Lucene search
+L
PypaMost viewed

7218 matches found

PyPA
PyPA
added 2026/06/29 11:50 a.m.15 views

llm CLI tool contains a code injection vulnerability via `--functions` command-line argument

The llm CLI tool thru 0.27.1 contains a critical code injection vulnerability via its --functions command-line argument. This argument is intended to allow users to provide custom Python function definitions. However, the tool directly executes the provided code using the unsafe exec function...

9.8CVSS6.5AI score0.00327EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.15 views

Remote Code Execution due to Full Controled File Write in mlflow

The mlflow web server includes tools for tracking experiments, packaging code into reproducible runs, and sharing and deploying models. As this vulnerability allows to write / overwrite any file on the file system, it gives a lot of ways to archive code execution like overwriting /home//.bashrc. ...

10CVSS7.6AI score0.47594EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.15 views

Buffer overflow in sponge queue functions

ImpactThe Keccak sponge function interface accepts partial inputs to be absorbed and partial outputs to be squeezed. A buffer can overflow when partial data with some specific sizes are queued, where at least one of them has a length of 2^32 - 200 bytes or more. PatchesYes, see commit fdc6fef0...

9.8CVSS7AI score0.05414EPSS
SaveExploits1References24Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.15 views

TensorFlow has a heap out-of-buffer read vulnerability in the QuantizeAndDequantize operation

ImpactAttackers using Tensorflow can exploit the vulnerability. They can access heap memory which is not in the control of user, leading to a crash or RCE.When axis is larger than the dim of input, c-Diminput,axis goes out of bound.Same problem occurs in the QuantizeAndDequantizeV2/V3/V4/V4Grad...

9.8CVSS6.7AI score0.00831EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.15 views

qdrant input validation failure

qdrant/qdrant version 1.9.0-dev is vulnerable to arbitrary file read and write during the snapshot recovery process. Attackers can exploit this vulnerability by manipulating snapshot files to include symlinks, leading to arbitrary file read by adding a symlink that points to a desired file on the...

9.8CVSS7.3AI score0.00901EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.15 views

Arbitrary Code Execution in Pillow

Pillow through 10.1.0 allows PIL.ImageMath.eval Arbitrary Code Execution via the environment parameter, a different vulnerability than CVE-2022-22817 which was about the expression parameter...

9.8CVSS6.9AI score0.03399EPSS
SaveExploits0References12Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.15 views

llama-index-core Command Injection vulnerability

A command injection vulnerability exists in the run-llama/llamaindex repository, specifically within the safeeval function. Attackers can bypass the intended security mechanism, which checks for the presence of underscores in code generated by LLM, to execute arbitrary code. This is achieved by...

9.8CVSS8AI score0.02862EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.15 views

pyLoad allows upload to arbitrary folder lead to RCE

SummaryAn authenticated user can change the download folder and upload a crafted template to the specified folder lead to remote code execution Detailsexample version: 0.5file:src/pyload/webui/app/blueprints/[email protected]"/render/", endpoint="render"def renderfilename: mimetype =...

9.1CVSS7.5AI score0.01354EPSS
SaveExploits1References5Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.15 views

NASA AIT-Core vulnerable to SQL Injection

NASA AIT-Core v2.5.2 was discovered to contain multiple SQL injection vulnerabilities via the querypackets and insert functions...

9.8CVSS6AI score0.00603EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.15 views

BentoML SSRF Vulnerability in File Upload Processing

DescriptionThere's an SSRF in the file upload processing system that allows remote attackers to make arbitrary HTTP requests from the server without authentication. The vulnerability exists in the serialization/deserialization handlers for multipart form data and JSON requests, which automaticall...

9.9CVSS7.4AI score0.11883EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.15 views

AgentScope Deserialization Vulnerability

A vulnerability in the RpcAgentServerLauncher class of modelscope/agentscope v0.0.6a3 allows for remote code execution RCE via deserialization of untrusted data using the dill library. The issue occurs in the AgentServerServicer.createagent method, where serialized input is deserialized using...

