Lucene search
+L
PypaMost viewed

7218 matches found

PyPA
PyPA
added 2026/07/07 4:2 p.m.19 views

Salt's worker process vulnerable to denial of service through file read operation

Worker process denial of service through file read operation. .A vulnerability exists in the Master's “pubret” method which is exposed to all minions. The un-sanitized input value “jid” is used to construct a path which is then opened for reading. An attacker could exploit this vulnerabilities by...

5.6CVSS6AI score0.00121EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/07 4:2 p.m.19 views

Weblate lacks rate limiting when verifying second factor

ImpactThe verification of the second factor was not subject to rate limiting. The absence of rate limiting on the second factor endpoint allows an attacker with valid credentials to automate OTP guessing. PatchesThis issue has been addressed in Weblate 5.12 via...

4.9CVSS5.9AI score0.00222EPSS
SaveExploits0References9Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.19 views

imaginAIry Denial of Service (DoS) vulnerability

A Denial of Service DoS vulnerability exists in the brycedrennan/imaginairy repository, version 15.0.0. The vulnerability is present in the /api/stablestudio/generate endpoint, which can be exploited by sending an invalid request. This causes the server process to terminate abruptly, outputting...

7.5CVSS5.9AI score0.00664EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.19 views

Missing ratelimit on passwrod resets in zenml

zenml-io/zenml version 0.56.4 is vulnerable to an account takeover due to the lack of rate-limiting in the password change function. An attacker can brute-force the current password in the 'Update Password' function, allowing them to take over the user's account. This vulnerability is due to the...

5.4CVSS6AI score0.00456EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.19 views

LoLLMS Path Traversal vulnerability

A path traversal vulnerability exists in the parisneo/lollms application, specifically within the sanitizepathfromendpoint and sanitizepath functions in lollmscore\lollms\security.py. This vulnerability allows for arbitrary file reading when the application is running on Windows. The issue arises...

9.8CVSS6.1AI score0.28317EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.19 views

ydata cross-site scripting

A cross-site scripting XSS vulnerability in versions 3.7.0 or newer of Ydata's ydata-profiling open-source library allows for payloads to be run when a maliocusly crafted report is viewed in the browser...

7.8CVSS5.8AI score0.00321EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.19 views

Slack integration leaks sensitive information in logs

ImpactSentry's Slack integration incorrectly records the incoming request body in logs. This request data can contain sensitive information, including the deprecated Slack verification token. With this verification token, it is possible under specific configurations, an attacker can forge request...

2CVSS5.9AI score0.00575EPSS
SaveExploits0References11Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.19 views

rockhopper Buffer Overflow vulnerability

A vulnerability, which was classified as critical, has been found in bwoodsend rockhopper up to 0.1.2. Affected by this issue is the function countrows of the file rockhopper/src/raggedarray.c of the component Binary Parser. The manipulation of the argument raw leads to buffer overflow. Local...

5.3CVSS6.1AI score0.00233EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.19 views

aiosmtpd STARTTLS unencrypted commands injection

SummaryServers based on aiosmtpd accept extra unencrypted commands after STARTTLS, treating them as if they came from inside the encrypted connection. This could be exploited by a MitM attack. References NO STARTTLS: Similar vulnerabilities discovered by previous researchers...

5.4CVSS5.9AI score0.00226EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.19 views

PyCryptodome and pycryptodomex side-channel leakage for OAEP decryption

PyCryptodome and pycryptodomex before 3.19.1 allow side-channel leakage for OAEP decryption, exploitable for a Manger attack...

7.1CVSS6.5AI score0.00618EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.19 views

PraisonAI vulnerable to sandbox escape via `print.__self__` builtins module leak in `execute_code` (subprocess mode)

Summaryexecutecode in praisonaiagents/tools/pythontools.py v1.6.37, subprocess sandbox mode can be fully bypassed using print.self to retrieve the real Python builtins module, from which import can be extracted via vars and runtime string construction. This achieves arbitrary OS command execution...

9.9CVSS6.6AI score0.00602EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.19 views

ChromaDB Python project has a pre-authentication code injection vulnerability

A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a malicious model repository and trustremotecode set to true in...

