Lucene search
+L
PypaMost viewed

7586 matches found

PyPA
PyPA
added 2026/07/07 4:03 p.m.23 views

AcademySoftwareFoundation OpenColorIO has an out-of-bounds vulnerability

A vulnerability was found in AcademySoftwareFoundation OpenColorIO up to 2.5.0. This issue affects the function ConvertToRegularExpression of the file src/OpenColorIO/FileRules.cpp. Performing a manipulation results in out-of-bounds read. The attack needs to be approached locally. The exploit has...

4.8CVSS5.2AI score0.00183EPSS
SaveExploits0References12Affected Software1
PyPA
PyPA
added 2026/07/07 4:03 p.m.23 views

NiceGUI apps which use `ui.sub_pages` vulnerable to zero-click XSS

SummaryAn unsafe implementation in the pushstate event listener used by ui.subpages allows an attacker to manipulate the fragment identifier of the URL, which they can do despite being cross-site, using an iframe. DetailsThe problem is traced as follows:1. On pushstate, handleStateEvent is...

7.2CVSS5.9AI score0.00264EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
added 2026/07/07 4:03 p.m.23 views

Bokeh server applications have Incomplete Origin Validation in WebSockets

This vulnerability allows for Cross-Site WebSocket Hijacking CSWSH of a deployed Bokeh server instance. ScopeThis vulnerability is only relevant to deployed Bokeh server instances. There is no impact on static HTML output, standalone embedded plots, or Jupyter notebook usage. This vulnerability...

7.4CVSS5.9AI score0.00179EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/07/07 4:03 p.m.23 views

AIOHTTP's unicode processing of header values could cause parsing discrepancies

SummaryThe Python HTTP parser may allow a request smuggling attack with the presence of non-ASCII characters. ImpactIf a pure Python version of aiohttp is installed i.e. without the usual C extensions or AIOHTTPNOEXTENSIONS is enabled, then an attacker may be able to execute a request smuggling...

6.9CVSS6AI score0.00244EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 4:03 p.m.23 views

AIOHTTP vulnerable to brute-force leak of internal static file path components

SummaryPath normalization for static files prevents path traversal, but opens up the ability for an attacker to ascertain theexistence of absolute path components. ImpactIf an application uses web.static not recommended for production deployments, it may be possible for an attacker to ascertain t...

6.9CVSS5.8AI score0.00359EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 4:03 p.m.23 views

Picklescan is vulnerable to RCE through missing detection when calling numpy.f2py.crackfortran._eval_length

SummaryPicklescan uses the numpy.f2py.crackfortran.evallength function a NumPy F2PY helper to execute arbitrary Python code during unpickling. DetailsPicklescan fails to detect a malicious pickle that uses the gadget numpy.f2py.crackfortran.evallength in reduce, allowing arbitrary command executi...

8.1CVSS6.6AI score0.00523EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/07 4:03 p.m.23 views

Picklescan has Incomplete List of Disallowed Inputs

SummaryCurrently picklescanner only blocks some specific functions of the pydoc and operator modules. Attackers can use other functions within these allowed modules to go through undetected and achieve RCE on the final user. Particularly pydoc.locate: Can dynamically resolve and import arbitrary...

9.8CVSS6.1AI score0.00623EPSS
SaveExploits0References9Affected Software1
PyPA
PyPA
added 2026/07/07 4:03 p.m.23 views

badkeys vulnerable to ASCII control character injection on console via malformed input

ImpactAn attacker may inject content with ASCII control characters like vertical tabs, ANSI escape sequences, etc., that can create misleading output of the badkeys command-line tool. This impacts scanning DKIM keys both --dkim and --dkim-dns, SSH keys --ssh-lines mode, and filenames in various...

5.3CVSS5.8AI score0.00336EPSS
SaveExploits1References8Affected Software1
PyPA
PyPA
added 2026/07/07 4:03 p.m.23 views

Langflow Missing Authentication on Critical API Endpoints

SummaryMultiple critical API endpoints in Langflow are missing authentication controls, allowing any unauthenticated user to access sensitive user conversation data, transaction histories, and perform destructive operations including message deletion. This affects endpoints handling personal data...

