Lucene search
+L
PypaMost viewed

7218 matches found

PyPA
PyPA
added 2026/07/07 2:34 p.m.15 views

aiohttp allows request smuggling due to incorrect parsing of chunk extensions

SummaryThe Python parser parses newlines in chunk extensions incorrectly which can lead to request smuggling vulnerabilities under certain conditions. ImpactIf a pure Python version of aiohttp is installed i.e. without the usual C extensions or AIOHTTPNOEXTENSIONS is enabled, then an attacker may...

7.5CVSS6AI score0.00576EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.15 views

aiohttp has a memory leak when middleware is enabled when requesting a resource with a non-allowed method

SummaryA memory leak can occur when a request produces a MatchInfoError. This was caused by adding an entry to a cache on each request, due to the building of each MatchInfoError producing a unique cache entry. ImpactIf the user is making use of any middlewares with aiohttp.web then it is advisab...

8.7CVSS5.9AI score0.00563EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.15 views

django CMS Attributes Field Cross-site Scripting

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in django CMS Association django CMS Attributes Fields allows Stored XSS.This issue affects django CMS Attributes Fields: before 4.0...

6.9CVSS5.9AI score0.00462EPSS
SaveExploits0References10Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.15 views

libre-chat Path Traversal vulnerability

An issue in the uploaddocuments method of libre-chat v0.0.6 allows attackers to execute a path traversal via supplying a crafted filename in an uploaded file...

9.1CVSS6.1AI score0.00762EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.15 views

Tornado has an HTTP cookie parsing DoS vulnerability

The algorithm used for parsing HTTP cookies in Tornado versions prior to 6.4.2 sometimes has quadratic complexity, leading to excessive CPU consumption when parsing maliciously-crafted cookie headers. This parsing occurs in the event loop thread and may block the processing of other requests.See...

7.5CVSS5.9AI score0.01051EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.15 views

Ansible-Core vulnerable to content protections bypass

A flaw was found in Ansible-Core. This vulnerability allows attackers to bypass unsafe content protections using the hostvars object to reference and execute templated content. This issue can lead to arbitrary code execution if remote data or module outputs are improperly templated within playboo...

5.5CVSS6.6AI score0.00502EPSS
SaveExploits0References15Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.15 views

Salt preflight script could be attacker controlled

The Salt-SSH pre-flight option copies the script to the target at a predictable path, which allows an attacker to force Salt-SSH to run their script. If an attacker has access to the target VM and knows the path to the pre-flight script before it runs they can ensure Salt-SSH runs their script wi...

6.7CVSS6AI score0.00187EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.15 views

Langflow vulnerable to remote code execution

langflow =1.0.18 is vulnerable to Remote Code Execution RCE as any component provided the code functionality and the components run on the local machine rather than in a sandbox...

9.8CVSS6.1AI score0.01318EPSS
SaveExploits2References7Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.15 views

vLLM Denial of Service via the best_of parameter

A vulnerability was found in the ilab model serve component, where improper handling of the bestof parameter in the vllm JSON web API can lead to a Denial of Service DoS. The API used for LLM-based sentence or chat completion accepts a bestof parameter to return the best completion from several...

6.9CVSS5.8AI score0.00231EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.15 views

Guardrails has an arbitrary code execution vulnerability

An arbitrary code execution vulnerability exists in versions 0.2.9 up to 0.5.10 of the Guardrails AI Guardrails framework because of the way it validates XML files. If a victim user loads a maliciously crafted XML file containing Python code, the code will be passed to an eval function, causing i...

8.8CVSS6.6AI score0.00375EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.15 views

sqlitedict insecure deserialization vulnerability

Insecure deserialization in sqlitedict up to v2.1.0 allows attackers to execute arbitrary code...

9.8CVSS6.1AI score0.00886EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.15 views

Timing-Based Username Enumeration Vulnerability in Fides Webserver Authentication

A timing-based username enumeration vulnerability has been identified in Fides Webserver authentication. This vulnerability allows an unauthenticated attacker to determine the existence of valid usernames by analyzing the time it takes for the server to respond to login requests. The discrepancy ...

5.3CVSS5.9AI score0.00552EPSS
SaveExploits1References5Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.15 views

Khoj Vulnerable to Stored Cross-site Scripting In Automate (Preview feature)

SummaryThe Automation feature allows a user to insert arbitrary HTML inside the task instructions, resulting in a Stored XSS. DetailsThe q parameter for the /api/automation endpoint does not get correctly sanitized when rendered on the page, resulting in the ability of users to inject arbitrary...