10CVSS7.5AI score0.12387EPSS
SaveExploits2References6Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.19 views

BoxLite: Permission Bypass Allows Modification of Read-Only Files

SummaryBoxlite is a sandbox service that allows users to create lightweight virtual machines Boxes and launch OCI containers within them to run untrusted code.One of the core security features claimed by Boxlite is the ability to mount host directories in read-only mode readonly=True into the VM...

10CVSS6.2AI score0.00289EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/06/26 4:48 p.m.19 views

Malicious code in pyphetools (PyPI)

Part of the "Hades" wave of the Shai-Hulud supply-chain campaign. On 2026-06-08,malicious phantom releases of pyphetools were published to PyPI using stolencredentials. The package executes a bundled JavaScript payload via the Bunruntime on import that harvests and exfiltrates credentials and...

5.8AI score
SaveExploits0References3Affected Software1
PyPA
PyPA
added 2026/06/22 6:16 p.m.19 views

PYSEC-2026-249

Starlette is a lightweight ASGI framework/toolkit. From 0.4.1 until 1.3.1, request.form accepts maxfields and maxpartsize to bound resource consumption while parsing form data. These limits are enforced for multipart/form-data, but silently ignored for application/x-www-form-urlencoded. An...

7.5CVSS5.8AI score0.00397EPSS
SaveExploits0References1Affected Software1
PyPA
PyPA
added 2026/06/01 5:17 p.m.19 views

PYSEC-0000-CVE-2026-8643

pip would treat consolescripts and guiscripts as paths instead of file names without sanitizing the resolved absolute path to the installation directory, leading to entry points being installed outside the installation directory...

5.5CVSS5.5AI score0.0032EPSS
SaveExploits0References3Affected Software1
PyPA
PyPA
added 2026/06/01 9:16 a.m.19 views

PYSEC-2026-172

A bug in Apache Airflow's rendered-template field handling caused nested sensitive-key masking e.g. nested password / token / secret / apikey keys inside a JSON template structure to be bypassed when the rendered field exceeded core maxtemplatedfieldlength: Airflow stringified the structure befor...

7.5CVSS5.8AI score0.00586EPSS
SaveExploits0References3Affected Software1
PyPA
PyPA
added 2026/05/27 8:16 p.m.19 views

PYSEC-2026-188

Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.6.12 and 1.7.1, an unauthenticated open redirect in Authlib's OpenIDImplicitGrant and OpenIDHybridGrant authorization endpoint lets a remote attacker cause the authorization server to issue an HTTP 302 to an...

6.1CVSS5.8AI score0.00249EPSS
SaveExploits1References1Affected Software1
PyPA
PyPA
added 2026/05/12 6:17 p.m.19 views

PYSEC-2026-30

changedetection.io is a free open source web page change detection tool. Prior to 0.55.1, the vulnerability is caused by trusting attacker-controlled snapshot paths restored from backup files. The vulnerable flow starts in the backup restore logic. When a backup ZIP is restored, the application...

7.5CVSS5.8AI score0.00354EPSS
SaveExploits1References3Affected Software1
PyPA
PyPA
added 2026/05/11 6:16 p.m.19 views

PYSEC-2026-127

pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev100, the setconfigvalue API method @permissionPerms.SETTINGS in src/pyload/core/api/init.py gates security-sensitive options behind a hand-maintained allowlist ADMINONLYCOREOPTIONS. The allowlist contains...

8.3CVSS5.8AI score0.00396EPSS
SaveExploits1References1Affected Software1
PyPA
PyPA
added 2026/04/24 8:16 p.m.19 views

PYSEC-2026-109

pretalx is a conference planning tool. Prior to 2026.1.0, an unauthenticated attacker can send arbitrary HTML-rendered emails from a pretalx instance's configured sender address by embedding malformed HTML or markdown link syntax in a user-controlled template placeholder such as the account displ...

6.1CVSS5.9AI score0.00154EPSS
SaveExploits0References1Affected Software1
PyPA
PyPA
added 2026/04/07 8:16 p.m.19 views

PYSEC-2026-70

JWCrypto implements JWK, JWS, and JWE specifications using python-cryptography. Prior to 1.5.7, an unauthenticated attacker can exhaust server memory by sending crafted JWE tokens with ZIP compression. The existing patch for CVE-2024-28102 limits input token size to 250KB but does not validate th...

