Lucene search
+L
PypaMost viewed

7586 matches found

PyPA
PyPA
added 2026/07/07 4:02 p.m.25 views

Aim vulnerable to Cross-site Scripting

Cross-site Scripting XSS in aimhubio Aim 3.28.0 allows remote attackers to execute arbitrary JavaScript in victims browsers via malicious Python code submitted to the /api/reports endpoint, which is interpreted and executed by Pyodide when the report is viewed. No sanitisation or sandbox...

8.8CVSS6.4AI score0.00609EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
added 2026/07/07 4:02 p.m.25 views

Assemblyline 4 service client vulnerable to Arbitrary Write through path traversal in Client code

Path-Traversal - Arbitrary File Write in Assemblyline Service ClientIMPORTANT: This vulnerability is valid if you decide to use the assemblyline-service-client outside of the normal practice to using Assemblyline in a production environment. In practice, this code should always be executed within...

4.2CVSS6.2AI score0.00584EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 4:02 p.m.25 views

LlamaIndex has an XML Entity Expansion vulnerability in its sitemap parser

An XML Entity Expansion vulnerability, also known as a 'billion laughs' attack, exists in the sitemap parser of the run-llama/llamaindex repository, specifically affecting the Papers Loaders package before version 0.3.2 in llama-index v0.10.0 and above through v0.12.29. This vulnerability allows ...

7.5CVSS6AI score0.00419EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
added 2026/07/07 4:02 p.m.25 views

LlamaIndex vulnerability in ArxivReader class can cause MD5 hash collisions

A vulnerability in the ArxivReader class of the run-llama/llamaindex repository allows for MD5 hash collisions when generating filenames for downloaded papers. This can lead to data loss as papers with identical titles but different contents may overwrite each other, preventing some papers from...

5.3CVSS6.1AI score0.00284EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/07/07 4:02 p.m.25 views

LlamaIndex has Incomplete Documentation of Program Execution related to JsonPickleSerializer component

Incomplete Documentation of Program Execution exists in the run-llama/llamaindex library's JsonPickleSerializer component, affecting versions v0.12.27 through v0.12.40. This vulnerability allows remote code execution due to an insecure fallback to Python's pickle module. JsonPickleSerializer...

7.5CVSS7AI score0.00432EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/07/07 4:02 p.m.25 views

OctoPrint Vulnerable to Denial of Service through malformed HTTP request in OctoPrint

ImpactOctoPrint versions up until and including 1.11.1 contain a vulnerability that allows any unauthenticated attacker to send a manipulated broken multipart/form-data request to OctoPrint and through that make the web server component become unresponsive. This could be used to effectively run a...

6.5CVSS5.7AI score0.00256EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 4:02 p.m.25 views

OctoPrint vulnerable to possible file extraction via upload endpoints

ImpactOctoPrint versions up until and including 1.11.1 contain a vulnerability that allows an attacker with the FILEUPLOAD permission to exfiltrate files from the host that OctoPrint has read access to, by moving them into the upload folder where they then can be downloaded from.The primary risk...

5.4CVSS5.8AI score0.00294EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 4:02 p.m.25 views

Backend.AI Missing Authorization vulnerability

Missing Authorization in Lablup's BackendAI allows attackers to takeover all active sessions; Accessing, stealing, or altering any data accessible in the session. This vulnerability exists in all current versions of BackendAI.NOTE: The maintainers of BackendAI do not consider this report to fit...

8.1CVSS6AI score0.00338EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/07 4:02 p.m.25 views

Aim Vulnerable to Sandbox Escape Leading to Remote Code Execution

A vulnerability classified as critical was found in aimhubio aim up to 3.29.1. This vulnerability affects the function RestrictedPythonQuery of the file /aim/storage/query.py of the component runview Object Handler. The manipulation of the argument Query leads to sandbox issue. The attack can be...

