Lucene search
+L
PypaMost viewed

7218 matches found

PyPA
PyPA
added 2026/07/07 10:16 a.m.16 views

PYSEC-2026-2086

A bug in Apache Airflow's /ui/dependencies scheduling graph endpoint applied the caller's readable-Dag filter to the top-level serialized Dag key but still emitted referenced Dag IDs through the dep.source and dep.target fields of trigger / sensor dependency entries. An authenticated UI user with...

4.3CVSS6.1AI score0.0044EPSS
SaveExploits0References3Affected Software1
PyPA
PyPA
added 2026/07/06 9:16 a.m.16 views

PYSEC-2026-2080

Authentication Bypass by Spoofing vulnerability in Apache IoTDB.Certain Thrift RPC query handlers lack strict validation of the sessionIdparameter. An attacker can construct requests with a forged sessionId and,without performing openSession authentication, receive valid query results.This allows...

9.1CVSS6AI score0.00521EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2026/07/06 8:3 a.m.16 views

Missing validation results in undefined behavior in `QuantizedConv2D`

ImpactThe implementation of tf.rawops.QuantizedConv2D does not fully validate the input arguments:pythonimport tensorflow as tfinput = tf.constant1, shape=1, 2, 3, 3, dtype=tf.quint8filter = tf.constant1, shape=1, 2, 3, 3, dtype=tf.quint8 bad argsmininput = tf.constant, shape=0,...

5.5CVSS6.1AI score0.00333EPSS
SaveExploits1References11Affected Software1
PyPA
PyPA
added 2026/07/06 8:3 a.m.16 views

aptdaemon Information Disclosure via Improper Input Validation in Transaction class

There is no input validation on the Locale property in an apt transaction. An unprivileged user can supply a full path to a writable directory, which lets aptd read a file as root. Having a symlink in place results in an error message if the file exists, and no error otherwise. This way an...

4CVSS6AI score0.00486EPSS
SaveExploits1References8Affected Software1
PyPA
PyPA
added 2026/07/06 8:3 a.m.16 views

OpenStack Cinder Exposure of Sensitive Information to an Unauthorized Actor vulnerability

The 1 GlusterFS and 2 Linux Smbfs drivers in OpenStack Cinder before 2014.1.3 allows remote authenticated users to obtain file data from the Cinder-volume host by cloning and attaching a volume with a crafted qcow2 header...

4CVSS6AI score0.0186EPSS
SaveExploits0References14Affected Software1
PyPA
PyPA
added 2026/07/06 8:3 a.m.16 views

OpenStack Horizon Cross-site Scripting (XSS)

OpenStack Horizon 9.x through 9.1.1, 10.x through 10.0.2, and 11.0.0 allows remote authenticated administrators to conduct XSS attacks via a crafted federation mapping...

4.8CVSS6.4AI score0.01054EPSS
SaveExploits0References11Affected Software1
PyPA
PyPA
added 2026/07/02 2:13 p.m.16 views

Zope DTML implementation Improper Authentication

The DTML implementation in the Z Object Publishing Environment Zope allows remote attackers to conduct unauthorized activities...

10CVSS6AI score0.02218EPSS
SaveExploits0References4Affected Software1
PyPA
PyPA
added 2026/07/02 2:13 p.m.16 views

Open Redirect in django-spirit

django-spirit prior to version 0.12.3 is vulnerable to open redirect. In the /user/login endpoint, it doesn't check the value of the next parameter when the user is logged in and passes it directly to redirect which result to open redirect. This also affects /user/logout, /user/register,...

6.1CVSS6AI score0.0262EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
added 2026/07/02 2:13 p.m.16 views

Out-of-bounds Write in OpenCV

OpenCV Open Source Computer Vision Library 3.3 corresponding to OpenCV-Python 3.3.0.9 has an out-of-bounds write error in the function FillColorRow1 in utils.cpp when reading an image file by using cv::imread. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-12597...

8.8CVSS6.8AI score0.0197EPSS
SaveExploits1References9Affected Software1
PyPA
PyPA
added 2026/07/01 10:16 p.m.16 views

PYSEC-2026-616

Wagtail is an open source content management system built on Django. In versions prior to 7.0.8, 7.3.3 and 7.4.2, reflected cross-site scripting XSS vulnerability exists on the dynamic image URL generator view within the Wagtail admin interface. A user with a limited-permission editor account for...

