Lucene search
+L
PypaMost viewed

7218 matches found

PyPA
PyPA
added 2026/07/07 4:3 p.m.16 views

ComfyUI-Manager is Vulnerable to CRLF Injection in Configuration Handler

ImpactVulnerability Type: CRLF Injection via ConfigParserAn attacker can inject special characters into HTTP query parameters to add arbitrary configuration values to the config.ini file. This can lead to security setting tampering or modification of application behavior.Affected Users: Users...

7.5CVSS6.1AI score0.00317EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/07 4:3 p.m.16 views

hermes's raw options logging may disclose secrets passed in via subcommand options argument

Thanks, @thunze for reporting this!hermes subcommands take arbitrary options under the -O argument. These have been logged in raw form since https://github.com/softwarepub/hermes/commit/7f64f102e916c76dc44404b77ab2a80f5a4e59b1 in:...

5.9CVSS5.9AI score0.00154EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/07 4:3 p.m.16 views

Chainlit contains an authorization bypass vulnerability

Chainlit versions prior to 2.8.5 contain an authorization bypass through user-controlled key vulnerability. If this vulnerability is exploited, threads may be viewed or thread ownership may be obtained by an attacker who can log in to the product...

4.2CVSS5.9AI score0.00217EPSS
SaveExploits0References9Affected Software1
PyPA
PyPA
added 2026/07/07 4:3 p.m.16 views

Marshmallow has DoS in Schema.load(many)

ImpactSchema.loaddata, many=True is vulnerable to denial of service attacks. A moderately sized request can consume a disproportionate amount of CPU time. Patches4.1.2, 3.26.2 Workaroundspy Fail fastdef loadmanyschema, data, kwargs: if not isinstancedata, list: raise ValidationError'Invalid input...

5.3CVSS5.9AI score0.00257EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 4:3 p.m.16 views

Langflow Missing Authentication on Critical API Endpoints

SummaryMultiple critical API endpoints in Langflow are missing authentication controls, allowing any unauthenticated user to access sensitive user conversation data, transaction histories, and perform destructive operations including message deletion. This affects endpoints handling personal data...

9.3CVSS6AI score0.34071EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/07/07 4:3 p.m.16 views

LangGraph Checkpoint affected by RCE in "json" mode of JsonPlusSerializer

SummaryPrior to langgraph-checkpoint version 3.0 , LangGraph’s JsonPlusSerializer used as the default serialization protocol for all checkpointing contains a remote code execution RCE vulnerability when deserializing payloads saved in the "json" serialization mode.If an attacker can cause your...

7.4CVSS6.9AI score0.00891EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/07 4:3 p.m.16 views

MLflow Weak Password Requirements Authentication Bypass Vulnerability

MLflow Weak Password Requirements Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of MLflow. Authentication is not required to exploit this vulnerability.The specific flaw exists within the handling of passwords. T...

9.8CVSS6AI score0.01474EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 4:3 p.m.16 views

mkdocs-include-markdown-plugin susceptible to unvalidated input colliding with substitution placeholders

ImpactCWE-20: Improper Input ValidationLow impact PatchesPatched in v7.1.8 commit https://github.com/mondeja/mkdocs-include-markdown-plugin/commit/7466d67aa0de8ffbc427204ad2475fed07678915 WorkaroundsNo...

6.5CVSS5.9AI score0.00318EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/07 4:3 p.m.16 views

SPDK is vulnerable to buffer overflow in the NVMe-oF target component

Storage Performance Development Kit SPDK 25.05 is vulnerable to Buffer Overflow in the NVMe-oF target component in SPDK - lib/nvmf...

5.5CVSS5.9AI score0.00305EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/07 4:3 p.m.16 views

LLaMA Factory's Chat API Contains Critical SSRF and LFI Vulnerabilities

Summary A Server-Side Request Forgery SSRF vulnerability in the chat API allows any authenticated user to force the server to make arbitrary HTTP requests to internal and external networks. This can lead to the exposure of sensitive internal services, reconnaissance of the internal network, or...

8.1CVSS6.1AI score0.0035EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
added 2026/07/07 4:3 p.m.16 views

DataChain Vulnerable to Deserialization of Untrusted Data from Environment Variables

The DataChain library reads serialized objects from environment variables such as DATACHAINMETASTORE and DATACHAINWAREHOUSE in the loader.py module. An attacker with the ability to set these environment variables can trigger code execution when the application loads...