9.8CVSS8AI score0.01631EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.15 views

OpenStack Object Storage (swift) Code Injection vulnerability

OpenStack Object Storage swift before 1.7.0 uses the loads function in the pickle Python module unsafely when storing and loading metadata in memcached, which allows remote attackers to execute arbitrary code via a crafted pickle object...

9.8CVSS7.6AI score0.06518EPSS
SaveExploits0References19Affected Software1
PyPA
PyPA
added 2026/06/24 6:17 p.m.15 views

PYSEC-2026-2143

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. Prior to 2.91.0, the EasyOCR model download functionality extracted ZIP archives without validating member paths, enabling Zip Slip attacks. If an attacker could compromi...

8.3CVSS6.6AI score0.00472EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/06/21 2:16 p.m.15 views

PYSEC-2026-245

picklescan before 0.0.28 fails to detect malicious pickle files that invoke torch.utils.configmodule.loadconfig function within reduce methods. Attackers can craft pickle files embedding arbitrary code that evades detection but executes during pickle.load, enabling remote code execution in supply...

8.1CVSS6.5AI score0.00397EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
added 2026/06/17 8:17 p.m.15 views

PYSEC-2026-2280

Starlette is a lightweight ASGI framework/toolkit. In versions 1.0.1 and below, when dispatching a request, HTTPEndpoint selects the handler by lowercasing the HTTP method and looking it up as an attribute with getattr, without restricting the lookup to a known set of HTTP verbs. When an...

5.3CVSS6AI score0.00213EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2026/06/04 12:16 p.m.15 views

PYSEC-2026-195

A flaw has been found in MLflow up to 3.10.0. This issue affects the function mlflow.data.digestutils of the file mlflow/data/digestutils.py of the component Dataset Digest Computation. This manipulation causes use of weak hash. It is possible to launch the attack on the local host. The attack is...

3.6CVSS4.7AI score0.00103EPSS
SaveExploits1References8Affected Software1
PyPA
PyPA
added 2026/06/01 9:16 a.m.15 views

PYSEC-0000-CVE-2026-45426

Exploitation requires the attacker to already be an authenticated Airflow worker holding a valid Log-server JWT issued for at least one Dag. Apache Airflow's Log server authorized JWT tokens against Dag IDs by applying Python's str.lstrip to the requested path segment when verifying the JWT's sub...

3.1CVSS5.8AI score0.00358EPSS
SaveExploits0References3Affected Software1
PyPA
PyPA
added 2026/06/01 9:16 a.m.16 views

PYSEC-2026-183

A bug in Apache Airflow's bulk Task Instances API PATCH/DELETE /api/v2/dags/dagid/dagRuns/dagrunid/taskInstances evaluated authorization against the dagid resolved from the URL path while operating on the dagid / dagrunid extracted from request-body entity fields. An authenticated UI/API user wit...

7.5CVSS5.8AI score0.00476EPSS
SaveExploits0References4Affected Software1
PyPA
PyPA
added 2026/06/01 9:16 a.m.15 views

PYSEC-0000-CVE-2026-42252

Apache Airflow's official documentation at core-concepts/dag-run.html "Passing Parameters when triggering Dags" showed a verbatim BashOperatorbashcommand="echo value: dagrun.conf'conf1' " example without any quoting / sanitization warning. Dag authors who copied the pattern verbatim into...

9.1CVSS5.8AI score0.00383EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2026/06/01 9:16 a.m.15 views

PYSEC-0000-CVE-2026-42359

A bug in Apache Airflow's XCom PATCH endpoint PATCH /api/v2/xcomEntries/key allowed an authenticated UI/API user with XCom write permission on a Dag to set XCom entries under reserved key names e.g. returnvalue that the matching POST endpoint already validated against FORBIDDENXCOMKEYS. The...

8.8CVSS5.8AI score0.00571EPSS
SaveExploits0References3Affected Software1
PyPA
PyPA
added 2026/06/01 8:16 a.m.15 views

PYSEC-0000-CVE-2026-45192

A bug in the GET /api/v2/connections/connectionid REST API endpoint in Apache Airflow allowed an authenticated UI/API user with Connection-read permission to retrieve secrets stored in a Connection's extra JSON blob under field names not present in the redaction allowlist DEFAULTSENSITIVEFIELDS —...