7.3CVSS5.7AI score0.00203EPSS
SaveExploits0References1Affected Software1
PyPA
PyPA
added 2026/07/01 9:33 p.m.16 views

Malicious code in pantheon-toolsets (PyPI)

Part of the "Hades" wave of the Shai-Hulud supply-chain campaign. On 2026-06-08,malicious phantom releases of pantheon-toolsets were published to PyPI using stolencredentials. The package executes a bundled JavaScript payload via the Bunruntime on import that harvests and exfiltrates credentials...

5.9AI score
SaveExploits0References3Affected Software1
PyPA
PyPA
added 2026/07/01 7:19 p.m.16 views

Malicious code in nucbox (PyPI)

Part of the "Hades" wave of the Shai-Hulud supply-chain campaign. On 2026-06-08,malicious phantom releases of nucbox were published to PyPI using stolencredentials. The package executes a bundled JavaScript payload via the Bunruntime on import that harvests and exfiltrates credentials and...

5.9AI score
SaveExploits0References3Affected Software1
PyPA
PyPA
added 2026/07/01 7:12 p.m.16 views

Malicious code in napari-ufish (PyPI)

Part of the "Hades" wave of the Shai-Hulud supply-chain campaign. On 2026-06-08,malicious phantom releases of napari-ufish were published to PyPI using stolencredentials. The package executes a bundled JavaScript payload via the Bunruntime on import that harvests and exfiltrates credentials and...

5.9AI score
SaveExploits0References3Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.16 views

python-statemachine SCXML <data expr> Eval Injection

Summarypython-statemachine 3.1.2 evaluates attributes in SCXML documents using Python's eval. Any application that passes attacker-controlled SCXML content to SCXMLProcessor is vulnerable to arbitrary code execution in the context of the hosting process. DetailsSCXMLProcessor.parsescxmlfile...

9.8CVSS6.7AI score0.01173EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.16 views

imgaug contains an insecure deserialization vulnerability in BackgroundAugmenter class within multicore.py module

The imgaug library thru 0.4.0 contains an insecure deserialization vulnerability in its BackgroundAugmenter class within the multicore.py module. The class uses Python's pickle module to deserialize data received via a multiprocessing queue in the augmentimagesworker method without any safety...

9.8CVSS6.7AI score0.00472EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.16 views

PraisonAI MCP `tools/call` path-traversal => RCE via Python `.pth` injection

SummaryPraisonAI's MCP Model Context Protocol server praisonai mcp serve registers four file-handling tools by default — praisonai.rules.create, praisonai.rules.show, praisonai.rules.delete, and praisonai.workflow.show. Each accepts a path or filename string from MCP tools/call arguments and join...

9.6CVSS6.6AI score0.0062EPSS
SaveExploits1References5Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.16 views

wger: cross-tenant password reset and plaintext disclosure via gym=None bypass

SummaryThe resetuserpassword and gympermissionsuseredit views in wger perform a gym-scope authorization check using Python object comparison != that evaluates None != None as False, silently bypassing the guard when both the attacker and victim have no gym assignment gym=None. A user with...

9.9CVSS6.2AI score0.00371EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.16 views

praisonai-platform: JWT signing key defaults to hardcoded "dev-secret-change-me", allowing token forgery for any user when PLATFORM_ENV is unset

SummaryType: Insecure default cryptographic key. The JWT signing secret defaults to the hardcoded literal "dev-secret-change-me" when PLATFORMJWTSECRET is unset. A safety check exists but only fires when PLATFORMENV != "dev"; the default value of PLATFORMENV is "dev", so the check is silently...

9.8CVSS6.1AI score0.0036EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.16 views

Unauthenticated Remote Code Execution in Langflow via Public Flow Build Endpoint

SummaryThe POST /api/v1/buildpublictmp/flowid/flow endpoint allows building public flows without requiring authentication. When the optional data parameter is supplied, the endpoint uses attacker-controlled flow data containing arbitrary Python code in node definitions instead of the stored flow...

9.8CVSS8.1AI score0.99836EPSS
SaveExploits24References14Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.16 views

TorchServe Server-Side Request Forgery vulnerability

ImpactRemote Server-Side Request Forgery SSRF Issue: TorchServe default configuration lacks proper input validation, enabling third parties to invoke remote HTTP download requests and write files to the disk. This issue could be taken advantage of to compromise the integrity of the system and...

