Lucene search
+L
PypaMost viewed

7218 matches found

PyPA
PyPA
added 2026/03/24 2:16 p.m.16 views

PYSEC-2026-81

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.1, in the downloadprofilepicture function of the /profilepictures/foldername/filename endpoint, the foldername and filename parameters are not strictly filtered, which allows the secretkey to be re...

8.7CVSS5.8AI score0.19584EPSS
SaveExploits1References1Affected Software1
PyPA
PyPA
added 2026/03/07 4:15 p.m.16 views

PYSEC-2026-121

pyLoad is a free and open-source download manager written in Python. From version 0.5.0b3.dev13 to 0.5.0b3.dev96, the editpackage function implements insufficient sanitization for the packfolder parameter. The current protection relies on a single-pass string replacement of "../", which can be...

7.1CVSS5.7AI score0.00517EPSS
SaveExploits1References1Affected Software1
PyPA
PyPA
added 2026/03/05 9:16 p.m.16 views

PYSEC-2026-112

Products.isurlinportal is a replacement for isURLInPortal method in Plone. Prior to versions 2.1.0, 3.1.0, and 4.0.0, a url /login?camefrom=////evil.example may redirect to an external website after login. This issue has been patched in versions 2.1.0, 3.1.0, and 4.0.0...

6.1CVSS5.7AI score0.00227EPSS
SaveExploits0References1Affected Software1
PyPA
PyPA
added 2026/02/18 6:24 p.m.16 views

PYSEC-2026-96

A critical vulnerability exists in the NLTK downloader component of nltk/nltk, affecting all versions. The unzipiter function in nltk/downloader.py uses zipfile.extractall without performing path validation or security checks. This allows attackers to craft malicious zip packages that, when...

10CVSS7.8AI score0.0079EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
added 2026/02/03 3:16 p.m.16 views

PYSEC-2026-42

An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28.The django.contrib.auth.handlers.modwsgi.checkpassword function for authentication via modwsgi allows remote attackers to enumerate users via a timing attack.Earlier, unsupported Django series such as 5.0.x,...

5.3CVSS5.8AI score0.00713EPSS
SaveExploits0References4Affected Software1
PyPA
PyPA
added 2026/02/02 11:16 p.m.16 views

PYSEC-2026-137

A stored cross-site scripting XSS vulnerability in the Jobs module of Tendenci CMS v15.3.7 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload...

5.4CVSS5.9AI score0.00235EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
added 2026/01/21 6:16 p.m.16 views

PYSEC-2026-102

An issue in ollama v.0.12.10 allows a remote attacker to cause a denial of service via the fs/ggml/gguf.go, function readGGUFV1String reads a string length from untrusted GGUF metadata...

7.5CVSS5.8AI score0.00362EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
added 2026/01/16 11:16 a.m.16 views

PYSEC-2026-9

In Apache Airflow versions before 3.1.6, when rendered template fields in a Dag exceed coremaxtemplatedfieldlength, sensitive values could be exposed in cleartext in the Rendered Templates UI. This occurred because serialization of those fields used a secrets masker instance that did not include...

7.5CVSS5.8AI score0.00586EPSS
SaveExploits0References3Affected Software1
PyPA
PyPA
added 2026/01/12 5:15 p.m.16 views

PYSEC-2026-90

MindsDB is a platform for building artificial intelligence from enterprise data. Prior to version 25.11.1, an unauthenticated path traversal in the file upload API lets any caller read arbitrary files from the server filesystem and move them into MindsDB’s storage, exposing sensitive data. The PU...

9.1CVSS5.9AI score0.19213EPSS
SaveExploits2References2Affected Software1
PyPA
PyPA
added 2025/12/31 2:15 a.m.16 views

PYSEC-2025-90

cbor2 provides encoding and decoding for the Concise Binary Object Representation CBOR serialization format. Starting in version 3.0.0 and prior to version 5.8.0, whhen a CBORDecoder instance is reused across multiple decode operations, values marked with the shareable tag 28 persist in memory an...