6.5CVSS5.8AI score0.00425EPSS
SaveExploits0References3Affected Software1
PyPA
PyPA
added 2026/05/27 8:16 p.m.15 views

PYSEC-0000-CVE-2026-44681

Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.6.12 and 1.7.1, an unauthenticated open redirect in Authlib's OpenIDImplicitGrant and OpenIDHybridGrant authorization endpoint lets a remote attacker cause the authorization server to issue an HTTP 302 to an...

6.1CVSS5.8AI score0.00249EPSS
SaveExploits1References1Affected Software1
PyPA
PyPA
added 2026/05/27 6:16 p.m.15 views

PYSEC-2026-189

BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.39, src/bentoml/internal/container/frontend/dockerfile/templates/basev2.j2 interpolates docker.baseimage raw with no escaping, newline filtering, or validation. A malicious...

8.8CVSS5.9AI score0.00317EPSS
SaveExploits1References1Affected Software1
PyPA
PyPA
added 2026/05/27 5:16 p.m.15 views

PYSEC-0000-CVE-2026-44353

Streamlink is a CLI utility which pipes video streams from various services into a video player. Prior to 8.4.0, Streamlink's HLS and DASH parsers do not validate the URI scheme of segment entries and other resources. A remote .m3u8 HLS playlist or .mpd DASH manifest can list file:///path/to/file...

6.5CVSS5.8AI score0.00345EPSS
SaveExploits1References1Affected Software1
PyPA
PyPA
added 2026/05/13 10:16 p.m.15 views

PYSEC-2026-2259

PlaywrightCapture is a simple replacement for splash using playwright. Prior to 1.39.6, PlaywrightCapture did not sufficiently restrict navigations and resource requests initiated by rendered pages. An attacker-controlled page could abuse browser-side redirection mechanisms, such as...

8.7CVSS6.1AI score0.00319EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2026/04/21 6:16 p.m.15 views

PYSEC-2026-125

pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev98, the setsessioncookiesecure beforerequest handler in src/pyload/webui/app/init.py reads the X-Forwarded-Proto header from any HTTP request without validating that the request originates from a trusted prox...

4.8CVSS5.8AI score0.00171EPSS
SaveExploits1References1Affected Software1
PyPA
PyPA
added 2026/04/18 7:16 a.m.15 views

PYSEC-2026-13

Dag Authors, who normally should not be able to execute code in the webserver context could craft XCom payload causing the webserver to execute arbitrary code. Since Dag Authors are already highly trusted, severity of this issue is Low.Users are recommended to upgrade to Apache Airflow 3.2.0, whi...

7.2CVSS6.1AI score0.00822EPSS
SaveExploits0References3Affected Software1
PyPA
PyPA
added 2026/04/15 7:16 p.m.15 views

PYSEC-2026-155

Weblate is a web based localization tool. In versions prior to 5.17, the user patching API endpoint didn't properly limit the scope of edits. This issue has been fixed in version 5.17...

8.8CVSS5.7AI score0.00391EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2026/04/07 10:16 p.m.15 views

PYSEC-2026-59

Emmett is a full-stack Python web framework designed with simplicity. From 2.5.0 to before 2.8.1, the RSGI static handler for Emmett's internal assets /emmett paths is vulnerable to path traversal attacks. An attacker can use ../ sequences eg /emmett/../rsgi/handlers.py to read arbitrary files...

9.1CVSS5.9AI score0.00495EPSS
SaveExploits0References1Affected Software1
PyPA
PyPA
added 2026/04/07 3:17 p.m.15 views

PYSEC-2026-52

An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30.Add permissions on inline model instances were not validated on submission offorged POST data in GenericInlineModelAdmin.Earlier, unsupported Django series such as 5.0.x, 4.1.x, and 3.2.x were not evaluated and...