9.9CVSS5.4AI score0.00586EPSS
SaveExploits1References8Affected Software1
PyPA
PyPA
added 2026/07/07 4:02 p.m.25 views

markdownify allows large headline prefixes such as <h9999999>, which causes memory consumption

python-markdownify aka markdownify before 0.14.1 allows large headline prefixes such as in addition to through . This causes memory consumption...

3.3CVSS5.9AI score0.00211EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/07/07 4:02 p.m.25 views

InternLM LMDeploy code injection vulnerability

A vulnerability was found in InternLM LMDeploy up to 0.7.1. It has been declared as critical. Affected by this vulnerability is the function Open of the file lmdeploy/docs/en/conf.py. The manipulation leads to code injection. It is possible to launch the attack on the local host. The exploit has...

7.8CVSS5.4AI score0.00373EPSS
SaveExploits1References9Affected Software1
PyPA
PyPA
added 2026/07/07 4:02 p.m.25 views

LMDeploy Improper Input Validation Vulnerability

A vulnerability was found in InternLM LMDeploy up to 0.7.1. It has been classified as critical. Affected is the function loadweightckpt of the file lmdeploy/lmdeploy/vl/model/utils.py of the component PT File Handler. The manipulation leads to deserialization. Attacking locally is a requirement...

7.8CVSS5.3AI score0.00324EPSS
SaveExploits1References9Affected Software1
PyPA
PyPA
added 2026/07/07 4:02 p.m.25 views

Mesop Class Pollution vulnerability leads to DoS and Jailbreak attacks

From @jackfromeast and @superboy-zjc:We have identified a class pollution vulnerability in Mesop = 0.14.0 application that allows attackers to overwrite global variables and class attributes in certain Mesop modules during runtime. This vulnerability could directly lead to a denial of service DoS...

8.1CVSS6AI score0.00692EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 3:16 p.m.25 views

PYSEC-2026-2091

An issue was discovered in Django 6.0 before 6.0.7 and 5.2 before 5.2.16.django.contrib.gis.gdal.GDALRaster over-reads its in-memory buffer when constructed from a bytes object, which can disclose adjacent memory or cause service degradation via a potential segmentation fault when the vsibuffer...

6.3CVSS6.1AI score0.00437EPSS
SaveExploits0References4Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.25 views

Open WebUI Vulnerable to Cross-Site Request Forgery (CSRF)

In version v0.3.8 of open-webui/open-webui, sensitive actions such as deleting and resetting are performed using the GET method. This vulnerability allows an attacker to perform Cross-Site Request Forgery CSRF attacks, where an unaware user can unintentionally perform sensitive actions by simply...

6.9CVSS5.8AI score0.08391EPSS
SaveExploits1References5Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.25 views

imaginAIry Denial of Service (DoS) vulnerability

A Denial of Service DoS vulnerability exists in the brycedrennan/imaginairy repository, version 15.0.0. The vulnerability is present in the /api/stablestudio/generate endpoint, which can be exploited by sending an invalid request. This causes the server process to terminate abruptly, outputting...

7.5CVSS5.9AI score0.00705EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.25 views

Feast Cross-Origin Resource Sharing vulnerability

A Cross-Origin Resource Sharing CORS vulnerability exists in feast-dev/feast version 0.40.0. The CORS configuration on the agentscope server does not properly restrict access to only trusted origins, allowing any external domain to make requests to the API. This can bypass intended security...

7.4CVSS6AI score0.00303EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.25 views

GluonCV Arbitrary File Write via TarSlip

A vulnerability in the ImageClassificationDataset.fromcsv API of the dmlc/gluon-cv repository, version 0.10.0, allows for arbitrary file write. The function downloads and extracts tar.gz files from URLs without proper sanitization, making it susceptible to a TarSlip vulnerability. Attackers can...

7.1CVSS6.1AI score0.00306EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.25 views

Malciously crafted QPY files can allows Remote Attackers to Cause Denial of Service in Qiskit

ImpactA maliciously crafted QPY file containing a malformed symengine serialization stream as part of the larger QPY serialization of a ParameterExpression object can cause a segfault within the symengine library, allowing an attacker to terminate the hosting process deserializing the QPY payload...

