Lucene search
+L
PypaMost viewed

7218 matches found

PyPA
PyPA
added 2020/12/18 7:15 p.m.16 views

PYSEC-2020-72

OpenSlides is a free, Web-based presentation and assembly system for managing and projecting agenda, motions, and elections of assemblies. OpenSlides version 3.2, due to unsufficient user input validation and escaping, it is vulnerable to persistant cross-site scripting XSS. In the web applicatio...

8.9CVSS6.3AI score0.0135EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2017/07/17 1:18 p.m.16 views

PYSEC-2017-85

txAWS all current versions fail to perform complete certificate verification resulting in vulnerability to MitM attacks and information disclosure...

5.9CVSS6.8AI score0.00753EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2014/11/03 10:55 p.m.16 views

PYSEC-2014-50

The error pages in Plone before 4.2.3 and 4.3 before beta 1 allow remote attackers to obtain random numbers and derive the PRNG state for password resets via unspecified vectors. NOTE: this identifier was SPLIT per ADT2 due to different vulnerability types. CVE-2012-6661 was assigned for the PRNG...

5CVSS7.4AI score0.0236EPSS
SaveExploits2References6Affected Software1
PyPA
PyPA
added 2013/03/22 9:55 p.m.16 views

PYSEC-2013-46

The v1 API in OpenStack Glance Essex 2012.1, Folsom 2012.2, and Grizzly, when using the single-tenant Swift or S3 store, reports the location field, which allows remote authenticated users to obtain the operator's backend credentials via a request for a cached image...

3.5CVSS5.8AI score0.01367EPSS
SaveExploits0References12Affected Software1
PyPA
PyPA
added 2026/07/13 3:46 p.m.15 views

Open Babel has out-of-bounds write in MOPAC IN translationVectors[] (Tv atom)

SummaryA memory-safety vulnerability in Open Babel's MOPAC input parserallowed an out-of-bounds write into the translationVectors arraywhen reading Tv translation-vector atoms from a crafted inputfile. DetailsThe MOPAC IN reader stored Tv-atom translation vectors into afixed-size translationVecto...

9.8CVSS6.7AI score0.0085EPSS
SaveExploits1References8Affected Software1
PyPA
PyPA
added 2026/07/13 3:46 p.m.15 views

Open Babel has out-of-bounds write in MOL2 attribute/value parser

SummaryA memory-safety vulnerability in Open Babel's MOL2 parser allowed anout-of-bounds write when reading a crafted input file. DetailsThe flaw was in the attribute/value parsing path of the MOL2 reader.An over-long attribute or value caused the parser to write past theend of a fixed-size...

8.1CVSS6.7AI score0.00782EPSS
SaveExploits1References8Affected Software1
PyPA
PyPA
added 2026/07/13 3:46 p.m.15 views

Open Babel has out-of-bounds write in CSR PadString (title field)

SummaryA memory-safety vulnerability in Open Babel's CSR parser allowed anout-of-bounds write when reading a crafted input file. DetailsThe flaw was in the PadString helper used to handle the CSR titlefield. A title longer than the fixed destination buffer caused theparser to write past the end o...

9.8CVSS6.7AI score0.00802EPSS
SaveExploits1References8Affected Software1
PyPA
PyPA
added 2026/07/13 3:46 p.m.15 views

Open Babel has heap buffer overflow in SMILES OBSmilesParser::ParseSmiles

SummaryA memory-safety vulnerability in Open Babel's SMILES parser caused aheap buffer overflow when reading a crafted input string. DetailsThe flaw was in OBSmilesParser::ParseSmiles. A malformed SMILESinput caused the parser to write past the end of a heap-allocatedbuffer. ImpactOpen Babel is a...

7.8CVSS6.5AI score0.00258EPSS
SaveExploits1References12Affected Software1
PyPA
PyPA
added 2026/07/13 3:46 p.m.15 views

Open Babel has NULL pointer dereference in MOL2 OBAtom::SetFormalCharge

SummaryA memory-safety vulnerability in Open Babel's MOL2 file format parsercaused a NULL pointer dereference when reading a crafted input file. DetailsThe flaw was in OBAtom::SetFormalCharge as called from the MOL2parser. A malformed atom record caused the parser to call the methodon a NULL atom...

8.1CVSS6.3AI score0.00719EPSS
SaveExploits1References12Affected Software1
PyPA
PyPA
added 2026/07/13 3:46 p.m.15 views

joserfc: b64=false RFC7797 JWS payloads bypass JWSRegistry payload-size limits during deserialization

RFC7797 b64=false JWS payloads bypass JWSRegistry payload-size limits during deserialization SummaryTesting revealed that joserfc accepts oversized RFC7797 b64=false JWS payloads without applying JWSRegistry.maxpayloadlength.The normal JWS compact and flattened JSON paths reject payloads above th...