6.8CVSS6.7AI score0.0098EPSS
SaveExploits2References1Affected Software1
PyPA
PyPA
added 2026/03/24 8:16 p.m.19 views

PYSEC-2026-122

pyLoad is a free and open-source download manager written in Python. Prior to version 0.5.0b3.dev97, a Host Header Spoofing vulnerability in the @localcheck decorator allows unauthenticated external attackers to bypass local-only restrictions. This grants access to the Click'N'Load API endpoints,...

6.5CVSS5.9AI score0.00183EPSS
SaveExploits1References1Affected Software1
PyPA
PyPA
added 2026/03/17 11:16 a.m.19 views

PYSEC-2026-16

Apache Airflow versions 3.1.0 through 3.1.7session token token in cookies is set to path=/ regardless of the configured webserver baseurl or api baseurl. This allows any application co-hosted under the same domain to capture valid Airflow session tokens from HTTP request headers, allowing full...

7.5CVSS5.4AI score0.00677EPSS
SaveExploits0References4Affected Software1
PyPA
PyPA
added 2026/03/05 8:16 p.m.19 views

PYSEC-2026-83

LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB both sync and async, via aiosqlite. In version 1.0.9 and prior, LangGraph checkpointers can load msgpack-encoded checkpoints that reconstruct Python objects during deserialization. If an attacker can...

7.2CVSS5.8AI score0.04928EPSS
SaveExploits0References1Affected Software1
PyPA
PyPA
added 2025/12/15 2:15 p.m.19 views

PYSEC-2025-111

An issue was discovered in allauth-django before 65.13.0. Both Okta and NetIQ were using preferredusername as the identifier for third-party provider accounts. That value may be mutable and should therefore be avoided for authorization decisions. The providers are now using sub instead...

5.4CVSS5.8AI score0.00146EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2025/12/05 11:15 p.m.19 views

PYSEC-2025-78

Langflow versions up to and including 1.6.9 contain a chained vulnerability that enables account takeover and remote code execution. An overly permissive CORS configuration alloworigins='' with allowcredentials=True combined with a refresh token cookie configured as SameSite=None allows a malicio...

9.4CVSS8AI score0.83844EPSS
SaveExploits3References4Affected Software1
PyPA
PyPA
added 2025/06/23 9:15 p.m.19 views

PYSEC-2025-70

A Server-Side Request Forgery SSRF vulnerability exists in the RequestsToolkit component of the langchain-community package specifically, langchaincommunity.agenttoolkits.openapi.toolkit.RequestsToolkit in langchain-ai/langchain version 0.0.27. This vulnerability occurs because the toolkit does n...

10CVSS6.8AI score0.15883EPSS
SaveExploits1References4Affected Software1
PyPA
PyPA
added 2025/05/14 11:16 a.m.19 views

PYSEC-2025-60

Exposure of Sensitive Information to an Unauthorized Actor, Insertion of Sensitive Information into Log File vulnerability in the OpenIdAuthorizer of Apache IoTDB.This issue affects Apache IoTDB: from 0.10.0 through 1.3.3, from 2.0.1-beta before 2.0.2.Users are recommended to upgrade to version...

7.5CVSS6.9AI score0.00712EPSS
SaveExploits0References4Affected Software1
PyPA
PyPA
added 2025/03/20 10:15 a.m.19 views

PYSEC-2025-93

gaizhenbiao/chuanhuchatgpt version git d4ec6a3 is affected by a local file inclusion vulnerability due to the use of the gradio component gr.JSON, which has a known issue CVE-2024-4941. This vulnerability allows unauthenticated users to access arbitrary files on the server by uploading a speciall...

7.5CVSS7AI score0.0083EPSS
SaveExploits2References1Affected Software1
PyPA
PyPA
added 2025/02/10 7:15 p.m.19 views

PYSEC-2025-84

A Local File Inclusion LFI vulnerability exists in the /load-workflow endpoint of modelscope/agentscope version v0.0.4. This vulnerability allows an attacker to read arbitrary files from the server, including sensitive files such as API keys, by manipulating the filename parameter. The issue aris...