9.3CVSS6AI score0.3371EPSS
SaveExploits2References7Affected Software1
PyPA
PyPA
added 2026/07/07 4:03 p.m.23 views

Langflow vulnerable to Server-Side Request Forgery

Vulnerability OverviewLangflow provides an API Request component that can issue arbitrary HTTP requests within a flow. This component takes a user-supplied URL, performs only normalization and basic format checks, and then sends the request using a server-side httpx client. It does not block...

7.7CVSS6.2AI score0.06303EPSS
SaveExploits1References5Affected Software1
PyPA
PyPA
added 2026/07/07 4:03 p.m.23 views

PyMdown Extensions has a ReDOS bug in its Figure Capture extension

ImpactThis issue describes a ReDOS bug found within the figure caption extension pymdownx.blocks.caption .In systems that take unchecked user content, this could cause long hangs when processing the data if a malicious payload was crafted. PatchesThis issue is patched in Release 10.16.1...

6.9CVSS6.1AI score0.00484EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/07/07 4:03 p.m.23 views

Biopython is vulnerable to doctype XML external entity (XXE) injection through Bio.Entrez

Bio.Entrez in Biopython through 1.86 allows doctype XXE...

4.9CVSS5.9AI score0.00316EPSS
SaveExploits0References9Affected Software1
PyPA
PyPA
added 2026/07/07 4:03 p.m.23 views

Pyrofork has a Path Traversal in download_media Method

SummaryThe downloadmedia method in Pyrofork does not sanitize filenames received from Telegram messages before using them in file path construction. This allows a remote attacker to write files to arbitrary locations on the filesystem by sending a specially crafted document with path traversal...

6.5CVSS6.6AI score0.00318EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 4:03 p.m.23 views

urllib3 streaming API improperly handles highly compressed data

Impacturllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loading the entire response body into memory at once.When streaming a compressed response, urllib3 can perform decoding or decompression based on the HTTP...

8.9CVSS6.1AI score0.00682EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 4:03 p.m.23 views

ALTCHA Proof-of-Work Vulnerable to Challenge Splicing and Replay

ImpactA cryptographic semantic binding flaw in ALTCHA libraries allows challenge payload splicing, which may enable replay attacks. The HMAC signature does not unambiguously bind challenge parameters to the nonce, allowing an attacker to reinterpret a valid proof-of-work submission with a modifie...

6.5CVSS5.8AI score0.00463EPSS
SaveExploits0References15Affected Software1
PyPA
PyPA
added 2026/07/07 4:03 p.m.23 views

Spotipy has a XSS vulnerability in its OAuth callback server

SummaryXSS vulnerability in OAuth callback server allows JavaScript injection through unsanitized error parameter. Attackers can execute arbitrary JavaScript in the user's browser during OAuth authentication. DetailsVulnerable Code: spotipy/oauth2.py lines 1238-1274 RequestHandler.doGETThe...

3.6CVSS6.2AI score0.00156EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 4:03 p.m.23 views

Werkzeug safe_join() allows Windows special device names

Werkzeug's safejoin function allows path segments with Windows device names. On Windows, there are special device names such as CON, AUX, etc that are implicitly present and readable in every directory. sendfromdirectory uses safejoin to safely serve files at user-specified paths under a director...

6.3CVSS5.9AI score0.00511EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/07 4:03 p.m.23 views

Bugsink is vulnerable to unauthenticated remote DoS via crafted Brotli input (via CPU)

ImpactIn affected versions, a specially crafted Brotli-compressed envelope can cause Bugsink to spend excessive CPU time in decompression, leading to denial of service.This can be done if the DSN is known, which it is in many common setups JavaScript, Mobile Apps. PatchesPatched in Bugsink 2.0.6...

7.5CVSS5.9AI score0.00315EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 4:03 p.m.23 views

pgAdmin has vulnerability in LDAP authentication mechanism that allows bypassing TLS certificate verification

pgAdmin = 9.9is affected by avulnerability in the LDAP authentication mechanism allows bypassing TLS certificate verification...