5.3CVSS6AI score0.00163EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/13 3:46 p.m.15 views

Lemur has an authorization bypass in StrictRolePermission / AuthorityCreatorPermission

SummaryStrictRolePermission and AuthorityCreatorPermission in lemur/auth/permissions.py call flaskprincipal.Permission.init with zero Needs when their config flags are unset. Both flags defaulted to False in code prior to the fix, so this was the state of any Lemur install that hadn't explicitly...

8.8CVSS6.3AI score0.00035EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/07/13 3:46 p.m.15 views

Glances has arbitrary file write and command execution via `secure_popen` redirection and chaining operators in AMP command configuration

SummaryThe securepopen function in glances/secure.py interprets file redirection, | pipe, and && command chaining operators in command strings. These operators are applied without any validation on the target file path, piped command, or chained command.When Application Monitoring Process AMP...

7.8CVSS6.4AI score0.00137EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/13 3:46 p.m.15 views

marimo contains a reflected cross-site scripting vulnerability in the notebook page

marimo before 0.23.9 contains a reflected cross-site scripting vulnerability in the notebook page that allows unauthenticated attackers to inject arbitrary JavaScript by exploiting improper escaping of single quotes in the file query parameter reflected into an inline JavaScript string literal...

6.1CVSS6.1AI score0.00239EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/13 3:46 p.m.15 views

OpenMed vulnerable to remote code injection through privacy-filter model loading path

OpenMed before 1.5.2 contains a remote code execution vulnerability in the PII privacy-filter model loading path. The privacy-filter dispatcher used broad substring matching on the user-supplied modelname parameter, allowing a value such as attacker/foo-privacy-filter-bar to route through a path...

9.8CVSS6.5AI score0.00915EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/13 3:46 p.m.15 views

Jupyter Server vulnerable to Path Traversal via incorrect root directory boundary check in _get_os_path()

A path traversal vulnerability exists in jupyter-server version 2.17.0 due to an incorrect root directory boundary check in the getospath function within jupyterserver/services/contents/fileio.py. The check uses startswithroot without appending a trailing path separator, allowing sibling...

8.1CVSS6.7AI score0.00437EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
added 2026/07/13 3:35 p.m.15 views

praisonai-platform: IDOR in dependency endpoints allows cross-workspace issue linking, reading, and deletion due to missing ownership checks

SummaryType: Insecure Direct Object Reference. The dependency endpoints POST/GET /workspaces/workspaceid/issues/issueid/dependencies and DELETE .../dependencies/depid gate access on requireworkspacememberworkspaceid only, then dispatch to DependencyService calls that take URL/body-supplied issue...

8.1CVSS6.2AI score0.00231EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/07/13 3:35 p.m.15 views

Aider is vulnerable to Code Injection via editor_coder.run function

A security flaw has been discovered in Aider-AI Aider 0.86.3.dev. Affected by this vulnerability is the function editorcoder.run of the file auth.py of the component Architect Mode. Performing a manipulation results in code injection. Remote exploitation of the attack is possible. The exploit has...

6.5CVSS6.4AI score0.00242EPSS
SaveExploits0References9Affected Software1
PyPA
PyPA
added 2026/07/13 3:35 p.m.15 views

Apache Airflow has an Improper Authorization issue

The structuredata endpoint in the Airflow UI returned external dependency graph nodes for linked Dags without checking whether the caller had read permission on those linked Dags. An authenticated UI/API user authorized for one Dag could enumerate linked Dag IDs and dependency metadata for other...

3.1CVSS6.1AI score0.00477EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/13 3:35 p.m.15 views

BoxLite has a Timeout Bypass Vulnerability

SummaryBoxLite is a sandbox service that allows users to create lightweight virtual machines Boxes and run OCI containers within them. BoxLite allows users to configure a timeout for services running inside the virtual machine. When the timeout is triggered, BoxLite sends a signal to kill the...

6.5CVSS6.1AI score0.00268EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/13 3:19 p.m.15 views

compliance-trestle Profile Import has an Arbitrary File Read via trestle:// URI and Relative Path Traversal

SummaryThe compliance-trestle library's profile import mechanism resolves trestle:// URIs and relative file paths by joining them with trestleroot and calling .resolve, but performs no boundary check to ensure the resolved path stays within the trestle workspace. An attacker can craft a malicious...