7.5CVSS7.2AI score0.00501EPSS
SaveExploits1References1Affected Software1
PyPA
PyPA
added 2025/01/24 7:56 p.m.19 views

uniapi version 1.0.7 contained an information harvesting script.

uniapi version 1.0.7 introduces code that would executeon import of the module and download a script from a remote URL,and would then execute the downloaded script in a thread.The downloaded script would harvest system informationand POST the information to another remote URL.This code was found ...

7AI score
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2024/11/08 10:15 p.m.19 views

PYSEC-2024-304

wasm3 139076a suffers from Invalid Memory Read, leading to DoS and potential Code Execution...

8.4CVSS5.8AI score0.00242EPSS
SaveExploits1References3Affected Software1
PyPA
PyPA
added 2024/07/01 7:15 p.m.19 views

PYSEC-2024-274

Gradio v4.36.1 was discovered to contain a code injection vulnerability via the component /gradio/componentmeta.py. This vulnerability is triggered via a crafted input. NOTE: the supplier disputes this because the report is about a user attacking himself...

9.8CVSS5.8AI score0.0087EPSS
SaveExploits1References3Affected Software1
PyPA
PyPA
added 2023/09/29 9:14 p.m.19 views

PYSEC-2023-182

opencv-contrib-python-headless versions before v4.8.1.78 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863. opencv-contrib-python-headless v4.8.1.78 upgrades the bundled libwebp binary to v1.3.2...

8.8CVSS8.1AI score0.99735EPSS
SaveExploits9References3Affected Software1
PyPA
PyPA
added 2023/07/15 11:15 p.m.19 views

PYSEC-2023-312

Redis before 6cbea7d allows a replica to cause an assertion failure in a primary server by sending a non-administrative command specifically, a SET command. NOTE: this was fixed for Redis 6.2.x and 7.x in 2021. Versions before 6.2 were not intended to have safety guarantees related to this...

5.9CVSS7.4AI score0.01309EPSS
SaveExploits1References5Affected Software1
PyPA
PyPA
added 2021/11/05 9:15 p.m.19 views

PYSEC-2021-398

TensorFlow is an open source platform for machine learning. In affected versions the shape inference functions for the QuantizeAndDequantizeV operations can trigger a read outside of bounds of heap allocated array. The fix will be included in TensorFlow 2.7.0. We will also cherrypick this commit ...

7.1CVSS6.9AI score0.00148EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2021/08/12 11:15 p.m.19 views

PYSEC-2021-788

TensorFlow is an end-to-end open source platform for machine learning. In affected versions the shape inference code for tf.rawops.Dequantize has a vulnerability that could trigger a denial of service via a segfault if an attacker provides invalid arguments. The shape inference implementation use...

5.5CVSS7.1AI score0.00148EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2026/07/23 11:41 a.m.19 views

PraisonAI: Jobs API exposes agent-execution endpoints with no authentication

praisonai: Jobs API exposes agent-execution endpoints with no authenticationResearcher: Kai Aizen — SnailSploit @SnailSploit, Adversarial & Offensive Security Research Target: https://github.com/MervinPraison/PraisonAI---Package: praisonai on PyPIAffected version empirically tested:...

9.8CVSS6.6AI score
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/07/23 11:41 a.m.19 views

PraisonAI: Unauthenticated RCE via Jobs API + Approval Bypass

Unauthenticated Remote Code Execution via Jobs API and Approval Bypass in PraisonAI Summary An unauthenticated attacker can execute arbitrary OS commands on any server runningthe PraisonAI Jobs API by submitting a crafted workflow YAML. The attack chains twoweaknesses: the /api/v1/runs endpoint...

9.8CVSS7.1AI score
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/07/13 10:16 p.m.18 views

PYSEC-2026-3450

Ollama downloadBlob Improper Validation of Array Index Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Ollama. Authentication is not required to exploit this vulnerability.The specific flaw exists...

7.5CVSS7AI score0.00391EPSS
SaveExploits0References1Affected Software1
PyPA
PyPA
added 2026/07/13 3:46 p.m.18 views

pypdf: Possible infinite loop when processing threads/articles in writer

ImpactAn attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires merging a file with threads/articles into a writer. PatchesThis has been fixed in pypdf==6.13.1. WorkaroundsIf users cannot upgrade yet, consider applying the changes from PR 3839...