5.4CVSS6AI score0.0055EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.15 views

CKAN may leak Solr credentials via error message in package_search action

If there were connection issues with the Solr server, the internal Solr URL potentially including credentials could be leaked to packagesearch calls as part of the returned error message PatchesThis has been patched in CKAN 2.10.5 and 2.11.0...

6.9CVSS5.8AI score0.00377EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.15 views

ops leaking secrets if `subprocess.CalledProcessError` happens with a `secret-*` CLI command

SummaryThe issue here is that we pass the secret content as one of the args via CLI. This issue may affect any of our charms that are using: Juju =3.0, Juju secrets and not correctly capturing and processing subprocess.CalledProcessError.There are two points that may log this command, in differen...

6.9CVSS5.9AI score0.00198EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.15 views

Ankitects Anki arbitrary script execution vulnerability

An arbitrary script execution vulnerability exists in the MPV functionality of Ankitects Anki 24.04. A specially crafted flashcard can lead to a arbitrary code execution. An attacker can send malicious flashcard to trigger this vulnerability...

9.6CVSS6.4AI score0.15067EPSS
SaveExploits1References8Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.15 views

Apache Superset vulnerable to improper SQL authorization

An SQL Injection vulnerability in Apache Superset exists due to improper neutralization of special elements used in SQL commands. Specifically, certain engine-specific functions are not checked, which allows attackers to bypass Apache Superset's SQL authorization. To mitigate this, a new...

9.8CVSS6AI score0.04433EPSS
SaveExploits2References7Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.15 views

Weblate vulnerable to improper sanitization of project backups

ImpactWeblate didn't correctly validate filenames when restoring project backup. It may be possible to gain unauthorized access tofiles on the server using a crafted ZIP file. PatchesThis issue has been addressed in Weblate 5.6.2 via...

5.4CVSS5.9AI score0.00315EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.15 views

lollms vulnerable to path traversal due to unauthenticated root folder settings change

A path traversal vulnerability exists in the XTTS server included in the lollms package, version v9.6. This vulnerability arises from the ability to perform an unauthenticated root folder settings change. Although the read file endpoint is protected against path traversals, this protection can be...

8.6CVSS7.3AI score0.00644EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.15 views

h2o vulnerable to unexpected POST request shutting down server

In h2oai/h2o-3 version 3.46.0, the runtool command in the rapids component allows the main function of any class under the water.tools namespace to be called. One such class, MojoConvertTool, crashes the server when invoked with an invalid argument, causing a denial of service...

7.5CVSS7AI score0.00787EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.15 views

TinyMCE Cross-Site Scripting (XSS) vulnerability using noneditable_regexp option

ImpactA cross-site scripting XSS vulnerability was discovered in TinyMCE’s content extraction code. When using the noneditableregexp option, specially crafted HTML attributes containing malicious code were able to be executed when content was extracted from the editor. PatchesThis vulnerability h...

6.1CVSS5.9AI score0.00529EPSS
SaveExploits0References11Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.15 views

document-merge-service vulnerable to Remote Code Execution via Server-Side Template Injection

ImpactWhat kind of vulnerability is it? Who is impacted?A remote code execution RCE via server-side template injection SSTI allows for user supplied code to be executed in the server's context where it is executed as the document-merge-server user with the UID 901 thus giving an attacker...

7.2CVSS6.5AI score0.01031EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.15 views

ydata unsafe deserialization

Deseriliazation of untrusted data can occur in versions 3.7.0 or newer of Ydata's ydata-profiling open-source library, enabling a maliciously crafted dataset to run arbitrary code on an end user's system when loaded...

7.8CVSS7.4AI score0.00239EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.15 views

ydata unsafe deserialization

Deserialization of untrusted data can occur in versions 3.7.0 or newer of Ydata's ydata-profiling open-source library, enabling a malicously crafted report to run arbitrary code on an end user's system when loaded...

7.8CVSS6.3AI score0.00239EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.15 views

Undefined Behavior in mlflow

A vulnerability in mlflow/mlflow version 2.11.1 allows attackers to create multiple models with the same name by exploiting URL encoding. This flaw can lead to Denial of Service DoS as an authenticated user might not be able to use the intended model, as it will open a different model each time...

5.4CVSS5.9AI score0.00438EPSS
SaveExploits1References5Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.15 views

ydata cross-site scripting

A cross-site scripting XSS vulnerability in versions 3.7.0 or newer of Ydata's ydata-profiling open-source library allows for payloads to be run when a maliocusly crafted report is viewed in the browser...