8.6CVSS5.9AI score0.0072EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.25 views

Label Studio has a Path Traversal Vulnerability via image Field

DescriptionA path traversal vulnerability in Label Studio SDK versions prior to 1.0.10 allows unauthorized file access outside the intended directory structure. Label Studio versions before 1.16.0 specified SDK versions prior to 1.0.10 as dependencies, and the issue was confirmed in Label Studio...

8.7CVSS6.2AI score0.00761EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.25 views

LLama Factory Remote OS Command Injection Vulnerability

SummaryA critical remote OS command injection vulnerability has been identified in the Llama Factory training process. This vulnerability arises from improper handling of user input, allowing malicious actors to execute arbitrary OS commands on the host system. The issue is caused by insecure usa...

9.8CVSS6.2AI score0.02323EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.25 views

Apache Airflow vulnerable to Insertion of Sensitive Information Into Sent Data

Airflow versions before 2.10.3 have a vulnerability that allows authenticated users with audit log access to see sensitive values in audit logs which they should not see.When sensitive variables were set via airflow CLI, values of those variables appeared in the audit log and were stored...

6.5CVSS5.8AI score0.01243EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.25 views

Langflow vulnerable to remote code execution

langflow =1.0.18 is vulnerable to Remote Code Execution RCE as any component provided the code functionality and the components run on the local machine rather than in a sandbox...

9.8CVSS6.1AI score0.01541EPSS
SaveExploits2References7Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.25 views

open-webui allows writing and deleting arbitrary files

In version v0.3.8 of open-webui/open-webui, the endpoint /api/pipelines/upload is vulnerable to arbitrary file write and delete due to unsanitized file.filename concatenation with CACHEDIR. This vulnerability allows attackers to overwrite and delete system files, potentially leading to remote cod...

7.2CVSS7AI score0.01062EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.25 views

Sentry improperly authorizes muting of alert rules

ImpactAn authenticated user can mute alert rules from arbitrary organizations and projects given a known given rule ID. The user does not need to be a member of the organization or have permissions on the project. In our review, we have identified no instances where alerts have been muted by...

7.1CVSS6AI score0.00358EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.25 views

yt-dlp File system modification and RCE through improper file-extension sanitization

Summaryyt-dlp does not limit the extensions of downloaded files, which could lead to arbitrary filenames being created in the download folder and path traversal on Windows. Since yt-dlp also reads config from the working directory and on Windows executables will be executed from the yt-dlp...

7.8CVSS6.3AI score0.00325EPSS
SaveExploits0References12Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.25 views

MLFlow unsafe deserialization

Deserialization of untrusted data can occur in versions of the MLflow platform running version 1.1.0 or newer, enabling a maliciously uploaded scikit-learn model to run arbitrary code on an end user’s system when interacted with...

8.8CVSS6.3AI score0.00618EPSS
SaveExploits1References5Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.25 views

Improper Handling of Insufficient Permissions in `wagtail.contrib.settings`

ImpactDue to an improperly applied permission check in the wagtail.contrib.settings module, a user with access to the Wagtail admin and knowledge of the URL of the edit view for a settings model can access and update that setting, even when they have not been granted permission over the model. Th...

5.5CVSS6.1AI score0.00332EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.25 views

rockhopper Buffer Overflow vulnerability

A vulnerability, which was classified as critical, has been found in bwoodsend rockhopper up to 0.1.2. Affected by this issue is the function countrows of the file rockhopper/src/raggedarray.c of the component Binary Parser. The manipulation of the argument raw leads to buffer overflow. Local...

5.3CVSS6.1AI score0.00233EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.25 views

Ryu Infinite Loop vulnerability

OFPPacketQueue in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service infinite loop via OFPQueueProp.len=0...