7.5CVSS5.9AI score0.00216EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 4:03 p.m.23 views

vLLM deserialization vulnerability leading to DoS and potential RCE

SummaryA memory corruption vulnerability that leading to a crash denial-of-service and potentially remote code execution RCE exists in vLLM versions 0.10.2 and later, in the Completions API endpoint. When processing user-supplied prompt embeddings, the endpoint loads serialized tensors using...

8.8CVSS6.8AI score0.00892EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/07 4:03 p.m.23 views

Agno session state overwrites between different sessions/users

ImpactUnder certain conditions under high concurrency, when sessionstate is passed to an Agent or Team during run or arun calls, a race condition can occur, causing a sessionstate to be assigned and persisted to the incorrect session. This may result in user data from one session being exposed to...

7.1CVSS5.9AI score0.0015EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/07/07 4:03 p.m.23 views

LangGraph's SQLite store implementation has a SQL Injection Vulnerability

A SQL injection vulnerability exists in the langchain-ai/langgraph repository, specifically in the LangGraph's SQLite store implementation. The affected version is langgraph-checkpoint-sqlite 2.0.10. The vulnerability arises from improper handling of filter operators $eq, $ne, $gt, $lt, $gte, $lt...

7.3CVSS6.1AI score0.00165EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/07 4:03 p.m.23 views

Llama Stack could potentially allow for remote code execution

Llama Stack prior to version v0.2.20 accepted unverified parameters in the resolveastbytype function which could potentially allow for remote code execution...

5.3CVSS6.2AI score0.00504EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/07 4:03 p.m.23 views

Indico vulnerable to Cross-Site Scripting via LaTeX math code

ImpactThere is a Cross-Site-Scripting vulnerability when rendering LaTeX math code in contribution or abstract descriptions. PatchesYou should to update to Indico 3.3.8 as soon as possible.See the docs for instructions on how to update. WorkaroundsOnly let trustworthy users create content on...

5.4CVSS6.1AI score0.00201EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 4:03 p.m.23 views

Copier's safe template has arbitrary filesystem read/write access

ImpactCopier's current security model shall restrict filesystem access through Jinja:- Files can only be read using % include ... %, which is limited by Jinja to reading files from the subtree of the local template clone in our case.- Files are written in the destination directory according to...

8.5CVSS6.1AI score0.00259EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 4:03 p.m.23 views

XGrammar affected by Denial of Service by infinite recursion grammars

SummaryThis issue: http://github.com/mlc-ai/xgrammar/issues/250 should have it's own security advisory. Since several tools accept and pass user supplied grammars to xgrammar, and it is so easy to trigger it seems like a High...

8.7CVSS6AI score0.00466EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/07/07 4:03 p.m.23 views

Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability

A Regular Expression Denial of Service ReDoS vulnerability exists in the Hugging Face Transformers library, specifically in the converttfweightnametoptweightname function. This function, responsible for converting TensorFlow weight names to PyTorch format, uses a regex pattern /^/^// that can be...

5.3CVSS6.1AI score0.00395EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/07/07 4:03 p.m.23 views

TinyScientist has Path Traversal Vulnerability in PDF Review Function (CWE-22)

DescriptionA critical path traversal vulnerability CWE-22 has been identified in the reviewpaper function in backend/app.py. The vulnerability allows malicious users to access arbitrary PDF files on the server by providing crafted file paths that bypass the intended security restrictions...

8.8CVSS6AI score0.00645EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 4:02 p.m.23 views

MaterialX Null Pointer Dereference in getShaderNodes due to Unchecked nodeGraph->getOutput return

SummaryWhen parsing shader nodes in a MTLX file, the MaterialXCore code accesses a potentially null pointer, which can lead to crashes with maliciously crafted files. DetailsIn src/MaterialXCore/Material.cpp, in function getShaderNodes, the following code fetches the output nodes for a given...