2.5CVSS6.4AI score0.0015EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/07 4:3 p.m.16 views

NiceGUI has a Reflected XSS

SummaryA Cross-Site Scripting XSS risk exists in NiceGUI when developers render unescaped user input into the DOM using ui.html. Before version 3.0, NiceGUI does not enforce HTML or JavaScript sanitization, so applications that directly combine components like ui.input with ui.html without escapi...

6.1CVSS6.5AI score0.00188EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 4:3 p.m.16 views

ml-logger has path traversal in the file argument

A vulnerability was identified in geyang ml-logger 0.10.36 and prior. Affected by this vulnerability is the function loghandler of the file mllogger/server.py. Such manipulation of the argument File leads to path traversal. It is possible to launch the attack remotely. The exploit is publicly...

7.5CVSS5.8AI score0.00558EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/07 4:3 p.m.16 views

Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer

The huggingface/transformers library, versions prior to 4.53.0, is vulnerable to Regular Expression Denial of Service ReDoS in the AdamWeightDecay optimizer. The vulnerability arises from the douseweightdecay method, which processes user-controlled regular expressions in the includeinweightdecay...

7.5CVSS5.9AI score0.00467EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/07/07 4:3 p.m.16 views

Indico may disclose unauthorized user details access via legacy API

ImpactA legacy API to retrieve user details could be misused to retrieve profile details of other users without having admin permissions due to a broken access check. PatchesYou should to update to Indico 3.3.8 as soon as possible.See the docs for instructions on how to update. WorkaroundsIt is...

4.3CVSS6AI score0.00235EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 4:3 p.m.16 views

copyparty: Sharing a single file does not fully restrict access to other files in source folder

There was a missing permission-check in the shares feature the shr global-option.When a share is created for just one file inside a folder, it was possible to access the other files inside that folder by guessing the filenames.It was not possible to descend into subdirectories in this manner; onl...

7.5CVSS6AI score0.00344EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/07 4:3 p.m.16 views

Neo4j Cypher MCP server is vulnerable to DNS rebinding

ImpactDNS rebinding vulnerability in Neo4j Cypher MCP server allows malicious websites to bypass Same-Origin Policy protections and execute unauthorised tool invocations against locally running Neo4j MCP instances. The attack relies on the user being enticed to visit a malicious website and spend...

7.4CVSS6AI score0.00206EPSS
SaveExploits0References9Affected Software1
PyPA
PyPA
added 2026/07/07 4:3 p.m.16 views

Infrahub: Deleted and expired API tokens can still authenticate

ImpactA bug in the authentication logic will cause API tokens that were deleted and/or expired to be considered valid. This means that any API token that is associated with an active user account can authenticate successfully. PatchesThis issue is fixed in versions 1.3.9 and 1.4.5 WorkaroundsUser...

5.5CVSS5.9AI score0.00177EPSS
SaveExploits0References9Affected Software1
PyPA
PyPA
added 2026/07/07 4:3 p.m.16 views

Fides Webserver API is Vulnerable to OAuth Client Privilege Escalation

SummaryThe OAuth client creation and update endpoints of the Fides Webserver API do not properly authorize scope assignment. This allows highly privileged users with client:create or client:update permissions to escalate their privileges to owner-level. DetailsWhen creating or updating OAuth...

8.6CVSS6AI score0.0042EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/07 4:3 p.m.16 views

TkEasyGUI Affected by Uncontrolled Search Path Element Issue

Uncontrolled search path element issue exists in TkEasyGUI versions prior to v1.0.22. If this vulnerability is exploited, arbitrary code may be executed with the privilege of running the program...

8.5CVSS6.1AI score0.00163EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 4:3 p.m.16 views

Langchain Community Vulnerable to XML External Entity (XXE) Attacks

The langchain-ai/langchain project, specifically the EverNoteLoader component, is vulnerable to XML External Entity XXE attacks due to insecure XML parsing. The vulnerability arises from the use of etree.iterparse without disabling external entity references, which can lead to sensitive informati...