8.7CVSS7.1AI score0.00646EPSS
SaveExploits1References5Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.25 views

nautobot has reflected Cross-site Scripting potential in all object list views

ImpactIt was discovered that due to improper handling and escaping of user-provided query parameters, a maliciously crafted Nautobot URL could potentially be used to execute a Reflected Cross-Site Scripting Reflected XSS attack against users. All filterable object-list views in Nautobot are...

7.5CVSS7AI score0.00491EPSS
SaveExploits0References11Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.25 views

Potential DoS via the Tudoor mechanism in eventlet and dnspython

eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an invalid packet from the expected IP address and source port, aka a "TuDoor" attack. In other words, dnspython does not have the preferred behavior in whic...

7CVSS6AI score0.01857EPSS
SaveExploits1References16Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.25 views

esphome vulnerable to stored Cross-site Scripting in edit configuration file API

SummaryEdit configuration file API in dashboard component of ESPHome version 2023.12.9 command line installation and Home Assistant add-on serves unsanitized data with “Content-Type: text/html; charset=UTF-8”, allowing remote authenticated user to inject arbitrary web script and exfiltrate sessio...

8.7CVSS6.8AI score0.00681EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.25 views

Apache Superset: Improper authorization validation on dashboards and charts import

A low privilege authenticated user could import an existing dashboard or chart that they do not have access to and then modify its metadata, thereby gaining ownership of the object. However, it's important to note that access to the analytical data of these charts and dashboards would still be...

5.4CVSS6AI score0.00873EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.25 views

Apache Superset has Incorrect Default Permissions

Unnecessary read permissions within the Gamma role would allow authenticated users to read configured CSS templates and annotations.This issue affects Apache Superset: before 2.1.2.Users should upgrade to version or above 2.1.2 and run superset init to reconstruct the Gamma role or remove canread...

4.3CVSS5.9AI score0.0086EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.25 views

Apache Superset Allocation of Resources Without Limits or Throttling vulnerability

An authenticated malicious user could initiate multiple concurrent requests, each requesting multiple dashboard exports, leading to a possible denial of service.This issue affects Apache Superset: before 3.0.0...

6.5CVSS6.6AI score0.01149EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.25 views

Fides JavaScript Injection Vulnerability in Privacy Center URL

ImpactThe Fides web application allows users to edit consent and privacy notices such as cookie banners. These privacy notices can then be served by other integrated websites, for example in cookie consent banners. One of the editable fields is a privacy policy URL and this input was found to not...

5.4CVSS6.1AI score0.00607EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.25 views

Airflow Sqoop Provider RCE Vulnerability

Apache Airflow Sqoop Provider, versions before 4.0.0, is affected by a vulnerability that allows an attacker pass parameters with the connections, which makes it possible to implement RCE attacks via ‘sqoop import --connect’, obtain airflow server permissions, etc. The attacker needs to be logged...

8.8CVSS7.1AI score0.01655EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.25 views

Excessive Iteration in gRPC

gRPC contains a vulnerability that allows hpack table accounting errors could lead to unwanted disconnects between clients and servers in exceptional cases/Three vectors were found that allow the following DOS attacks:- Unbounded memory buffering in the HPACK parser- Unbounded CPU consumption in...

7.5CVSS7.1AI score0.00479EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.25 views

Apache superset missing check for default SECRET_KEY

Session Validation attacks in Apache Superset versions up to and including 2.0.1. Installations that have not altered the default configured SECRETKEY according to installation instructions allow for an attacker to authenticate and access unauthorized resources. This does not affect Superset...

9.8CVSS7.2AI score0.97405EPSS
SaveExploits19References11Affected Software1
PyPA
PyPA
added 2026/07/07 10:17 a.m.25 views

No protection against brute-force attacks on login page

ImpactPrevious versions of Kiwi TCMS do not impose rate limits which makes it easier to attempt brute-force attacks against the login page. PatchesUsers should upgrade to v12.0 or later. WorkaroundsUsers may install and configure a rate-limiting proxy in front of Kiwi TCMS. For example nginx...