6.9CVSS6.2AI score0.00061EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/13 3:19 p.m.15 views

Amazon SageMaker Python SDK is missing integrity verification in its Triton inference handler

SummaryAmazon SageMaker Python SDK is an open-source library for training and deploying machine learning models on Amazon SageMaker. An issue exists where, under certain circumstances, the Triton inference handler deserializes model artifacts without performing integrity verification, allowing...

7.2CVSS6.6AI score0.0039EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/13 3:19 p.m.15 views

ModelScope is vulnerable to arbitrary code injection via a crafted module

An issue was discovered in ModelScope 1.25.0 allowing attackers to execute arbitrary code via crafted module listed in the configuration file deymini.yaml under the key 'nnet''module'...

8.1CVSS6.3AI score0.00522EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/13 3:19 p.m.15 views

NiceGUI: Unauthenticated log-volume denial of service in dynamic resource routes

SummaryTwo FastAPI routes that serve per-component static assets in NiceGUI accept a sub-path parameter that may resolve to a directory rather than a file. Requests that resolve to a directory raise an unhandled RuntimeError inside Starlette's FileResponse, which Uvicorn writes to the server log ...

5.3CVSS6.2AI score0.00343EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/13 3:19 p.m.15 views

Weblate: Stored HTML injection in editor search preview

ImpactWeblate's live search preview renders unit source and context as HTML without escaping. Any contributor whose content reaches those fields stores HTML and CSS that runs inside the authenticated editor of every user who runs a matching search. Patches...

4.6CVSS6.1AI score0.00208EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/13 3:19 p.m.15 views

Open WebUI: Jupyter code execution works despite `ENABLE_CODE_EXECUTION=false` — feature gate bypassed

SummaryThe /api/v1/utils/code/execute endpoint executes arbitrary Python code via Jupyter for any verified user, even when the admin has set ENABLECODEEXECUTION=false. The feature gate is not enforced on the API endpoint — the configuration says "disabled" but code still executes. DetailsThe admi...

8.8CVSS7.5AI score0.00406EPSS
SaveExploits2References7Affected Software1
PyPA
PyPA
added 2026/07/13 3:19 p.m.15 views

Open WebUI has stored XSS via attacker-controlled file extension in /api/v1/audio/transcriptions

Summary The audio transcription upload endpoint takes the file extension from the user-supplied filename and saves the file under CACHEDIR/audio/transcriptions/.. The /cache/path route serves these files via FileResponse, which sets Content-Type from the on-disk extension and emits no...

8.7CVSS7.3AI score0.00186EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
added 2026/07/13 3:19 p.m.15 views

Open WebUI has XSS via SVG in /api/v1/channels/webhooks/{webhook_id}/profile/image

As part of our research on improving our AI pentest, we have uncovered the following issue in Open WebUI. We've manually verified and tided up the report, but you can also find the original agent finding at the bottom of this report. SummaryThe channel webhook create/update flow accepts arbitrary...

7.4CVSS6.6AI score0.0022EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
added 2026/07/13 3:19 p.m.15 views

Open WebUI has Stored Cross-Site Scripting In Profile Picture

SummaryThe profileimageurl field on the user profile update form accepted arbitrary data: URI values without MIME-type validation. Two distinct attack paths were independently demonstrated by separate reporters:1. data:text/html;base64,... in a new browser tab raresvis, 2025-04-17 — when a victim...

5.4CVSS6.3AI score0.00199EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/13 3:15 p.m.15 views

mem0 server lacks authentication and authorization controls for its memory creation API endpoint

The mem0 1.0.0 server lacks authentication and authorization controls for its memory creation API endpoint POST /memories. The endpoint allows unauthenticated users to submit arbitrary memory records without verifying their identity or permissions. A remote attacker can exploit this by sending...

5.3CVSS6.2AI score0.00335EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/07/13 3:15 p.m.15 views

Docling's METS GBS backend is vulnerable to XML Entity Expansion (XXE) attacks

Docling's METS GBS backend is vulnerable to XML Entity Expansion XXE attacks thru 2.61.0. The backend extracts and validates XML files from .tar.gz archives using etree.fromstring without disabling entity resolution. An attacker can craft a malicious XML file with nested entity definitions XML Bo...

7.5CVSS6AI score0.00278EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/07/13 3:15 p.m.15 views

pgAdmin 4 File Manager has symbolic-link path traversal

Symbolic-link path traversal CWE-61, CWE-22 in pgAdmin 4 File Manager.checkaccesspermission used os.path.abspath, which resolves '..' but does not resolve symbolic links, while the subsequent kernel write follows symlinks. An authenticated user could plant a symbolic link inside their own storage...