6.9CVSS6AI score0.0011EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/13 3:46 p.m.18 views

Open WebUI has Blind Server Side Request Forgery in its Image Edit Functionality

SummaryThere is a blind server side request forgery in the functionality that allows editing an image via a prompt. The affected function will perform a GET request on the URL provided by the user. There is no restriction on the domain of the provided URL allowing the local address space to be...

4.3CVSS6.1AI score0.00292EPSS
SaveExploits1References5Affected Software1
PyPA
PyPA
added 2026/07/13 3:46 p.m.18 views

Linuxfabrik Monitoring Plugins have local privilege escalation using embedded command

SummaryWhen a check plugin places user provided input inside a command which is passed to shellexec, an attacker can abuse this to run arbitrary commands. This is mainly dangerous for plugins which are listed in the sudoers file, because this allows an attacker controlling the nagios user to get...

7.8CVSS6.3AI score
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/07/13 3:46 p.m.18 views

Kiwi TCMS vulnerable to stored XSS via JavaScript: URI in extra_link field (TestPlan & TestCase)

SummaryIn Kiwi TCMS the fields TestCase.extralink and TestPlan.extralink were meant to represent URLs to external resources however in versions prior to 16.1 user input was not being sanitized and values were rendered verbatim which represents an opportunity for cross-site scripting exploitation...

6AI score
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/13 3:46 p.m.18 views

mcp-memory-service: Missing Authentication on Document API Endpoints Allows Unauthenticated Memory Read/Write/Delete

Missing Authentication on Document API Endpoints Allows Unauthenticated Memory Read/Write/Delete SummaryAll HTTP routes under /api/documents/ in mcp-memory-service are served without any authentication dependency, even when the server is configured with an API key MCPAPIKEY or OAuth. An...

9.8CVSS6.2AI score
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/07/13 3:46 p.m.18 views

Open Babel has out-of-bounds write (overlapping memcpy) in zipstream basic_unzip_streambuf::underflow

SummaryA memory-safety vulnerability in Open Babel's bundled zipstreamdecompression code caused an out-of-bounds write via overlappingmemcpy when reading a crafted gzip-compressed chemistry file. DetailsThe flaw was in basicunzipstreambuf::underflow. The decompressionbuffer refill path invoked...

7.8CVSS6.5AI score0.00232EPSS
SaveExploits1References12Affected Software1
PyPA
PyPA
added 2026/07/13 3:46 p.m.18 views

Open Babel has out-of-bounds write in Gaussian coords_type orientation parser

SummaryA memory-safety vulnerability in Open Babel's Gaussian output parserallowed an out-of-bounds write when reading a crafted input file. DetailsThe flaw was in the coordstype orientation parser inside theGaussian output reader. A malformed orientation block caused theparser to write past the...

7.8CVSS6.6AI score0.00681EPSS
SaveExploits1References8Affected Software1
PyPA
PyPA
added 2026/07/13 3:46 p.m.18 views

Open Babel has NULL pointer dereference in MOL2 OBAtom::SetFormalCharge

SummaryA memory-safety vulnerability in Open Babel's MOL2 file format parsercaused a NULL pointer dereference when reading a crafted input file. DetailsThe flaw was in OBAtom::SetFormalCharge as called from the MOL2parser. A malformed atom record caused the parser to call the methodon a NULL atom...

8.1CVSS6.3AI score0.00719EPSS
SaveExploits1References12Affected Software1
PyPA
PyPA
added 2026/07/13 3:46 p.m.18 views

Open Babel has NULL pointer dereference in CACAO CacaoFormat::SetHilderbrandt

SummaryA memory-safety vulnerability in Open Babel's CACAO parser caused aNULL pointer dereference when reading a crafted input file. DetailsThe flaw was in CacaoFormat::SetHilderbrandt. A malformed inputcaused the parser to dereference a NULL pointer while applying theHilderbrandt transformation...

5.5CVSS6.1AI score0.00227EPSS
SaveExploits1References11Affected Software1
Total number of security vulnerabilities5000