10CVSS7.3AI score0.35256EPSS
SaveExploits6References8Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.16 views

smolagents has Sandbox Escape Vulnerability in the local_python_executor.py Module

A sandbox escape vulnerability was identified in huggingface/smolagents version 1.14.0, allowing attackers to bypass the restricted execution environment and achieve remote code execution RCE. The vulnerability stems from the localpythonexecutor.py module, which inadequately restricts Python code...

10CVSS7.9AI score0.18654EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.16 views

Qiskit allows arbitrary code execution decoding QPY format versions < 13

ImpactA maliciously crafted QPY file can potentially execute arbitrary-code embedded in the payload without privilege escalation when deserializing QPY formats 13. A python process calling Qiskit's qiskit.qpy.load function could potentially execute any arbitrary Python code embedded in the correc...

9.8CVSS6.2AI score0.00741EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/06/09 9:16 a.m.16 views

PYSEC-2026-208

The Apache Airflow Samba provider's GCSToSambaOperator joined GCS object names to the SMB destination path without a containment check, so an object named with ../ segments resolved a write path outside the configured destinationpath. An attacker able to write objects into the source GCS bucket —...

6.5CVSS5.5AI score0.00695EPSS
SaveExploits0References4Affected Software1
PyPA
PyPA
added 2026/06/03 2:16 p.m.16 views

PYSEC-0000-CVE-2026-44546

daphne before 4.2.2 reconstructs a raw HTTP request from Twisted's parsed headers and feeds it to autobahn for WebSocket handshake processing. Twisted does not treat \x0b, \x0c, \x1c, \x1d, \x1e, or \x85 as header line separators, but autobahn decodes header values to str and calls splitlines. An...

5.3CVSS5.5AI score0.00172EPSS
SaveExploits0References1Affected Software1
PyPA
PyPA
added 2026/06/02 9:16 a.m.16 views

PYSEC-2026-2261

In version 3.6.19 of prefecthq/prefect, an authentication bypass vulnerability exists due to the improper handling of URL path exemptions for health check probes. Specifically, the authentication middleware exempts any URL path ending with 'health' or 'ready' from authentication checks. This allo...

7.5CVSS7AI score0.00476EPSS
SaveExploits1References3Affected Software1
PyPA
PyPA
added 2026/06/01 9:16 a.m.16 views

PYSEC-0000-CVE-2026-45360

Apache Airflow's scheduler-side deadline-reference decoder SerializedCustomReference.deserializereference imported and dispatched arbitrary class paths drawn from DAG-author-controlled serialized state without an allowlist or plugin-registry gate. A DAG author whose code reaches the scheduler — t...

7.3CVSS6AI score0.00676EPSS
SaveExploits0References3Affected Software1
PyPA
PyPA
added 2026/06/01 9:16 a.m.16 views

PYSEC-2026-186

Apache Airflow's scheduler-side deadline-reference decoder SerializedCustomReference.deserializereference imported and dispatched arbitrary class paths drawn from DAG-author-controlled serialized state without an allowlist or plugin-registry gate. A DAG author whose code reaches the scheduler — t...

7.3CVSS6AI score0.00676EPSS
SaveExploits0References4Affected Software1
PyPA
PyPA
added 2026/06/01 9:16 a.m.16 views

PYSEC-2026-182

The partitioneddagruns endpoints in the Airflow UI enforced only asset-level access control, not per-Dag authorization. An authenticated UI/API user with global Asset:read permission could enumerate partition run state, schedule configuration, and asset wiring for Dags they were not authorized to...

4.3CVSS5.8AI score0.00366EPSS
SaveExploits0References4Affected Software1
PyPA
PyPA
added 2026/05/28 4:16 p.m.16 views

PYSEC-0000-CVE-2026-48526

PyJWT is a JSON Web Token implementation in Python. Prior to 2.13.0, when the verifier is decoding JSON Web Tokens, while supporting both asymmetric and HMAC algorithms, the library does not validate use of JSON Web Keys in HMAC algorithm, allowing attacker to use the issuer public key as the...