7.5CVSS5.9AI score0.01661EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/07 4:3 p.m.16 views

MobSF Vulnerable to Arbitrary File Write (AR-Slip) via Absolute Path in .a Extraction

SummaryThe vulnerability allows any user to overwrite any files available under the account privileges of the running process. DetailsAs part of static analysis, iOS MobSF supports loading and parsing statically linked libraries .a. When parsing such archives, the code extracts the embedded objec...

6.5CVSS6AI score0.006EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/07/07 4:3 p.m.16 views

Eventlet affected by HTTP request smuggling in unparsed trailers

ImpactThe Eventlet WSGI parser is vulnerable to HTTP Request Smuggling due to improper handling of HTTP trailer sections.This vulnerability could enable attackers to:- Bypass front-end security controls- Launch targeted attacks against active site users- Poison web caches PatchesProblem has been...

9.1CVSS5.7AI score0.00386EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/07 4:3 p.m.16 views

Picklescan is missing detection when calling built-in python ensurepip._run_pip

SummaryUsing ensurepip.runpip function, which is a built-in python library function to execute remote pickle file. DetailsThe attack payload executes in the following steps:First, the attacker craft the payload by calling to ensurepip.runpip function in reduce methodThen when the victim after...

8.1CVSS6.3AI score0.00638EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 4:3 p.m.16 views

PyPDF's Manipulated FlateDecode streams can exhaust RAM

ImpactAn attacker who uses this vulnerability can craft a PDF which leads to the RAM being exhausted. This requires just reading the file if a series of FlateDecode filters is used on a malicious cross-reference stream. Other content streams are affected on explicit access. PatchesThis has been...

8.7CVSS5.8AI score0.00437EPSS
SaveExploits0References9Affected Software1
PyPA
PyPA
added 2026/07/07 4:3 p.m.16 views

Copier's safe template has filesystem write access outside destination path

ImpactCopier suggests that it's safe to generate a project from a safe template, i.e. one that doesn't use unsafe features like custom Jinja extensions which would require passing the --UNSAFE,--trust flag. As it turns out, a safe template can currently write files outside the destination path...

6.9CVSS6AI score0.00262EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 4:3 p.m.16 views

SKOPS Card.get_model happily allows arbitrary code execution

SummaryThe Card class of skops, used for model documentation and sharing, allows arbitrary code execution. When a file other than .zip is provided to the Card class during instantiation, the internally invoked Card.getmodel method silently falls back to joblib without warning. Unlike the .skops...

8.4CVSS6.6AI score0.00212EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/07 4:2 p.m.16 views

Skops has Inconsistent Trusted Type Validation that Enables Hidden `operator` Methods Execution

SummaryAn inconsistency in OperatorFuncNode can be exploited to hide the execution of untrusted operator.xxx methods. This can then be used in a code reuse attack to invoke seemingly safe functions and escalate to arbitrary code execution with minimal and misleading trusted types.Note: This repor...

8.7CVSS6.7AI score0.00137EPSS
SaveExploits0References9Affected Software1
PyPA
PyPA
added 2026/07/07 4:2 p.m.16 views

Skops may allow MethodNode to access unexpected object fields through dot notation, leading to arbitrary code execution at load time

SummaryAn inconsistency in MethodNode can be exploited to access unexpected object fields through dot notation. This can be used to achieve arbitrary code execution at load time.While this issue may seem similar to https://github.com/skops-dev/skops/security/advisories/GHSA-m7f4-hrc6-fwg3, it is...

8.7CVSS6.6AI score0.00138EPSS
SaveExploits0References10Affected Software1
PyPA
PyPA
added 2026/07/07 4:2 p.m.16 views

Dagster Local File Inclusion vulnerability

Local File Inclusion in dagster.grpc.impl.getnotebookdata in Dagster 1.10.14 allows attackers with access to the gRPC server to read arbitrary files by supplying path traversal sequences in the notebookpath field of ExternalNotebookData requests, bypassing the intended extension-based check...

6.6CVSS6AI score0.00524EPSS
SaveExploits1References8Affected Software1
PyPA
PyPA
added 2026/07/07 4:2 p.m.16 views

LlamaIndex is vulnerable to Path Traversal attack through its ObsidianReader class

A vulnerability in the ObsidianReader class in LlamaIndex Readers Integration: Obsidian before version 0.5.1 from the run-llama/llamaindex repository versions 0.12.23 to 0.12.28 allows for arbitrary file read through symbolic links. The ObsidianReader fails to resolve symlinks to their real paths...