9.8CVSS5.8AI score0.00458EPSS
SaveExploits0References4Affected Software1
PyPA
PyPA
added 2026/03/25 5:16 p.m.15 views

PYSEC-2026-2275

Requests is a HTTP library. Prior to version 2.33.0, the requests.utils.extractzippedpaths utility function uses a predictable filename when extracting files from zip archives into the system temporary directory. If the target file already exists, it is reused without validation. A local attacker...

5.5CVSS6.1AI score0.00182EPSS
SaveExploits0References3Affected Software1
PyPA
PyPA
added 2026/03/17 11:16 a.m.15 views

PYSEC-2026-14

Apache Airflow versions 3.0.0 through 3.1.7FastAPI DagVersion listing API does not apply per-DAG authorization filtering when the request is made with dagid set to "" wildcard for all DAGs. As a result, version metadata of DAGs that the requester is not authorized to access is returned.Users are...

6.5CVSS5.8AI score0.00406EPSS
SaveExploits0References4Affected Software1
PyPA
PyPA
added 2026/02/24 6:29 p.m.15 views

PYSEC-2026-2232

NiceGUI is a Python-based UI framework. Prior to version 3.8.0, several NiceGUI APIs that execute methods on client-side elements Element.runmethod, AgGrid.rungridmethod, EChart.runchartmethod, and others use an eval fallback in the JavaScript-side runMethod function. When user-controlled input i...

6.1CVSS6.2AI score0.00163EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2026/02/13 12:16 p.m.15 views

PYSEC-2026-26

Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Avro Java SDK when generating specific records from untrusted Avro schemas.This issue affects Apache Avro Java SDK: all versions through 1.11.4 and version1.12.0.Users are recommended to upgrade to version 1.12.1 or...

7.3CVSS7.2AI score0.00602EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2026/02/09 11:16 a.m.15 views

PYSEC-2026-12

Apache Airflow versions 3.0.0 - 3.1.7, has vulnerability that allows authenticated UI users with permission to one or more specific Dags to view import errors generated by other Dags they did not have access to. Users are advised to upgrade to 3.1.7 or later, which resolves this issue...

6.5CVSS5.8AI score0.00739EPSS
SaveExploits0References4Affected Software1
PyPA
PyPA
added 2026/02/09 11:16 a.m.15 views

PYSEC-2026-11

Apache Airflow versions 3.1.0 through 3.1.6 contain an authorization flaw that can allow an authenticated user with custom permissions limited to task access to view task logs without having task log access. Users are recommended to upgrade to Apache Airflow 3.1.7 or later, which resolves this...

6.5CVSS5.8AI score0.00382EPSS
SaveExploits0References4Affected Software1
PyPA
PyPA
added 2026/02/03 3:16 p.m.15 views

PYSEC-2026-47

An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28..QuerySet.orderby is subject to SQL injection in column aliases containing periods when the same alias is, using a suitably crafted dictionary, with dictionary expansion, used in FilteredRelation.Earlier,...

5.4CVSS7.3AI score0.00802EPSS
SaveExploits1References4Affected Software1
PyPA
PyPA
added 2026/01/30 11:16 p.m.15 views

PYSEC-2026-114

OpenCTI 3.3.1 is vulnerable to a directory traversal attack via the static/css endpoint. An unauthenticated attacker can read arbitrary files from the filesystem by sending crafted GET requests with path traversal sequences e.g., '../' in the URL. For example, requesting...

7.5CVSS7.4AI score0.0098EPSS
SaveExploits1References4Affected Software1
PyPA
PyPA
added 2026/01/28 6:16 p.m.15 views

PYSEC-2026-136

Tendenci 12.3.1 contains a CSV formula injection vulnerability in the contact form message field that allows attackers to inject malicious formulas during export. Attackers can submit crafted payloads like '=10+20+cmd|' /C calc'!A0' in the message field to trigger arbitrary command execution when...

9.8CVSS6AI score0.10683EPSS
SaveExploits1References5Affected Software1
PyPA
PyPA
added 2026/01/22 5:16 p.m.15 views

PYSEC-2026-107

The orjson.dumps function in orjson thru 3.11.4 does not limit recursion for deeply nested JSON documents...