7.8CVSS5.8AI score0.00321EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.15 views

path traversal vulnerability was identified in the parisneo/lollms-webui

A path traversal vulnerability was identified in the parisneo/lollms-webui repository, specifically within version 9.6. The vulnerability arises due to improper handling of user-supplied input in the 'listpersonalities' endpoint. By crafting a malicious HTTP request, an attacker can traverse the...

4CVSS6.1AI score0.00285EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.15 views

Improper Handling of Insufficient Permissions in `wagtail.contrib.settings`

ImpactDue to an improperly applied permission check in the wagtail.contrib.settings module, a user with access to the Wagtail admin and knowledge of the URL of the edit view for a settings model can access and update that setting, even when they have not been granted permission over the model. Th...

5.5CVSS6.1AI score0.0033EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.15 views

NASA AIT-Core uses unencrypted channels to exchange data over the network

NASA AIT-Core v2.5.2 was discovered to use unencrypted channels to exchange data over the network, allowing attackers to execute a man-in-the-middle attack...

7.3CVSS6AI score0.00546EPSS
SaveExploits1References5Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.15 views

Apache Superset Incorrect Authorization vulnerability

An authenticated user could potentially access metadata for a datasource they are not authorized to view by submitting a targeted REST API request. This issue affects Apache Superset before 3.1.2.Users are recommended to upgrade to version 3.1.2 or above, which fixes the issue...

4.3CVSS6AI score0.00699EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.15 views

litellm passes untrusted data to `eval` function without sanitization

A remote code execution RCE vulnerability exists in the berriai/litellm project due to improper control of the generation of code when using the eval function unsafely in the litellm.getsecret method. Specifically, when the server utilizes Google KMS, untrusted data is passed to the eval function...

9.8CVSS6.6AI score0.00876EPSS
SaveExploits0References10Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.15 views

Nautobot's BANNER_* configuration can be used to inject arbitrary HTML content into Nautobot pages

ImpactA Nautobot user with admin privileges can modify the BANNERTOP, BANNERBOTTOM, and BANNERLOGIN configuration settings via the /admin/constance/config/ endpoint. Normally these settings are used to provide custom banner text at the top and bottom of all Nautobot web pages or specifically on t...

7.5CVSS5.9AI score0.00606EPSS
SaveExploits1References9Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.15 views

aiohttp vulnerable to Denial of Service when trying to parse malformed POST requests

SummaryAn attacker can send a specially crafted POST multipart/form-data request. When the aiohttp server processes it, the server will enter an infinite loop and be unable to process any further requests. ImpactAn attacker can stop the application from serving requests after sending a single...

7.5CVSS6AI score0.01094EPSS
SaveExploits0References10Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.15 views

Improper Certificate Validation vulnerability in Apache Airflow FTP Provider

Improper Certificate Validation vulnerability in Apache Airflow FTP Provider.The FTP hook lacks complete certificate validation in FTPTLS connections, which can potentially be leveraged. Implementing proper certificate validation by passing context=ssl.createdefaultcontext during FTPTLS...

2.7CVSS5.9AI score0.00626EPSS
SaveExploits0References9Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.15 views

OpenStack Storlets arbitrary code execution vulnerability

An issue in OpenStack Storlets yoga-eom allows a remote attacker to execute arbitrary code via the gateway.py component...

7.8CVSS6.4AI score0.00892EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.15 views

mlflow vulnerable to Path Traversal

A path traversal vulnerability exists in the mlflow/mlflow repository, specifically within the artifact deletion functionality. Attackers can bypass path validation by exploiting the double decoding process in the deleteartifactmlflowartifacts handler and localfileuritopath function, allowing for...

8.1CVSS7.2AI score0.00856EPSS
SaveExploits1References5Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.15 views

Mobile Security Framework (MobSF) vulnerable to SSRF in firebase database check

ImpactWhat kind of vulnerability is it? Who is impacted?SSRF vulnerability in firebase database check logic. The attacker can cause the server to make a connection to internal-only services within the organization’s infrastructure. When malicious app is uploaded to Static analyzer, it is possible...

6.3CVSS6.6AI score0.0051EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.15 views

DIRAC: Unauthorized users can read proxy contents during generation

ImpactDuring the proxy generation process e.g., when using dirac-proxy-init it is possible for unauthorized users on the same machine to gain read access to the proxy. This allows the user to then perform any action that is possible with the original proxy.This vulnerability only exists for a sho...