7.5CVSS7.1AI score0.0043EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
added 2025/12/16 1:15 a.m.16 views

PYSEC-2025-113

Fickling is a Python pickling decompiler and static analyzer. Versions prior to 0.1.6 had a bypass caused by pty missing from the block list of unsafe module imports. This led to unsafe pickles based on pty.spawn being incorrectly flagged as LIKELYSAFE, and was fixed in version 0.1.6. This impact...

8.5CVSS5.8AI score0.00244EPSS
SaveExploits1References3Affected Software1
PyPA
PyPA
added 2025/12/15 2:15 p.m.16 views

PYSEC-2025-110

An issue was discovered in allauth-django before 65.13.0. IdP: marking a user as isactive=False after having handed tokens for that user while the account was still active had no effect. Fixed the access/refresh tokens are now rejected...

5.4CVSS5.8AI score0.00146EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2025/12/14 11:15 p.m.16 views

PYSEC-2025-134

A vulnerability was detected in Mayan EDMS up to 4.10.1. The affected element is an unknown function of the file /authentication/. The manipulation results in cross site scripting. The attack may be performed from remote. The exploit is now public and may be used. Upgrading to version 4.10.2 is...

6.1CVSS4.2AI score0.00407EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2025/11/12 10:15 p.m.16 views

PYSEC-2025-112

DuckDB is a SQL database management system. DuckDB implemented block-based encryption of DB on the filesystem starting with DuckDB 1.4.0. There are a few issues related to this implementation. The DuckDB can fall back to an insecure random number generator pcg32 to generate cryptographic keys or...

6.9CVSS5.8AI score0.00111EPSS
SaveExploits0References4Affected Software1
PyPA
PyPA
added 2025/10/20 8:15 p.m.16 views

PYSEC-2025-188

Taguette is an open source qualitative research tool. An issue has been discovered in Taguette versions prior to 1.5.0. It was possible for a project member to put JavaScript in name or description fields which would run on project load. This issue has been patched in version 1.5.0...

5.4CVSS5.7AI score0.00166EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2025/09/25 3:16 p.m.16 views

PYSEC-2025-199

In PyTorch before 2.7.0, when inductor is used, nn.Fold has an assertion error...

5.3CVSS5.8AI score0.00338EPSS
SaveExploits0References3Affected Software1
PyPA
PyPA
added 2025/09/25 3:16 p.m.16 views

PYSEC-2025-202

PyTorch before 3.7.0 has a bernoullip decompose function in decompositions.py even though it lacks full consistency with the eager CPU implementation, negatively affecting nn.Dropout1d, nn.Dropout2d, and nn.Dropout3d for fallbackrandom=True...

5.3CVSS5.8AI score0.00391EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2025/09/17 11:15 a.m.16 views

PYSEC-2025-152

An Improper Handling of Exceptional Conditions vulnerability in the ZIP archive scanning component of mmaitre314 picklescan allows a remote attacker to bypass security scans. This is achieved by crafting a ZIP archive containing a file with a bad Cyclic Redundancy Check CRC, which causes the...

9.8CVSS7.5AI score0.01428EPSS
SaveExploits1References4Affected Software1
PyPA
PyPA
added 2025/07/20 12:15 p.m.16 views

PYSEC-2025-234

A vulnerability, which was classified as problematic, has been found in Huashengdun WebSSH up to 1.6.2. Affected by this issue is some unknown functionality of the component Login Page. The manipulation of the argument hostname/port leads to cross site scripting. The attack may be launched...

6.1CVSS4AI score0.00433EPSS
SaveExploits2References6Affected Software1
PyPA
PyPA
added 2025/06/19 9:15 p.m.16 views

PYSEC-2025-68

A vulnerability, which was classified as critical, has been found in Upsonic up to 0.55.6. This issue affects the function cloudpickle.loads of the file /tools/addtool of the component Pickle Handler. The manipulation leads to deserialization. The exploit has been disclosed to the public and may ...

8CVSS6.5AI score0.0048EPSS
SaveExploits1References9Affected Software1
PyPA
PyPA
added 2025/06/13 2:15 p.m.16 views

PYSEC-2025-150

Weak password requirements in OpenC3 COSMOS v6.0.0 allow attackers to bypass authentication via a brute force attack...