7.4CVSS5.8AI score0.00395EPSS
SaveExploits1References1Affected Software1
PyPA
PyPA
added 2026/05/28 4:16 p.m.16 views

PYSEC-0000-CVE-2026-48524

PyJWT is a JSON Web Token implementation in Python. Prior to 2.13.0, PyJWKClient.getsigningkey forces a fresh HTTP request to the JWKS endpoint for every JWT with an unknown kid value, with no rate limiting. Since kid comes from the unverified token header, an attacker can trigger unlimited...

3.7CVSS5.8AI score0.00336EPSS
SaveExploits0References1Affected Software1
PyPA
PyPA
added 2026/05/26 9:16 p.m.16 views

PYSEC-2026-168

Mistune is a Python Markdown parser with renderers and plugins. In 3.2.0 and realier, in src/mistune/directives/image.py, the renderfigure function concatenates figclass and figwidth options directly into HTML attributes without escaping. This allows attribute injection and XSS even when...

6.1CVSS5.8AI score0.00198EPSS
SaveExploits0References1Affected Software1
PyPA
PyPA
added 2026/05/26 6:16 p.m.16 views

PYSEC-2026-167

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 6.9.7, an organization admin can escalate their privileges by adding a user from a different organization with higher privileges, to their own organization. This is due to incorrect ACL o...

7.2CVSS5.8AI score0.00316EPSS
SaveExploits0References1Affected Software1
PyPA
PyPA
added 2026/05/26 6:16 p.m.16 views

PYSEC-0000-CVE-2026-44730

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to 6.9.7, an organization admin can escalate their privileges by adding a user from a different organization with higher privileges, to their own organization. This is due to incorrect ACL o...

7.2CVSS5.8AI score0.00316EPSS
SaveExploits0References1Affected Software1
PyPA
PyPA
added 2026/05/11 6:16 p.m.16 views

PYSEC-2026-129

pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev100, when passing a folder name in the setpackagedata API function call inside the data object with key "folder", there is no sanitization at all, allowing a user with Perms.MODIFY to specify arbitrary...

8.1CVSS5.9AI score0.00395EPSS
SaveExploits1References1Affected Software1
PyPA
PyPA
added 2026/04/15 7:16 p.m.16 views

PYSEC-2026-154

Weblate is a web based localization tool. In versions prior to 5.17, the project backup didn't filter Git and Mercurial configuration files which could lead to remote code execution under certain circumstances. This issue has been fixed in version 5.17. If developers are unable to update...

8CVSS6.4AI score0.00708EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2026/04/09 10:16 a.m.16 views

PYSEC-2026-21

Apache Airflow versions 3.0.0 through 3.1.8 DagRun wait endpoint returns XCom result values even to users who only have DAG Run read permissions, such as the Viewer role.This behavior conflicts with the FAB RBAC model, which treats XCom as a separate protected resource, and with the security mode...

6.5CVSS5.9AI score0.00685EPSS
SaveExploits0References4Affected Software1
PyPA
PyPA
added 2026/04/07 8:16 p.m.16 views

PYSEC-2026-60

FastFeedParser is a high performance RSS, Atom and RDF parser. Prior to 0.5.10, when parse fetches a URL that returns an HTML page containing a tag, it recursively calls itself with the redirect URL — with no depth limit, no visited-URL deduplication, and no redirect count cap. An...

7.5CVSS5.8AI score0.00328EPSS
SaveExploits1References1Affected Software1
PyPA
PyPA
added 2026/04/07 4:16 p.m.16 views

PYSEC-2026-28

changedetection.io is a free open source web page change detection tool. Prior to 0.54.8, the @loginoptionallyrequired decorator is placed before outer to @blueprint.route instead of after it. In Flask, @route must be the outermost decorator because it registers the function it receives. When the...

9.8CVSS5.8AI score0.00536EPSS
SaveExploits1References1Affected Software1
PyPA
PyPA
added 2026/04/06 6:16 p.m.16 views

PYSEC-2026-72

Kedro is a toolbox for production-ready data science. Prior to 1.3.0, Kedro allows the logging configuration file path to be set via the KEDROLOGGINGCONFIG environment variable and loads it without validation. The logging configuration schema supports the special key, which enables arbitrary...

9.8CVSS6.6AI score0.00714EPSS
SaveExploits0References1Affected Software1
PyPA
PyPA
added 2026/04/01 6:16 p.m.16 views

PYSEC-2026-104

Open Neural Network Exchange ONNX is an open standard for machine learning interoperability. Prior to version 1.21.0, there is a symlink traversal vulnerability in external data loading allows reading files outside the model directory. This issue has been patched in version 1.21.0...

