lines 170-214, createnewmodel- backend/openwebui/routers/models.py lines 254-308, importmodels- backend/openwebui/main.py lines 1696-1711, base mode...

7.6CVSS6.2AI score0.00248EPSS
SaveExploits1References5Affected Software1
PyPA
PyPA
added 2026/07/13 3:15 p.m.19 views

Microsoft APM CLI's plugin.json component paths escape plugin root and copy arbitrary host files during install

SummaryMicrosoft APM normalizes marketplace plugins by copying plugin components referenced in plugin.json into .apm/. The manifest fields agents, skills, commands, and hooks are attacker-controlled, but the implementation does not enforce that those paths remain inside the plugin directory. A...

7.1CVSS6.2AI score0.00351EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/07/13 3:15 p.m.19 views

Postorius is vulnerable to XSS

Postorius through 1.3.13 does not escape HTML in the message subject when rendering it in the Held messages pop-up, as exploited in the wild in May 2026...

7.2CVSS6.1AI score0.00237EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/13 3:15 p.m.19 views

Aegra has cross-user run injection in /threads/{thread_id}/runs (IDOR)

ImpactAegra deployments running 0.9.0 through 0.9.6 with multiple authenticated users on a shared instance are vulnerable to a cross-tenant IDOR. Any authenticated user User A, given another user's threadid User B, can:- Execute graph runs against User B's thread via POST /threads/threadid/runs,...

8.6CVSS6.3AI score0.00285EPSS
SaveExploits0References9Affected Software1
PyPA
PyPA
added 2026/07/13 3:15 p.m.19 views

pyquorum: Timing side‑channel in mul_mod

ImpactThe mulmod function implements multiplication via a binary expansion loop whose execution time depends on the Hamming weight of the second operand the exponent. An attacker who can measure the time of secret‑sharing operations e.g., via a remote service could progressively recover the value...

6.9CVSS6.2AI score0.00314EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/13 3:15 p.m.19 views

Magic Wormhole: receive, with --output pointing at an existing directory can be path-traversed

ImpactA receiver who specifies "--output " where that output directory currently exists as a directory. Patches0.24.0 will contain the patch WorkaroundsEnsure local target directories specified by "--output" do not already exist ResourcesPrivate email and Signal communications from a user.Magic...

3.5CVSS6.1AI score0.00197EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/07/13 3:15 p.m.19 views

Lemur: LDAP Authentication Globally Disables TLS Certificate Verification When LDAP_USE_TLS Is Enabled

Description OverviewWhen LDAP TLS is enabled LDAPUSETLS = True, Lemur's LDAP authentication module unconditionally disables TLS certificate verification at the global ldap module level. This allows a man-in-the-middle attacker positioned between Lemur and the LDAP server to intercept all...

6.8CVSS6.2AI score0.00094EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/13 3:15 p.m.19 views

Paramiko rsakey.py allows the SHA-1 algorithm

In Paramiko through 4.0.0 before a448945, rsakey.py allows the SHA-1 algorithm...

3.4CVSS6.4AI score0.00114EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/13 3:2 p.m.19 views

Langchain-Chatchat has a Race Condition in its OpenAI-Compatible File Upload API

A vulnerability has been found in chatchat-space Langchain-Chatchat up to 0.3.1.3. Impacted is the function files of the file libs/chatchat-server/chatchat/server/apiserver/openairoutes.py of the component OpenAI-Compatible File Upload API. Such manipulation of the argument file.filename leads to...

2.6CVSS5.4AI score0.00162EPSS
SaveExploits0References9Affected Software1
PyPA
PyPA
added 2026/07/13 3:2 p.m.19 views

SGLang has an Improper Input Validation/Injection Issue

A vulnerability was detected in sgl-project SGLang up to 0.5.9. Impacted is the function gettokenizer of the file python/sglang/srt/utils/hftransformersutils.py of the component HuggingFace Transformer Handler. The manipulation results in deserialization. The attack can be executed remotely. A hi...

6.3CVSS5.8AI score0.00368EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/13 3:2 p.m.19 views

CKAN has Unauthenticated Authorization Bypass in `datastore_search_sql`

ImpactA vulnerability in datastoresearchsql allowed attackers to bypass authorization in order to gain access to private resources and PostgreSQL system information PatchesThe issue has been patched in CKAN 2.10.10 and CKAN 2.11.5 WorkaroundsDisable the DataStore SQL search...