9.8CVSS5.8AI score0.00546EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
added 2025/03/30 4:15 p.m.16 views

PYSEC-2025-191

A vulnerability, which was classified as problematic, has been found in PyTorch 2.6.0+cu124. Affected by this issue is the function torch.mkldnnmaxpool2d. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the public and may be...

5.5CVSS4.7AI score0.00243EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2025/03/25 9:15 p.m.16 views

PYSEC-2025-115

NASA Fprime v3.4.3 was discovered to contain multiple cross-site scripting XSS vulnerabilities...

6.1CVSS5.6AI score0.00269EPSS
SaveExploits1References1Affected Software1
PyPA
PyPA
added 2025/03/25 9:15 a.m.16 views

PYSEC-2025-165

A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been declared as critical. Affected by this vulnerability is the function Assimp::AC3DImporter::ConvertObjectSection of the file code/AssetLib/AC/ACLoader.cpp of the component AC3D File Handler. The manipulation of the...

8.8CVSS6.7AI score0.00508EPSS
SaveExploits1References5Affected Software1
PyPA
PyPA
added 2025/03/10 1:15 p.m.16 views

PYSEC-2025-190

A vulnerability was found in PyTorch 2.6.0+cu124. It has been rated as problematic. Affected by this issue is the function nnqSigmoid of the component Quantized Sigmoid Module. The manipulation of the argument scale/zeropoint leads to improper initialization. The attack needs to be approached...

2.5CVSS4.1AI score0.00252EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
added 2025/03/10 12:15 p.m.16 views

PYSEC-2025-189

A vulnerability was found in PyTorch 2.6.0+cu124. It has been declared as critical. Affected by this vulnerability is the function torch.ops.profiler.callendcallbacksonjitfut of the component Tuple Handler. The manipulation of the argument None leads to memory corruption. The attack can be launch...

7.5CVSS5.3AI score0.00428EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2024/10/31 2:15 p.m.16 views

PYSEC-2024-279

langflow v1.0.12 was discovered to contain a remote code execution RCE vulnerability via the PythonCodeTool component...

9.8CVSS6.4AI score0.01053EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
added 2024/10/24 9:15 p.m.16 views

PYSEC-2024-294

A segmentation fault SEGV was detected in the SortByPTypeProcess::Execute function in the Assimp library during fuzz testing with AddressSanitizer. The crash occurred due to a read access to an invalid memory address 0x1000c9714971...

6.2CVSS6.5AI score0.00232EPSS
SaveExploits1References1Affected Software1
PyPA
PyPA
added 2024/10/09 6:15 p.m.16 views

PYSEC-2024-311

Wasmtime is an open source runtime for WebAssembly. Under certain concurrent event orderings, a wasmtime::Engine's internal type registry was susceptible to double-unregistration bugs due to a race condition, leading to panics and potentially type registry corruption. That registry corruption...

2.9CVSS5.7AI score0.00153EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2024/09/25 3:15 p.m.16 views

PYSEC-2024-290

OpenSlides 4.0.15 verifies passwords by comparing password hashes using a function with content-dependent runtime. This can allow attackers to obtain information about the password hash using a timing attack...

7.5CVSS5.8AI score0.00362EPSS
SaveExploits0References1Affected Software1
PyPA
PyPA
added 2024/05/23 12:15 p.m.16 views

PYSEC-2024-296

OpenCTI is an open source platform allowing organizations to manage their cyber threat intelligence knowledge and observables. Due to lack of certain security controls on the profile edit functionality, an authenticated attacker with low privileges can gain administrative privileges on the web...

8.3CVSS5.8AI score0.00398EPSS
SaveExploits0References1Affected Software1
PyPA
PyPA
added 2024/05/16 9:15 a.m.16 views

PYSEC-2024-244

A path traversal vulnerability exists in mlflow/mlflow version 2.11.0, identified as a bypass for the previously addressed CVE-2023-6909. The vulnerability arises from the application's handling of artifact URLs, where a '' character can be used to insert a path into the fragment, effectively...