7.5CVSS6AI score0.00555EPSS
SaveExploits1References8Affected Software1
PyPA
PyPA
added 2026/07/07 4:2 p.m.16 views

Langchain-Chatchat vulnerable to path traversal

A vulnerability, which was classified as critical, has been found in chatchat-space Langchain-Chatchat up to 0.3.1. This issue affects some unknown processing of the file /v1/file. The manipulation of the argument flag leads to path traversal. The exploit has been disclosed to the public and may ...

8.8CVSS5.4AI score0.00565EPSS
SaveExploits1References8Affected Software1
PyPA
PyPA
added 2026/07/07 4:2 p.m.16 views

Transformers's Improper Input Validation vulnerability can be exploited through username injection

Hugging Face Transformers versions up to 4.49.0 are affected by an improper input validation vulnerability in the imageutils.py file. The vulnerability arises from insecure URL validation using the startswith method, which can be bypassed through URL username injection. This allows attackers to...

3.5CVSS5.9AI score0.00337EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/07/07 4:2 p.m.16 views

urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation

urllib3 handles redirects and retries using the same mechanism, which is controlled by the Retry object. The most common way to disable redirects is at the request level, as follows:pythonresp = urllib3.request"GET", "https://httpbin.org/redirect/1", redirect=Falseprintresp.status 302However, it ...

6.1CVSS6AI score0.00408EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/07/07 4:2 p.m.16 views

Salt's file contents overwrite the VirtKey class

File contents overwrite the VirtKey class is called when “on-demand pillar” data is requested and uses un-validated input to create paths to the “pki directory”. The functionality is used to auto-accept Minion authentication keys based on a pre-placed “authorization file” at a specific location a...

5.6CVSS6AI score0.00165EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/07 4:2 p.m.16 views

HKUDS LightRAG allows Path Traversal via function upload_to_input_dir

A vulnerability was found in HKUDS LightRAG up to 1.3.8. It has been declared as critical. Affected by this vulnerability is the function uploadtoinputdir of the file lightrag/api/routers/documentroutes.py of the component File Upload. The manipulation of the argument file.filename leads to path...

5.3CVSS5.4AI score0.00174EPSS
SaveExploits0References10Affected Software1
PyPA
PyPA
added 2026/07/07 4:2 p.m.16 views

protobuf-python has a potential Denial of Service issue

SummaryAny project that uses Protobuf pure-Python backend to parse untrusted Protocol Buffers data containing an arbitrary number of recursive groups, recursive messages or a series of SGROUP tags can be corrupted by exceeding the Python recursion limit.Reporter: Alexis Challande, Trail of Bits...

8.2CVSS6.1AI score0.00251EPSS
SaveExploits0References10Affected Software1
PyPA
PyPA
added 2026/07/07 4:2 p.m.16 views

Backend.AI Missing Authorization vulnerability

Missing Authorization in Lablup's BackendAI allows attackers to takeover all active sessions; Accessing, stealing, or altering any data accessible in the session. This vulnerability exists in all current versions of BackendAI.NOTE: The maintainers of BackendAI do not consider this report to fit...

8.1CVSS6AI score0.00286EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/07 4:2 p.m.16 views

OctoPrint vulnerable to possible file extraction via upload endpoints

ImpactOctoPrint versions up until and including 1.11.1 contain a vulnerability that allows an attacker with the FILEUPLOAD permission to exfiltrate files from the host that OctoPrint has read access to, by moving them into the upload folder where they then can be downloaded from.The primary risk...

5.4CVSS5.8AI score0.00256EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 4:2 p.m.16 views

Nautobot may allows uploaded media files to be accessible without authentication

ImpactFiles uploaded by users to Nautobot's MEDIAROOT directory, including DeviceType image attachments as well as images attached to a Location, Device, or Rack, are served to users via a URL endpoint that was not enforcing user authentication. As a consequence, such files can be retrieved by...