5.5CVSS5.7AI score0.00248EPSS
SaveExploits1References1Affected Software1
PyPA
PyPA
added 2026/03/27 12:16 a.m.16 views

PYSEC-2026-2297

vLLM is an inference and serving engine for large language models LLMs. Starting in version 0.10.1 and prior to version 0.18.0, two model implementation files hardcode trustremotecode=True when loading sub-components, bypassing the user's explicit --trust-remote-code=False security opt-out. This...

8.8CVSS7.3AI score0.01346EPSS
SaveExploits0References16Affected Software1
PyPA
PyPA
added 2026/03/26 5:16 p.m.16 views

PYSEC-2026-27

Briefcase is a tool for converting a Python project into a standalone native application. Starting in version 0.3.0 and prior to version 0.3.26, if a developer uses Briefcase to produce an Windows MSI installer for a project, and that project is installed for All Users i.e., per-machine scope, th...

7.3CVSS5.8AI score0.00132EPSS
SaveExploits0References4Affected Software1
PyPA
PyPA
added 2026/03/24 8:16 p.m.16 views

PYSEC-2026-2233

NiceGUI is a Python-based UI framework. Prior to version 3.9.0, NiceGUI's app.addmediafile and app.addmediafiles media routes accept a user-controlled query parameter that influences how files are read during streaming. The parameter is passed to the range-response implementation without...

7.5CVSS6.1AI score0.00599EPSS
SaveExploits0References3Affected Software1
PyPA
PyPA
added 2026/03/24 2:16 p.m.16 views

PYSEC-2026-81

Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to version 1.7.1, in the downloadprofilepicture function of the /profilepictures/foldername/filename endpoint, the foldername and filename parameters are not strictly filtered, which allows the secretkey to be re...

8.7CVSS5.8AI score0.19584EPSS
SaveExploits1References1Affected Software1
PyPA
PyPA
added 2026/03/17 4:16 p.m.16 views

PYSEC-2026-117

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to version 6.9.1, the GraphQL mutations "IndividualDeletionDeleteMutation" is intended to allow users to delete individual entity objects respectively. However, it was observed that this...

8.1CVSS5.8AI score0.00227EPSS
SaveExploits0References1Affected Software1
PyPA
PyPA
added 2026/03/07 4:15 p.m.16 views

PYSEC-2026-121

pyLoad is a free and open-source download manager written in Python. From version 0.5.0b3.dev13 to 0.5.0b3.dev96, the editpackage function implements insufficient sanitization for the packfolder parameter. The current protection relies on a single-pass string replacement of "../", which can be...

7.1CVSS5.7AI score0.00517EPSS
SaveExploits1References1Affected Software1
PyPA
PyPA
added 2026/03/05 9:16 p.m.16 views

PYSEC-2026-112

Products.isurlinportal is a replacement for isURLInPortal method in Plone. Prior to versions 2.1.0, 3.1.0, and 4.0.0, a url /login?camefrom=////evil.example may redirect to an external website after login. This issue has been patched in versions 2.1.0, 3.1.0, and 4.0.0...

6.1CVSS5.7AI score0.00227EPSS
SaveExploits0References1Affected Software1
PyPA
PyPA
added 2026/02/03 3:16 p.m.16 views

PYSEC-2026-42

An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28.The django.contrib.auth.handlers.modwsgi.checkpassword function for authentication via modwsgi allows remote attackers to enumerate users via a timing attack.Earlier, unsupported Django series such as 5.0.x,...

5.3CVSS5.8AI score0.00713EPSS
SaveExploits0References4Affected Software1
PyPA
PyPA
added 2026/02/02 11:16 p.m.16 views

PYSEC-2026-137

A stored cross-site scripting XSS vulnerability in the Jobs module of Tendenci CMS v15.3.7 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload...

5.4CVSS5.9AI score0.00235EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
added 2026/01/21 6:16 p.m.16 views

PYSEC-2026-102

An issue in ollama v.0.12.10 allows a remote attacker to cause a denial of service via the fs/ggml/gguf.go, function readGGUFV1String reads a string length from untrusted GGUF metadata...

7.5CVSS5.8AI score0.00362EPSS
SaveExploits1References2Affected Software1
Total number of security vulnerabilities5000