7.5CVSS6.7AI score0.89716EPSS
SaveExploits2References5Affected Software1
PyPA
PyPA
added 2024/03/01 12:15 p.m.16 views

PYSEC-2024-278

A vulnerability was found in LangChain langchaincommunity 0.0.26. It has been classified as critical. Affected is the function loadlocal in the library libs/community/langchaincommunity/retrievers/tfidf.py of the component TFIDFRetriever. The manipulation leads to server-side request forgery. It ...

9.8CVSS6AI score0.00582EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2023/11/14 9:15 p.m.16 views

PYSEC-2023-247

aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. Affected versions of aiohttp have a security vulnerability regarding the inconsistent interpretation of the http protocol. HTTP/1.1 is a persistent protocol, if both Content-LengthCL and Transfer-EncodingTE header...

6.5CVSS6.7AI score0.00827EPSS
SaveExploits1References4Affected Software1
PyPA
PyPA
added 2023/10/11 6:15 p.m.16 views

PYSEC-2023-196

vantage6 is privacy preserving federated learning infrastructure. Versions prior to 4.0.0 use pickle, which has known security issue, as a default serialization module but that has known security issues. All users of vantage6 that post tasks with the default serialization are affected. Version...

7.2CVSS6.8AI score0.00892EPSS
SaveExploits1References5Affected Software1
PyPA
PyPA
added 2023/08/22 7:15 p.m.16 views

PYSEC-2023-150

Buffer Overflow vulnerability in tEXtToDataBuf function in pngimage.cpp in Exiv2 0.27.1 allows remote attackers to cause a denial of service and other unspecified impacts via use of crafted file...

7.8CVSS7AI score0.00697EPSS
SaveExploits1References5Affected Software1
PyPA
PyPA
added 2022/06/23 5:15 p.m.16 views

PYSEC-2022-210

An issue was discovered in SaltStack Salt in versions before 3002.9, 3003.5, 3004.2. PAM auth fails to reject locked accounts, which allows a previously authorized user whose account is locked still run Salt commands when their account is locked. This affects both local shell accounts with an...

8.8CVSS6.9AI score0.01878EPSS
SaveExploits0References3Affected Software1
PyPA
PyPA
added 2021/05/14 8:15 p.m.16 views

PYSEC-2021-444

TensorFlow is an end-to-end open source platform for machine learning. Calling tf.rawops.RaggedTensorToVariant with arguments specifying an invalid ragged tensor results in a null pointer dereference. The implementation of RaggedTensorToVariant...

5.5CVSS6.9AI score0.00198EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
added 2020/12/18 7:15 p.m.16 views

PYSEC-2020-72

OpenSlides is a free, Web-based presentation and assembly system for managing and projecting agenda, motions, and elections of assemblies. OpenSlides version 3.2, due to unsufficient user input validation and escaping, it is vulnerable to persistant cross-site scripting XSS. In the web applicatio...

8.9CVSS6.3AI score0.0135EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2017/07/17 1:18 p.m.16 views

PYSEC-2017-85

txAWS all current versions fail to perform complete certificate verification resulting in vulnerability to MitM attacks and information disclosure...

5.9CVSS6.8AI score0.00753EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2013/03/22 9:55 p.m.16 views

PYSEC-2013-46

The v1 API in OpenStack Glance Essex 2012.1, Folsom 2012.2, and Grizzly, when using the single-tenant Swift or S3 store, reports the location field, which allows remote authenticated users to obtain the operator's backend credentials via a request for a cached image...

3.5CVSS5.8AI score0.01367EPSS
SaveExploits0References12Affected Software1
PyPA
PyPA
added 2026/07/13 3:46 p.m.15 views

Open Babel has out-of-bounds write in MOPAC IN translationVectors[] (Tv atom)

SummaryA memory-safety vulnerability in Open Babel's MOPAC input parserallowed an out-of-bounds write into the translationVectors arraywhen reading Tv translation-vector atoms from a crafted inputfile. DetailsThe MOPAC IN reader stored Tv-atom translation vectors into afixed-size translationVecto...