6.3CVSS5.9AI score0.00383EPSS
SaveExploits0References9Affected Software1
PyPA
PyPA
added 2026/07/07 4:2 p.m.16 views

Salt vulnerable to directory traversal attack in minion file cache creation

Directory traversal attack in minion file cache creation. The master's default cache is vulnerable to a directory traversal attack. Which could be leveraged to write or overwrite 'cache' files outside of the cache directory...

4.2CVSS5.9AI score0.00266EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/07 4:2 p.m.16 views

Gradio CORS Origin Validation Bypass Vulnerability

A vulnerability classified as problematic has been found in gradio-app gradio up to 5.29.1. This affects the function isvalidorigin of the component CORS Handler. The manipulation of the argument localhostaliases leads to origin validation error. It is possible to initiate the attack remotely. Th...

6.3CVSS4.4AI score0.00234EPSS
SaveExploits0References9Affected Software1
PyPA
PyPA
added 2026/07/07 4:2 p.m.16 views

Vyper's `slice()` may elide side-effects when output length is 0

Impactthe slice builtin can elide side effects when the output length is 0, and the source bytestring is a builtin msg.data or .code. the reason is that for these source locations, the check that length = 1 is...

6.3CVSS5.9AI score0.00424EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/07 4:2 p.m.16 views

Tornado vulnerable to excessive logging caused by malformed multipart form data

SummaryWhen Tornado's multipart/form-data parser encounters certain errors, it logs a warning but continues trying to parse the remainder of the data. This allows remote attackers to generate an extremely high volume of logs, constituting a DoS attack. This DoS is compounded by the fact that the...

7.5CVSS6AI score0.00713EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/07 4:2 p.m.16 views

Flask-AppBuilder open redirect vulnerability using HTTP host injection

ImpactFlask-AppBuilder prior to 4.6.2 would allow for a malicious unauthenticated actor to perform an open redirect by manipulating the Host header in HTTP requests. PatchesFlask-AppBuilder 4.6.2 introduced the FABSAFEREDIRECTHOSTS configuration variable, which allows administrators to explicitly...

6.1CVSS5.9AI score0.00203EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 4:2 p.m.16 views

Transformers Regular Expression Denial of Service (ReDoS) vulnerability

A Regular Expression Denial of Service ReDoS vulnerability was identified in the huggingface/transformers library, specifically in the file tokenizationgptneoxjapanese.py of the GPT-NeoX-Japanese model. The vulnerability occurs in the SubWordJapaneseTokenizer class, where regular expressions...

6.5CVSS5.9AI score0.00438EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
added 2026/07/07 4:2 p.m.16 views

Data exposure via ZeroMQ on multi-node vLLM deployment

ImpactIn a multi-node vLLM deployment, vLLM uses ZeroMQ for some multi-node communication purposes. The primary vLLM host opens an XPUB ZeroMQ socket and binds it to ALL interfaces. While the socket is always opened for a multi-node deployment, it is only used when doing tensor parallelism across...

7.5CVSS6.2AI score0.00569EPSS
SaveExploits1References8Affected Software1
PyPA
PyPA
added 2026/07/07 4:2 p.m.16 views

LLaMA-Factory Allows Arbitrary Code Execution via Unsafe Deserialization in Ilamafy_baichuan2.py

DescriptionA critical vulnerability exists in the llamafybaichuan2.py script of the LLaMA-Factory project. The script performs insecure deserialization using torch.load on user-supplied .bin files from an input directory. An attacker can exploit this behavior by crafting a malicious .bin file tha...

7.8CVSS6.3AI score0.00265EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/07/07 4:2 p.m.16 views

phi4mm: Quadratic Time Complexity in Input Token Processing​ leads to denial of service

SummaryA critical performance vulnerability has been identified in the input preprocessing logic of the multimodal tokenizer. The code dynamically replaces placeholder tokens e.g., , with repeated tokens based on precomputed lengths. Due to ​​inefficient list concatenation operations​​, the...

7.5CVSS5.9AI score0.00486EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.16 views

Aim Uncontrolled Resource Consumption vulnerability

In version 3.25.0 of aimhubio/aim, the tracking server is vulnerable to a denial of service attack. The server overrides the maximum size for websocket messages, allowing very large images to be tracked. This causes the server to become unresponsive to other requests while processing the large...

7.5CVSS5.9AI score0.0059EPSS
SaveExploits1References5Affected Software1
Total number of security vulnerabilities5000