9.1CVSS6.1AI score0.00367EPSS
SaveExploits0References9Affected Software1
PyPA
PyPA
added 2026/07/13 3:2 p.m.19 views

mcpo-simple-server has a Path Traversal issue

A weakness has been identified in getsimpletool mcpo-simple-server up to 0.2.0. Affected is the function deletesharedprompt of the file src/mcposimpleserver/services/promptmanager/basemanager.py. This manipulation of the argument detail causes relative path traversal. It is possible to initiate t...

7.5CVSS6.7AI score0.00512EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/13 3:2 p.m.19 views

CKAN has CSRF exemption primed by anonymous requests

Views can be marked as exempt from CSRF protection Access to the views via tokens or unauthenticated requests marked the endpoint as not requiring CSRF protection. The marking was a member variable in flask-wtf.csrf.CSRFProtect, which was stored as a module level variable in the flaskapp...

6.1CVSS6.1AI score0.00124EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/13 3:2 p.m.19 views

CKAN has Unauthenticated SQL Injection and Authorization Bypass in `datastore_search_sql`

ImpactA vulnerability in datastoresearchsql allowed attackers to inject SQL in order to gain access to private resources and PostgreSQL system information. PatchesThe issue has been patched in CKAN 2.10.10 and CKAN 2.11.5 WorkaroundsDisable the DataStore SQL search ckan.datastore.sqlsearch.enable...

9.8CVSS6.1AI score0.01817EPSS
SaveExploits0References9Affected Software1
PyPA
PyPA
added 2026/07/13 3:2 p.m.19 views

notes-mcp has a Path Traversal issue

A security vulnerability has been detected in edvardlindelof notes-mcp up to 0.1.4. This affects an unknown function of the file notesmcp.py. The manipulation of the argument rootdir/path leads to path traversal. The attack is possible to be carried out remotely. The exploit has been disclosed...

7.5CVSS6.6AI score0.0041EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/13 3:2 p.m.19 views

Wooey has an Incorrect Privilege Assignment issue

A vulnerability was determined in Wooey up to 0.13.2. The impacted element is the function addorupdatescript of the file wooey/api/scripts.py of the component API Endpoint. Executing a manipulation can lead to improper authorization. It is possible to launch the attack remotely. The exploit has...

6.5CVSS6.2AI score0.00214EPSS
SaveExploits0References11Affected Software1
PyPA
PyPA
added 2026/07/13 3:2 p.m.19 views

pip Vulnerable to Inclusion of Functionality from Untrusted Control Sphere

pip prior to version 26.1 would run self-update check functionality after installing wheel files which required importing well-known Python modules names. These module imports were intentionally deferred to increase startup time of the pip CLI. The patch changes self-update functionality to run...

5.3CVSS6.4AI score0.00138EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/13 3:2 p.m.19 views

Apache Doris MCP Server vulnerable to SQL Injection via improper query context neutralization

Apache Doris MCP Server versions prior to 0.6.1 are affected by an improper neutralization flaw in query context handling that may allow execution of unintended SQL statements and bypass of intended query validation and access restrictions through the MCP query execution interface. Versions 0.6.1...

5.3CVSS6.2AI score0.00655EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/13 3:2 p.m.19 views

FastChat has a Content Moderation Bypass via Arena Side-by-Side Views

A vulnerability was detected in lm-sys fastchat up to 0.2.36. Impacted is the function addtext of the component Arena Side-by-Side View Handler. The manipulation results in incorrect control flow. The attack can be launched remotely. The exploit is now public and may be used. The root cause was...

6.9CVSS5.9AI score0.00308EPSS
SaveExploits0References9Affected Software1
PyPA
PyPA
added 2026/07/13 3:2 p.m.19 views

MetaGPT has an eval injection via a cross-site request forgery attack

A vulnerability was determined in FoundationAgents MetaGPT up to 0.8.2. The impacted element is the function evaluateCode of the file metagpt/environment/minecraft/mineflayer/index.js of the component Mineflayer HTTP API. Executing a manipulation can lead to cross-site request forgery. The attack...

8.8CVSS5.7AI score0.00224EPSS
SaveExploits1References8Affected Software1
PyPA
PyPA
added 2026/07/13 2:36 p.m.19 views

PraisonAI: Unauthenticated Information Disclosure of Agent Instructions via /api/agents in AgentOS

SummaryThe AgentOS deployment platform exposes a GET /api/agents endpoint that returns agent names, roles, and the first 100 characters of agent system instructions to any unauthenticated caller. The AgentOS FastAPI application has no authentication middleware, no API key validation, and defaults...