8.1CVSS7AI score0.00359EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/13 3:15 p.m.15 views

PyTorch Lightning load_from_checkpoint has an insecure checkpoint deserialization

PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerability CWE-502 in the checkpoint loading mechanism. The LightningModule.loadfromcheckpoint method, which is commonly used to load saved model states, internally calls torch.load without setting the...

8.8CVSS6.5AI score0.00385EPSS
SaveExploits1References5Affected Software1
PyPA
PyPA
added 2026/07/13 3:15 p.m.15 views

MLflow allows an unauthenticated remote attacker to read arbitrary files from the server's filesystem

A vulnerability in the createmodelversion handler of mlflow/server/handlers.py in mlflow/mlflow versions 3.9.0 and earlier allows an unauthenticated remote attacker to read arbitrary files from the server's filesystem. The issue arises when a CreateModelVersion request includes the tag...

7.5CVSS7.1AI score0.00712EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
added 2026/07/13 3:15 p.m.15 views

pgAdmin 4 contains local file inclusion (LFI) and server-side request forgery (SSRF) vulnerabilities

Local file inclusion LFI and server-side request forgery SSRF vulnerabilities in pgAdmin 4 LLM API configuration endpoints.User-supplied apikeyfile and apiurl preferences were passed to the LLM provider clients without validation. An authenticated user could read arbitrary server-side files by...

7.1CVSS6.2AI score0.00217EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/13 3:15 p.m.15 views

PraisonAI ships and generates a legacy API server with authentication disabled by default, allowing unauthenticated workflow execution

SummaryPraisonAI ships a legacy Flask API server with authentication disabled by default. When that server is used, any caller that can reach it can access /agents and trigger the configured agents.yaml workflow through /chat without providing a token. DetailsThe vulnerable server is the shipped...

7.3CVSS7.1AI score0.28571EPSS
SaveExploits3References5Affected Software1
PyPA
PyPA
added 2026/07/13 3:15 p.m.15 views

Open WebUI has inconsistent authorization controls within memories API

SummaryAuthorization controls surrounding the memories API were inconsistent, resulting in the ability of a standard user to delete, restore, and view the contents of other users' memories. DetailsUsing a newly created non-admin user with no existing memories, it is possible to view existing...

8.3CVSS6.1AI score0.00294EPSS
SaveExploits1References5Affected Software1
PyPA
PyPA
added 2026/07/13 3:15 p.m.15 views

Open WebUI vulnerable to Global Knowledge Base Enumeration via knowledge-bases Meta-Collection

Global Knowledge Base Enumeration via knowledge-bases Meta-Collection Affected ComponentRetrieval collection access validation:- backend/openwebui/routers/retrieval.py lines 2330-2355, validatecollectionaccess- backend/openwebui/routers/retrieval.py query endpoints, e.g. POST /query/doc Affected...

4.3CVSS6.2AI score0.00221EPSS
SaveExploits1References5Affected Software1
PyPA
PyPA
added 2026/07/13 3:15 p.m.15 views

Lemur: LDAP Filter Injection enables post-authentication privilege escalation

Description OverviewLemur's LDAP authentication module lemur/auth/ldap.py constructs LDAP search filters using unsanitized user input via Python string interpolation. An authenticated LDAP user can inject LDAP filter metacharacters through the username field to manipulate group membership queries...

8.1CVSS6.2AI score0.00179EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/13 3:15 p.m.15 views

OpenStack Ironic has an Incorrect Resource Transfer Between Spheres

An issue was discovered in idrac in OpenStack Ironic before 35.0.1. During import, a user invoking molds can request authorization to be sent to a remote endpoint. The credential forwarded is a time-limited Keystone token which provides access to all OpenStack services Ironic is authorized for; o...

7.7CVSS6.1AI score0.00433EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/13 3:15 p.m.15 views

vLLM Vulnerable to Remote DoS via Special-Token Placeholders

SummaryThis report explains a Token Injection vulnerability in vLLM’s multimodal processing. Unauthenticated, text-only prompts that spell special tokens are interpreted as control. Image and video placeholder sequences supplied without matching data cause vLLM to index into empty grids during...

7.5CVSS6.2AI score0.00414EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
added 2026/07/13 3:2 p.m.15 views

Langchain-Chatchat has a Race Condition in its OpenAI-Compatible File Upload API

A vulnerability has been found in chatchat-space Langchain-Chatchat up to 0.3.1.3. Impacted is the function files of the file libs/chatchat-server/chatchat/server/apiserver/openairoutes.py of the component OpenAI-Compatible File Upload API. Such manipulation of the argument file.filename leads to...