9.8CVSS6.7AI score0.0085EPSS
SaveExploits1References8Affected Software1
PyPA
PyPA
added 2026/07/13 3:46 p.m.15 views

Open Babel has out-of-bounds write in MOL2 attribute/value parser

SummaryA memory-safety vulnerability in Open Babel's MOL2 parser allowed anout-of-bounds write when reading a crafted input file. DetailsThe flaw was in the attribute/value parsing path of the MOL2 reader.An over-long attribute or value caused the parser to write past theend of a fixed-size...

8.1CVSS6.7AI score0.00782EPSS
SaveExploits1References8Affected Software1
PyPA
PyPA
added 2026/07/13 3:46 p.m.15 views

Open Babel has out-of-bounds write in CSR PadString (title field)

SummaryA memory-safety vulnerability in Open Babel's CSR parser allowed anout-of-bounds write when reading a crafted input file. DetailsThe flaw was in the PadString helper used to handle the CSR titlefield. A title longer than the fixed destination buffer caused theparser to write past the end o...

9.8CVSS6.7AI score0.00802EPSS
SaveExploits1References8Affected Software1
PyPA
PyPA
added 2026/07/13 3:46 p.m.15 views

Open Babel has heap buffer overflow in SMILES OBSmilesParser::ParseSmiles

SummaryA memory-safety vulnerability in Open Babel's SMILES parser caused aheap buffer overflow when reading a crafted input string. DetailsThe flaw was in OBSmilesParser::ParseSmiles. A malformed SMILESinput caused the parser to write past the end of a heap-allocatedbuffer. ImpactOpen Babel is a...

7.8CVSS6.5AI score0.00258EPSS
SaveExploits1References12Affected Software1
PyPA
PyPA
added 2026/07/13 3:46 p.m.15 views

Open Babel has NULL pointer dereference in MOL2 OBAtom::SetFormalCharge

SummaryA memory-safety vulnerability in Open Babel's MOL2 file format parsercaused a NULL pointer dereference when reading a crafted input file. DetailsThe flaw was in OBAtom::SetFormalCharge as called from the MOL2parser. A malformed atom record caused the parser to call the methodon a NULL atom...

8.1CVSS6.3AI score0.00719EPSS
SaveExploits1References12Affected Software1
PyPA
PyPA
added 2026/07/13 3:46 p.m.15 views

joserfc: b64=false RFC7797 JWS payloads bypass JWSRegistry payload-size limits during deserialization

RFC7797 b64=false JWS payloads bypass JWSRegistry payload-size limits during deserialization SummaryTesting revealed that joserfc accepts oversized RFC7797 b64=false JWS payloads without applying JWSRegistry.maxpayloadlength.The normal JWS compact and flattened JSON paths reject payloads above th...

5.3CVSS6AI score0.00163EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/13 3:46 p.m.15 views

Lemur has an authorization bypass in StrictRolePermission / AuthorityCreatorPermission

SummaryStrictRolePermission and AuthorityCreatorPermission in lemur/auth/permissions.py call flaskprincipal.Permission.init with zero Needs when their config flags are unset. Both flags defaulted to False in code prior to the fix, so this was the state of any Lemur install that hadn't explicitly...

8.8CVSS6.3AI score0.00035EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/07/13 3:46 p.m.15 views

Glances has arbitrary file write and command execution via `secure_popen` redirection and chaining operators in AMP command configuration

SummaryThe securepopen function in glances/secure.py interprets file redirection, | pipe, and && command chaining operators in command strings. These operators are applied without any validation on the target file path, piped command, or chained command.When Application Monitoring Process AMP...

7.8CVSS6.4AI score0.00137EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/13 3:46 p.m.15 views

marimo contains a reflected cross-site scripting vulnerability in the notebook page

marimo before 0.23.9 contains a reflected cross-site scripting vulnerability in the notebook page that allows unauthenticated attackers to inject arbitrary JavaScript by exploiting improper escaping of single quotes in the file query parameter reflected into an inline JavaScript string literal...

6.1CVSS6.1AI score0.00239EPSS
SaveExploits0References8Affected Software1
Total number of security vulnerabilities5000