5.3CVSS6.1AI score0.00758EPSS
SaveExploits1References5Affected Software1
PyPA
PyPA
added 2026/07/13 2:36 p.m.20 views

PyMuPDF has a path traversal in _main_.py

A path traversal and arbitrary file write vulnerability exist in the embedded get function in 'main.py' in PyMuPDF version, 1.26.5...

8.2CVSS6.2AI score0.00354EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/13 2:36 p.m.19 views

django-unicorn affected by component state manipulation via unvalidated attribute access

SummaryComponent state manipulation is possible in django-unicorn due to missing access control checks during property updates and method calls. An attacker can bypass the intended ispublic protection to modify internal attributes such as templatename or trigger protected methods. Vulnerability...

5.3CVSS6.1AI score0.0021EPSS
SaveExploits1References5Affected Software1
PyPA
PyPA
added 2026/07/13 2:36 p.m.19 views

dbt-common's commonprefix() doesn't protect against path traversal

ImpactWhat kind of vulnerability is it? Who is impacted?A path traversal vulnerability exists in dbt-common's safeextract function used when extracting tarball archives. The function uses os.path.commonprefix to validate that extracted files remain within the intended destination directory...

5.3CVSS6.2AI score0.00262EPSS
SaveExploits0References9Affected Software1
PyPA
PyPA
added 2026/07/13 2:20 p.m.19 views

TensorFlow has Null Pointer Error in TensorArrayConcatV2

ImpactWhen ctx-stepcontainter is a null ptr, the Lookup function will be executed with a null pointer.pythonimport tensorflow as tftf.rawops.TensorArrayConcatV2handle='a', 'b', flowin = 0.1, dtype=tf.int32, elementshapeexcept0=1 PatchesWe have patched the issue in GitHub commit...

7.5CVSS6.6AI score0.00391EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/13 2:19 p.m.19 views

TensorFlow vulnerable to segfault when opening multiframe gif

ImpactInteger overflow occurs when 2^31 = numframes height width channels 2^32, for example Full HD screencast of at least 346 frames.pythonimport urllib.requestdat =...

7.5CVSS6.7AI score0.00305EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/13 2:19 p.m.19 views

TensorFlow has Null Pointer Error in SparseSparseMaximum

ImpactWhen SparseSparseMaximum is given invalid sparse tensors as inputs, it can give an NPE. pythonimport tensorflow as tftf.rawops.SparseSparseMaximum aindices=1, avalues = 0.1 , ashape = 2, bindices=, bvalues =2 , bshape = 2, PatchesWe have patched the issue in GitHub commit...

7.5CVSS6.6AI score0.00439EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
added 2026/07/13 2:19 p.m.19 views

Overflow in `FusedResizeAndPadConv2D`

ImpactWhen tf.rawops.FusedResizeAndPadConv2D is given a large tensor shape, it overflows.pythonimport tensorflow as tfmode = "REFLECT"strides = 1, 1, 1, 1padding = "SAME"resizealigncorners = Falseinput = tf.constant147, shape=3,3,1,1, dtype=tf.float16size = tf.constant1879048192,1879048192,...

7.5CVSS6.9AI score0.0043EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/07/13 2:19 p.m.19 views

TensorFlow vulnerable to segfault in `LowerBound` and `UpperBound`

ImpactIf LowerBound or UpperBound is given an emptysortedinputs input, it results in a nullptr dereference, leading to a segfault that can be used to trigger a denial of service attack.pythonimport tensorflow as tfouttype = tf.int32sortedinputs = tf.constant, shape=10,0, dtype=tf.float32values =...

7.5CVSS6.9AI score0.00398EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/13 2:19 p.m.19 views

TensorFlow vulnerable to `CHECK` fail in `AudioSummaryV2`

ImpactWhen AudioSummaryV2 receives an input samplerate with more than one element, it gives a CHECK fails that can be used to trigger a denial of service attack.pythonimport tensorflow as tfarg0=''arg1=tf.random.uniformshape=1,1, dtype=tf.float32, maxval=Nonearg2=tf.random.uniformshape=2,1,...

7.5CVSS6.9AI score0.00411EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/13 2:19 p.m.19 views

TensorFlow vulnerable to `CHECK` fail in `FakeQuantWithMinMaxVarsPerChannel`

ImpactIf FakeQuantWithMinMaxVarsPerChannel is given min or max tensors of a rank other than one, it results in a CHECK fail that can be used to trigger a denial of service attack.pythonimport tensorflow as tfnumbits = 8narrowrange = Falseinputs = tf.constant0, shape=4, dtype=tf.float32min =...