9.8CVSS7.2AI score0.0091EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/07 10:17 a.m.25 views

`FractionalMaxPoolGrad` Heap out of bounds read

ImpactIf FractionMaxPoolGrad is given outsize inputs rowpoolingsequence and colpoolingsequence, TensorFlow will crash.pythonimport tensorflow as tftf.rawops.FractionMaxPoolGrad originput = 1, 1, 1, 1, 1, origoutput = 1, 1, 1, outbackprop = 3, 3, 6, rowpoolingsequence = -0x4000000, 1, 1,...

7.5CVSS7AI score0.00474EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/07/06 7:17 p.m.25 views

PYSEC-2026-2254

Pillow is a Python imaging library. Prior to 12.3.0, PIL/FontFile.py FontFile.compile assembled per-glyph images into a combined bitmap with Image.new"1", xsize, ysize without calling Image.decompressionbombcheck, allowing a font to trigger excessive allocation during conversion or saving. This...

7.5CVSS6.1AI score0.00418EPSS
SaveExploits1References3Affected Software1
PyPA
PyPA
added 2026/07/02 2:13 p.m.25 views

Zope allows attackers to modify raw image and file data

Zope 2.2.0 through 2.2.4 does not properly protect a data updating method on Image and File objects, which allows attackers with DTML editing privileges to modify the raw data of these objects...

5CVSS6AI score0.01542EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.25 views

PraisonAI vulnerable to sandbox escape via `print.__self__` builtins module leak in `execute_code` (subprocess mode)

Summaryexecutecode in praisonaiagents/tools/pythontools.py v1.6.37, subprocess sandbox mode can be fully bypassed using print.self to retrieve the real Python builtins module, from which import can be extracted via vars and runtime string construction. This achieves arbitrary OS command execution...

9.9CVSS6.6AI score0.00884EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.25 views

Google Agent Development Kit (ADK) has a Code Injection and Missing Authentication vulnerability

A Code Injection and Missing Authentication vulnerability in Google Agent Development Kit ADK versions 1.7.0 and 2.0.0a1 through 1.28.1 and 2.0.0a2 on Python OSS, Cloud Run, and GKE allows an unauthenticated remote attacker to execute arbitrary code on the server hosting the ADK instance.This...

10CVSS6.4AI score0.01818EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.25 views

litellm vulnerable to remote code execution based on using eval unsafely

BerriAI/litellm version v1.35.8 contains a vulnerability where an attacker can achieve remote code execution. The vulnerability exists in the adddeployment function, which decodes and decrypts environment variables from base64 and assigns them to os.environ. An attacker can exploit this by sendin...

9.8CVSS7.5AI score0.00882EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/06/22 6:16 p.m.25 views

PYSEC-2026-237

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, the serverhostname TLS SNI check can be bypassed when an existing connection is reused. If an application makes multiple requests to the same domain, but with different per-request serverhostname...

7.5CVSS5.8AI score0.00266EPSS
SaveExploits0References1Affected Software1
PyPA
PyPA
added 2026/06/03 2:16 p.m.25 views

PYSEC-0000-CVE-2026-44546

daphne before 4.2.2 reconstructs a raw HTTP request from Twisted's parsed headers and feeds it to autobahn for WebSocket handshake processing. Twisted does not treat \x0b, \x0c, \x1c, \x1d, \x1e, or \x85 as header line separators, but autobahn decodes header values to str and calls splitlines. An...

5.3CVSS5.5AI score0.00172EPSS
SaveExploits0References1Affected Software1
PyPA
PyPA
added 2026/06/03 9:16 a.m.25 views

PYSEC-2026-2222

A vulnerability in mlflow/mlflow versions prior to 3.11.0 allows for the resolution of environment variables in AI Gateway secrets, which can be exploited to exfiltrate sensitive server-side environment credentials to an attacker-controlled endpoint. This issue arises because the apikey field in...

9.1CVSS7.3AI score0.00521EPSS
SaveExploits1References6Affected Software1
Total number of security vulnerabilities5000