7.5CVSS6AI score0.00463EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/07/07 4:02 p.m.23 views

Skops has Inconsistent Trusted Type Validation that Enables Hidden `operator` Methods Execution

SummaryAn inconsistency in OperatorFuncNode can be exploited to hide the execution of untrusted operator.xxx methods. This can then be used in a code reuse attack to invoke seemingly safe functions and escalate to arbitrary code execution with minimal and misleading trusted types.Note: This repor...

8.7CVSS6.7AI score0.00137EPSS
SaveExploits0References9Affected Software1
PyPA
PyPA
added 2026/07/07 4:02 p.m.23 views

Starlette has possible denial-of-service vector when parsing large files in multipart forms

SummaryWhen parsing a multi-part form with large files greater than the default max spool size starlette will block the main thread to roll the file over to disk. This blocks the event thread which means we can't accept new connections. DetailsPlease see this discussion for details:...

5.3CVSS6AI score0.00579EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/07 4:02 p.m.23 views

Calibre Web and Autocaliweb have a ReDoS vulnerability

ReDoS in stripwhitespaces function in cps/stringhelper.py in Calibre Web and Autocaliweb allows unauthenticated remote attackers to cause denial of service via specially crafted username parameter that triggers catastrophic backtracking during login. This issue affects Calibre Web: 0.6.24...

8.7CVSS6AI score0.00841EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 4:02 p.m.23 views

pyLoad is vulnerable to attacks that bypass localhost restrictions, enabling the creation of arbitrary packages

SummaryAny unauthenticated attacker can bypass the localhost restrictions posed by the application and utilize this to create arbitrary packages. DetailsAny unauthenticated attacker can bypass the localhost restrictions posed by the application and utilize this to create arbitrary packages. This ...

8.7CVSS6.1AI score0.00315EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/07 4:02 p.m.23 views

pyspur Incomplete Filtering of Special Elements allowed by SingleLLMCallNode function

A vulnerability was found in PySpur-Dev pyspur up to 0.1.18. It has been classified as critical. Affected is the function SingleLLMCallNode of the file backend/pyspur/nodes/llm/singlellmcall.py of the component Jinja2 Template Handler. The manipulation of the argument usermessage leads to imprope...

6.5CVSS5.5AI score0.00361EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/07 4:02 p.m.23 views

BackendAI vulnerable to Exposure of Sensitive Information to an Unauthorized Actor

Exposure of sensitive data in active sessions in Lablup's BackendAI allows attackers to retrieve credentials for users on the management platform.NOTE: The maintainers of BackendAI do not consider this report to fit with their threat model and advise users to follow security advice from...

8CVSS6AI score0.00348EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/07 4:02 p.m.23 views

Nautobot may allows uploaded media files to be accessible without authentication

ImpactFiles uploaded by users to Nautobot's MEDIAROOT directory, including DeviceType image attachments as well as images attached to a Location, Device, or Rack, are served to users via a URL endpoint that was not enforcing user authentication. As a consequence, such files can be retrieved by...

6.3CVSS5.9AI score0.00438EPSS
SaveExploits0References9Affected Software1
PyPA
PyPA
added 2026/07/07 4:02 p.m.23 views

Apache Superset Allows Ownership Takeover

Improper Authorization vulnerability in Apache Superset allows ownership takeover of dashboards, charts or datasets by authenticated users with read permissions.This issue affects Apache Superset: through 4.1.1.Users are recommended to upgrade to version 4.1.2 or above, which fixes the issue...

8.8CVSS6.1AI score0.01209EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/07 4:02 p.m.23 views

Whoogle allows attackers to execute arbitrary code via supplying a crafted search query

An issue in the component /models/config.py of Whoogle search v0.9.0 allows attackers to execute arbitrary code via supplying a crafted search query...

9.3CVSS6.3AI score0.00584EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/07/07 4:02 p.m.23 views

Apache Airflow Common SQL Provider Vulnerable to SQL Injection

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Apache Airflow Common SQL Provider.When using the partition clause in SQLTableCheckOperator as parameter which was a recommended pattern, Authenticated UI User could inject arbitrary SQL command wh...