7.5CVSS5.8AI score0.0055EPSS
SaveExploits1References3Affected Software1
PyPA
PyPA
added 2026/01/12 11:15 p.m.15 views

PYSEC-2026-85

LlamaIndex run-llama/llamaindex versions up to and including 0.11.6 contain an unsafe deserialization vulnerability in BGEM3Index.loadfromdisk in llamaindex/indices/managed/bgem3/base.py. The function uses pickle.load to deserialize multiembedstore.pkl from a user-supplied persistdir without...

8.4CVSS6.3AI score0.00274EPSS
SaveExploits1References4Affected Software1
PyPA
PyPA
added 2025/12/16 1:15 a.m.15 views

PYSEC-2025-233

Weblate is a web based localization tool. In versions prior to 5.15, it was possible to retrieve user notification settings or list all users via API. Version 5.15 fixes the issue...

4.3CVSS5.8AI score0.00244EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2025/12/15 12:15 a.m.15 views

PYSEC-2025-135

A flaw has been found in Mayan EDMS up to 4.10.1. The impacted element is an unknown function of the file /authentication/. This manipulation causes open redirect. It is possible to initiate the attack remotely. The exploit has been published and may be used. Upgrading to version 4.10.2 is...

6.1CVSS5.3AI score0.00411EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2025/12/02 4:15 p.m.15 views

PYSEC-2025-109

An issue was discovered in 5.2 before 5.2.9, 5.1 before 5.1.15, and 4.2 before 4.2.27.Algorithmic complexity in django.core.serializers.xmlserializer.getInnerText allows a remote attacker to cause a potential denial-of-service attack triggering CPU and memory exhaustion via specially crafted XML...

7.5CVSS7.3AI score0.02116EPSS
SaveExploits0References4Affected Software1
PyPA
PyPA
added 2025/11/21 7:16 p.m.15 views

PYSEC-2025-139

MLX is an array framework for machine learning on Apple silicon. Prior to version 0.29.4, there is a segmentation fault in mlx::core::loadgguf when loading malicious GGUF files. Untrusted pointer from external gguflib library is dereferenced without validation, causing application crash. This iss...

7.5CVSS5.7AI score0.0037EPSS
SaveExploits1References1Affected Software1
PyPA
PyPA
added 2025/09/25 3:16 p.m.15 views

PYSEC-2025-203

An issue in the component torch.linalg.lu of pytorch v2.8.0 allows attackers to cause a Denial of Service DoS when performing a slice operation...

7.5CVSS6.3AI score0.00391EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2025/09/24 8:15 a.m.15 views

PYSEC-2025-88

Deserialization of Untrusted Data vulnerability in Apache IoTDB.This issue affects Apache IoTDB: from 1.0.0 before 2.0.5.Users are recommended to upgrade to version 2.0.5, which fixes the issue...

5.3CVSS5.8AI score0.00461EPSS
SaveExploits0References3Affected Software1
PyPA
PyPA
added 2025/09/19 9:15 a.m.15 views

PYSEC-2025-76

The Keras Model.loadmodelmethod can be exploited to achieve arbitrary code execution, even with safemode=True.One can create a specially crafted .kerasmodel archive that, when loaded via Model.loadmodel, will trigger arbitrary code to be executed. This is achieved by crafting a special config.jso...

8.6CVSS7.5AI score0.00186EPSS
SaveExploits0References2
PyPA
PyPA
added 2025/07/29 8:15 p.m.15 views

PYSEC-2025-101

An issue was discovered in Couchbase Sync Gateway before 3.2.6. In sgcollectinfooptions.log and syncgateway.log, there are cleartext passwords in redacted and unredacted output...

7.3CVSS5.8AI score0.00182EPSS
SaveExploits0References3Affected Software1
PyPA
PyPA
added 2025/07/25 10:15 a.m.15 views

PYSEC-2025-182

NULL Pointer Dereference in µD3TN via non-singleton destination Endpoint Identifier allows remote attacker to reliably cause DoS...

7.5CVSS5.8AI score0.0051EPSS
SaveExploits1References1Affected Software1
Total number of security vulnerabilities5000