8.1CVSS5.9AI score0.00317EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.15 views

ansys-geometry-core OS Command Injection vulnerability

subprocess call with shell=True identified, security issue. CodeOn file src/ansys/geometry/core/connection/productinstance.py:403 def startprogramargs: Liststr, localenv: Dictstr, str - subprocess.Popen:404 """405 Start the program where the path is the first item of the args array argument.40640...

7.8CVSS5.9AI score0.00334EPSS
SaveExploits1References11Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.15 views

Mezzanine allows attackers to bypass access controls via manipulating the Host header

An issue in Mezzanine v6.0.0 allows attackers to bypass access controls via manipulating the Host header...

9.1CVSS6AI score0.00874EPSS
SaveExploits2References7Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.15 views

Docassemble open redirect

ImpactIt is possible to create a URL that acts as an open redirect. PatchesThe vulnerability has been patched in version 1.4.97 of the master branch. The Docker image on docker.io has been patched. WorkaroundsIf upgrading is not possible, manually apply the changes of 4801ac7 and restart the serv...

6.1CVSS6.3AI score0.00411EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.15 views

langchain Server-Side Request Forgery vulnerability

With the following crawler configuration:pythonfrom bs4 import BeautifulSoup as Soupurl = "https://example.com"loader = RecursiveUrlLoader url=url, maxdepth=2, extractor=lambda x: Soupx, "html.parser".text docs = loader.loadAn attacker in control of the contents of https://example.com could place...

8.1CVSS6.3AI score0.00517EPSS
SaveExploits1References9Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.15 views

Apache Superset uncontrolled resource consumption

Uncontrolled resource consumption can be triggered by authenticated attacker that uploads a malicious ZIP to import database, dashboards or datasets.This vulnerability exists in Apache Superset versions up to and including 2.1.2 and versions 3.0.0, 3.0.1...

6.5CVSS6.5AI score0.01653EPSS
SaveExploits0References10Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.15 views

Fides Webserver Vulnerable to SVG Bomb File Uploads

ImpactThe Fides webserver is vulnerable to a type of Denial of Service DoS attack. Attackers can exploit this vulnerability to upload zip files containing malicious SVG bombs similar to a billion laughs attack, causing resource exhaustion in Admin UI browser tabs and creating a persistent denial ...

4.9CVSS5.9AI score0.00698EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.15 views

Reportlab vulnerable to remote code execution

Reportlab up to and including v3.6.12 allows attackers to execute arbitrary code via supplying a crafted PDF file...

7.8CVSS7.2AI score0.02123EPSS
SaveExploits6References9Affected Software1
PyPA
PyPA
added 2026/07/07 10:17 a.m.15 views

Open redirect in web2py

Open redirect vulnerability exists in web2py versions prior to 2.23.1. When using the tool, a web2py user may be redirected to an arbitrary website by accessing a specially crafted URL. As a result, the user may become a victim of a phishing attack...

6.1CVSS6.3AI score0.02382EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
added 2026/07/07 10:17 a.m.15 views

Saleor Unauthenticated Information Disclosure Vulnerability via Python Exceptions

ImpactSome internal Python exceptions are not handled properly and thus are returned in API as error messages. Some messages might contain sensitive information like infrastructure details in unauthenticated requests.Affected versions: Saleor ≥ 2.0.0 WorkaroundsNone For more informationIf you hav...

5.3CVSS6.2AI score0.00751EPSS
SaveExploits0References11Affected Software1
PyPA
PyPA
added 2026/07/07 10:17 a.m.15 views

Improper Certificate Validation in pyload-ng

Improper Certificate Validation in GitHub repository pyload/pyload prior to 0.5.0b3.dev44...

7.4CVSS7AI score0.00526EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
added 2026/07/07 10:17 a.m.15 views

pymatgen is vulnerable to Regular Expression Denial of Service (ReDoS)

An exponential ReDoS Regular Expression Denial of Service can be triggered in the pymatgen PyPI package, when an attacker is able to supply arbitrary input to the GaussianInput.fromstring method...

7.5CVSS7.2AI score0.00816EPSS
SaveExploits1References8Affected Software1
PyPA
PyPA
added 2026/07/07 10:17 a.m.15 views

Segfault via invalid attributes in `pywrap_tfe_src.cc`

ImpactIf a list of quantized tensors is assigned to an attribute, the pywrap code fails to parse the tensor and returns a nullptr, which is not caught. An example can be seen in tf.compat.v1.extractvolumepatches by passing in quantized tensors as input ksizes.pythonimport numpy as npimport...

7.5CVSS7AI score0.00404EPSS
SaveExploits1References7Affected Software1
Total number of security vulnerabilities5000