8.8CVSS6.2AI score0.00918EPSS
SaveExploits0References10Affected Software1
PyPA
PyPA
added 2026/07/07 4:02 p.m.23 views

Litestar and Starlite vulnerable to Path Traversal

SummaryLocal File Inclusion via Path Traversal in LiteStar Static File ServingA Local File Inclusion LFI vulnerability has been discovered in the static file serving component of LiteStar. This vulnerability allows attackers to exploit path traversal flaws, enabling unauthorized access to sensiti...

8.2CVSS6.1AI score0.00722EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.23 views

Frappe has Possibility of Remote Code Execution due to improper validation

ImpactA system user was able to create certain documents in a specific way that could lead to RCE. WorkaroundsThere's no workaround, an upgrade is required. CreditsThanks to Thanh of Calif.io for reporting the issue...

8.8CVSS6AI score0.00709EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.23 views

Frappe has possibility of SQL injection due to improper validations

ImpactSQL injection could be achieved via a specially crafted request, which could allow malicious person to gain access to sensitive information. WorkaroundsUpgrading is required, no other workaround is present...

8.7CVSS5.9AI score0.00354EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.23 views

BentoML Denial of Service (DoS) via Multipart Boundary

BentoML version v1.3.4post1 is vulnerable to a Denial of Service DoS attack. The vulnerability can be exploited by appending characters, such as dashes -, to the end of a multipart boundary in an HTTP request. This causes the server to continuously process each character, leading to excessive...

7.5CVSS5.9AI score0.00711EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.23 views

Composio Eval Injection Vulnerability

In composiohq/composio version 0.4.3, the mathematicalcalculator endpoint uses the unsafe eval function to perform mathematical operations. This can lead to arbitrary code execution if untrusted input is passed to the eval function...

9.8CVSS6.5AI score0.01214EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.23 views

composio allows Server-Side Request Forgery (SSRF) in BROWSERTOOL

A Server-Side Request Forgery SSRF vulnerability exists in composiohq/composio version v0.4.4. This vulnerability allows an attacker to read the contents of any file in the system by exploiting the BROWSERTOOLGOTOPAGE and BROWSERTOOLGETPAGEDETAILS actions...

7.5CVSS6.7AI score0.00727EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.23 views

Open WebUI allows Remote Code Execution via Arbitrary File Upload to /audio/api/v1/transcriptions

OpenWebUI version 0.3.0 contains a vulnerability in the audio API endpoint /audio/api/v1/transcriptions that allows for arbitrary file upload. The application performs insufficient validation on the file.contenttype and allows user-controlled filenames, leading to a path traversal vulnerability...

8.1CVSS6.7AI score0.00902EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.23 views

Gradio Vulnerable to Open Redirect

An open redirect vulnerability exists in the latest version of gradio-app/gradio. The vulnerability allows an attacker to redirect users to a malicious website by URL encoding. This can be exploited by sending a crafted request to the application, which results in a 302 redirect to an...

6.1CVSS5.9AI score0.00744EPSS
SaveExploits1References5Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.23 views

Open WebUI Allows Admin Deletion via API Endpoint

In open-webui/open-webui version v0.3.8, there is an improper privilege management vulnerability. The application allows an attacker, acting as an admin, to delete other administrators via the API endpoint http://0.0.0.0:8080/api/v1/users/uuidadministrator. This action is restricted by the user...

8.3CVSS5.9AI score0.00647EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.23 views

Open WebUI Uncontrolled Resource Consumption vulnerability

In version v0.3.32 of open-webui/open-webui, the application allows users to submit large payloads in the email and password fields during the sign-in process due to the lack of character length validation on these inputs. This vulnerability can lead to a Denial of Service DoS condition when a us...

7.5CVSS7.1AI score0.00811EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.23 views

Aim Uncontrolled Resource Consumption vulnerability

A vulnerability in aimhubio/aim version 3.25.0 allows for a denial of service DoS attack. The issue arises when a large number of tracked metrics are retrieved simultaneously from the Aim web API, causing the web server to become unresponsive. The root cause is the lack of a limit on the number o...

7.5CVSS6AI score0.00779EPSS
SaveExploits1References5Affected Software1
Total number of security vulnerabilities5000