2.6CVSS5.4AI score0.00162EPSS
SaveExploits0References9Affected Software1
PyPA
PyPA
added 2026/07/13 3:2 p.m.15 views

Pillow has a PDF Parsing Trailer Infinite Loop (DoS)

ImpactAn attacker can supply a malicious PDF that causes the process to hang indefinitely, consuming 100% CPU and making the application unresponsive. PatchesPatched version: 12.2.0.PdfParser introduced in Pillow 4.2.0 follows Prev pointers in PDF trailers to read cross-reference sections. If...

5.5CVSS6.9AI score0.00126EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/13 3:2 p.m.15 views

SGLang has an Improper Input Validation/Injection Issue

A vulnerability was detected in sgl-project SGLang up to 0.5.9. Impacted is the function gettokenizer of the file python/sglang/srt/utils/hftransformersutils.py of the component HuggingFace Transformer Handler. The manipulation results in deserialization. The attack can be executed remotely. A hi...

6.3CVSS5.8AI score0.00368EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/13 3:2 p.m.15 views

Prefect SSRF Bypass via DNS Rebinding in validate_restricted_url

A vulnerability has been found in PrefectHQ prefect up to 3.6.28.dev1. Affected by this vulnerability is the function validaterestrictedurl of the component Webhook/Notification. The manipulation leads to time-of-check time-of-use. It is possible to initiate the attack remotely. The attack is...

5CVSS5.4AI score0.0025EPSS
SaveExploits0References12Affected Software1
PyPA
PyPA
added 2026/07/13 3:2 p.m.15 views

Prefect Unauthenticated Event Injection via /api/events/in WebSocket

A flaw has been found in PrefectHQ prefect up to 3.6.13. Affected is an unknown function of the file /api/events/in of the component WebSocket Endpoint. Executing a manipulation can lead to missing authentication. The attack may be performed from remote. The exploit has been published and may be...

7.5CVSS6.4AI score0.00421EPSS
SaveExploits0References12Affected Software1
PyPA
PyPA
added 2026/07/13 3:2 p.m.15 views

Prefect Git Argument Injection in GitRepository Pull Steps

A vulnerability was found in PrefectHQ prefect up to 3.6.25.dev6. Affected by this issue is some unknown functionality of the file src/prefect/runner/storage.py of the component GitRepository Pull Handler. The manipulation of the argument commitsha/directories results in argument injection. It is...

6.5CVSS6.3AI score0.00247EPSS
SaveExploits0References11Affected Software1
PyPA
PyPA
added 2026/07/13 3:2 p.m.15 views

Jupyter Notebook Vulnerable to Authentication Token Theft via CommandLinker XSS

ImpactA stored Cross-Site Scripting XSS vulnerability in Jupyter Notebook allows attackers to steal authentication tokens from users who open malicious notebook files and interact with elements that the attacker can make look indistinguishable from legitimate controls single click interaction.The...

8.4CVSS6.3AI score0.00476EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/13 3:2 p.m.15 views

django-mdeditor is Missing Authentication for Critical Function

All versions of the package django-mdeditor are vulnerable to Missing Authentication for Critical Function in the image upload endpoint. An attacker can upload malicious files and achieve arbitrary code execution since this endpoint lacks authentication protection and proper sanitisation of file...

9.8CVSS6.5AI score0.00308EPSS
SaveExploits0References9Affected Software1
PyPA
PyPA
added 2026/07/13 3:2 p.m.15 views

mcp-url-downloader has a Server-Side Request Forgery issue

A vulnerability has been found in dmitryglhf mcp-url-downloader up to 4b8cf2de55f6e8864a77d108e8a94a5b8e4394c6. Affected by this issue is the function validateurlsafe of the file src/mcpurldownloader/server.py. Such manipulation of the argument url leads to server-side request forgery. The attack...

7.5CVSS6.6AI score0.00294EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/13 3:2 p.m.15 views

pip has an interpretation conflict due to handling both concatenated tar and ZIP files as ZIP files

pip handles concatenated tar and ZIP files as ZIP files regardless of filename or whether a file is both a tar and ZIP file. This behavior could result in confusing installation behavior, such as installing "incorrect" files according to the filename of the archive. New behavior only proceeds wit...

4.6CVSS6.5AI score0.00144EPSS
SaveExploits0References8Affected Software1
Total number of security vulnerabilities5000