7.5CVSS6.9AI score0.00411EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/13 2:19 p.m.19 views

TensorFlow vulnerable to `CHECK` failure in `AvgPoolOp`

ImpactThe AvgPoolOp function takes an argument ksize that must be positive but is not checked. A negative ksize can trigger a CHECK failure and crash the program.pythonimport tensorflow as tfimport numpy as npvalue = np.ones1, 1, 1, 1ksize = 1, 1e20, 1, 1strides = 1, 1, 1, 1padding =...

7.5CVSS6.9AI score0.00583EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/13 10:16 a.m.19 views

PYSEC-2026-3442

Authenticated SSRF in Gravitino JobManager allows server-side HTTP requests to internal network and cloud metadata endpoints via unvalidated job template URIs. A vulnerability in Apache Gravitino.This issue affects Apache Gravitino: from 1.0.0 through 1.2.1.Users are recommended to upgrade to...

6.5CVSS6.1AI score0.00402EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2026/07/09 4:49 p.m.19 views

Missing validation causes denial of service via `LoadAndRemapMatrix`

ImpactThe implementation of tf.rawops.LoadAndRemapMatrix does not fully validate the input arguments. This results in a CHECK-failure which can be used to trigger a denial of service attack:pythonimport tensorflow as tfckptpath = tf.constant "/tmp/warmstartingutiltest5kl2a3pc/tmpph76tep2/model-0"...

5.5CVSS6.2AI score0.00317EPSS
SaveExploits1References11Affected Software1
PyPA
PyPA
added 2026/07/09 4:49 p.m.19 views

NULL Pointer Dereference in OpenCV.

An issue was discovered in OpenCV before 4.1.1 OpenCV-Python before 4.1.1.26. There is a NULL pointer dereference in the function cv::XMLParser::parse at modules/core/src/persistence.cpp...

7.5CVSS6.7AI score0.0337EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/07/09 4:49 p.m.19 views

Integer Overflow or Wraparound in OpenCV

In opencv/modules/imgcodecs/src/grfmtpxm.cpp, function PxMDecoder::readData has an integer overflow when calculate srcpitch. If the image is from remote, may lead to remote code execution or denial of service. This affects OpenCV 3.3 corresponding to OpenCV-Python 3.3.0.9 and earlier...

8.8CVSS7.1AI score0.02699EPSS
SaveExploits0References9Affected Software1
PyPA
PyPA
added 2026/07/07 4:42 p.m.19 views

SageMaker Python SDK has Exposed HMAC

SummarySageMaker Python SDK is an open source library for training and deploying machine learning models on Amazon SageMaker. An issue where the HMAC secret key is stored in environment variables and disclosed via the DescribeTrainingJob API has been identified. Impact- Function and Payload...

8.7CVSS6.7AI score0.00455EPSS
SaveExploits0References10Affected Software1
PyPA
PyPA
added 2026/07/07 4:3 p.m.19 views

MobSF has Stored XSS via Manifest Analysis - Dialer Code Host Field

SummaryA Stored Cross-site Scripting XSS vulnerability in MobSF's Android manifest analysis allows an attacker to execute arbitrary JavaScript in the context of a victim's browser session by uploading a malicious APK. The android:host attribute from elements is rendered in HTML reports without...

8.1CVSS6.2AI score0.0031EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/07/07 4:3 p.m.19 views

vLLM vulnerable to Server-Side Request Forgery (SSRF) through MediaConnector

SummaryA Server-Side Request Forgery SSRF vulnerability exists in the MediaConnector class within the vLLM project's multimodal feature set. The loadfromurl and loadfromurlasync methods obtain and process media from URLs provided by users, using different Python parsing libraries when restricting...

7.1CVSS6.1AI score0.00529EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/07/07 4:3 p.m.19 views

sigstore CSRF possibility in OIDC authentication during signing

SummaryThe sigstore-python OAuth authentication flow is susceptible to Cross-Site Request Forgery. DetailsOAuthSession creates a unique "state" and sends it as a parameter in the authentication request but the "state" in the server response seems not not be cross-checked with this value. Fix shou...

5CVSS5.9AI score0.00158EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/07 4:3 p.m.19 views

PyTorch Vulnerable to Remote Code Execution via Untrusted Checkpoint Files

SummaryA vulnerability in PyTorch's weightsonly unpickler allows an attacker to craft a malicious checkpoint file .pth that, when loaded with torch.load..., weightsonly=True, can corrupt memory and potentially lead to arbitrary code execution. Vulnerability DetailsThe weightsonly=True unpickler...

8.8CVSS6.6AI score0.00695EPSS
SaveExploits1References8Affected Software1
PyPA
PyPA
added 2026/07/07 4:3 p.m.19 views

Chainlit contain a server-side request forgery (SSRF) vulnerability

Chainlit versions prior to 2.9.4 contain a server-side request forgery SSRF vulnerability in the /project/element update flow when configured with the SQLAlchemy data layer backend. An authenticated client can provide a user-controlled url value in an Element, which is fetched by the SQLAlchemy...

8.3CVSS6.3AI score0.04439EPSS
SaveExploits1References8Affected Software1
PyPA
PyPA
added 2026/07/07 4:3 p.m.19 views

ChatterBot Vulnerable to Denial of Service via Database Connection Pool Exhaustion

SummaryChatterBot versions up to 1.2.10 are vulnerable to a denial-of-service condition caused by improper database session and connection pool management. Concurrent invocations of the getresponse method can exhaust the underlying SQLAlchemy connection pool, resulting in persistent service...

7.5CVSS5.9AI score0.00494EPSS
SaveExploits1References9Affected Software1
PyPA
PyPA
added 2026/07/07 4:3 p.m.19 views

FastAPI Api Key has a timing side-channel in verify_key that allows statistical key validity detection

ImpactTiming side-channel vulnerability in verifykey. The method applied a random delay only on verification failures, allowing an attacker to statistically distinguish valid from invalid API keys by measuring response latencies. With enough repeated requests, an adversary could infer whether a...

3.7CVSS6AI score0.00254EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/07 4:3 p.m.19 views

WeasyPrint has a Server-Side Request Forgery (SSRF) Protection Bypass via HTTP Redirect

SummaryA Server-Side Request Forgery SSRF Protection Bypass exists in WeasyPrint's defaulturlfetcher. The vulnerability allows attackers to access internal network resources such as localhost services or cloud metadata endpoints even when a developer has implemented a custom urlfetcher to block...

7.5CVSS6AI score0.00501EPSS
SaveExploits2References9Affected Software1
PyPA
PyPA
added 2026/07/07 4:3 p.m.19 views

vLLM affected by RCE via auto_map dynamic module loading during model initialization

SummaryvLLM loads Hugging Face automap dynamic modules during model resolution without gating on trustremotecode, allowing attacker-controlled Python code in a model repo/path to execute at server startup.--- ImpactAn attacker who can influence the model repo/path local directory or remote Huggin...

9.8CVSS6.2AI score0.00728EPSS
SaveExploits1References8Affected Software1
PyPA
PyPA
added 2026/07/07 4:3 p.m.19 views

Azure Core is vulnerable to deserialization of untrusted data

Deserialization of untrusted data in Azure Core shared client library for Python allows an authorized attacker to execute code over a network...

7.5CVSS6.1AI score0.00776EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 4:3 p.m.19 views

hermes's raw options logging may disclose secrets passed in via subcommand options argument

Thanks, @thunze for reporting this!hermes subcommands take arbitrary options under the -O argument. These have been logged in raw form since https://github.com/softwarepub/hermes/commit/7f64f102e916c76dc44404b77ab2a80f5a4e59b1 in:...

5.9CVSS5.9AI score0.00154EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/07 4:3 p.m.19 views

Label Studio is vulnerable to full account takeover by chaining Stored XSS + IDOR in User Profile via custom_hotkeys field

PrologueThese vulnerabilities have been found and chained by DCODX-AI. Validation of the exploit chain has been confirmed manually. SummaryA persistent stored cross-site scripting XSS vulnerability exists in the customhotkeys functionality of the application. An authenticated attacker or one who...

8.6CVSS5.9AI score0.00243EPSS
SaveExploits1References8Affected Software1
PyPA
PyPA
added 2026/07/07 4:3 p.m.19 views

jaraco.context Has a Path Traversal Vulnerability

SummaryThere is a Zip Slip path traversal vulnerability in the jaraco.context package affecting setuptools as well, in jaraco.context.tarball function. The vulnerability may allow attackers to extract files outside the intended extraction directory when malicious tar archives are processed.The...

8.6CVSS6AI score0.00527EPSS
SaveExploits1References8Affected Software1
Total number of security vulnerabilities5000