Lucene search
+L
PypaMost viewed

7218 matches found

PyPA
PyPA
added 2026/07/07 11:45 a.m.14 views

gRPC connection termination issue

gRPC contains a vulnerability whereby a client can cause a termination of connection between a HTTP2 proxy and a gRPC server: a base64 encoding error for -bin suffixed headers will result in a disconnection by the gRPC server, but is typically allowed by HTTP2 proxies. We recommend upgrading beyo...

5.3CVSS6.5AI score0.00527EPSS
SaveExploits0References11Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.14 views

TensorFlow has Heap-buffer-overflow in AvgPoolGrad

Impactpythonimport osos.environ'TFENABLEONEDNNOPTS' = '0'import tensorflow as tfprinttf.versionwith tf.device"CPU": ksize = 1, 40, 128, 1 strides = 1, 128, 128, 30 padding = "SAME" dataformat = "NHWC" originputshape = 11, 9, 78, 9 grad = tf.saturatecasttf.random.uniform16, 16, 16, 16, minval=-128...

9.8CVSS6.6AI score0.00415EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.14 views

pgAdmin 4 vulnerable to directory traversal

pgAdmin 4 versions prior to v6.19 contains a directory traversal vulnerability. A user of the product may change another user's settings or alter the database...

6.5CVSS6.2AI score0.08826EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/07 10:17 a.m.14 views

Denial of service vulnerability on Password reset page

ImpactPrevious versions of Kiwi TCMS do not impose rate limits which makes it easier to attempt denial-of-service attacks against the Password reset page. An attacker could potentially send a large number of emails if they know the email addresses of users in Kiwi TCMS. Additionally that may stra...

7.5CVSS6.8AI score0.00908EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/07 10:17 a.m.14 views

Path traversal in spotipy

SummaryIf a malicious URI is passed to the library, the library can be tricked into performing an operation on a different API endpoint than intended. DetailsThe code Spotipy uses to parse URIs and URLs accepts user data too liberally which allows a malicious user to insert arbitrary characters...

5.4CVSS6.1AI score0.00653EPSS
SaveExploits1References5Affected Software1
PyPA
PyPA
added 2026/07/07 10:17 a.m.14 views

Apache Superset Open Redirect vulnerability

An authenticated attacker with update datasets permission could change a dataset link to an untrusted site, users could be redirected to this site when clicking on that specific dataset. This issue affects Apache Superset version 1.5.2 and prior versions and version 2.0.0...

5.4CVSS6AI score0.00994EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/07/07 10:17 a.m.14 views

Pyload contains Sensitive Cookie in HTTPS Session Without 'Secure' Attribute

Sensitive Cookie in HTTPS Session Without 'Secure' Attribute in GitHub repository pyload/pyload prior to 0.5.0b3.dev32. The Secure attribute for sensitive cookies in HTTPS sessions is not set, which could cause the user agent to send those cookies in plaintext over an HTTP session. This issue is...

5.3CVSS6AI score0.00436EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
added 2026/07/07 10:17 a.m.14 views

Apache Superset vulnerable to Cross-Site Request Forgery via legacy REST API endpoints

Two legacy REST API endpoints for approval and request access are vulnerable to cross site request forgery. This issue affects Apache Superset version 1.5.2 and prior versions and version 2.0.0...

8.8CVSS6.4AI score0.00567EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/07/07 10:17 a.m.14 views

Apache Superset vulnerable to Cross-site Scripting

Dashboard rendering does not sufficiently sanitize the content of markdown components leading to possible XSS attack vectors that can be performed by authenticated users with create dashboard permissions. This issue affects Apache Superset version 1.5.2 and prior versions and version 2.0.0...

5.4CVSS6.1AI score0.0124EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/07/07 10:17 a.m.14 views

OpenStack Kolla sudo privilege escalation vulnerability

A privilege escalation vulnerability exists in the sudo functionality of OpenStack Kolla git master 05194e7618. A misconfiguration in /etc/sudoers within a container can lead to increased privileges...

8.8CVSS7.1AI score0.00211EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/07 10:17 a.m.14 views

Buffer overflow in `CONV_3D_TRANSPOSE` on TFLite

ImpactThe reference kernel of the CONV3DTRANSPOSE TensorFlow Lite operator wrongly increments the dataptr when adding the bias to the result.Instead of dataptr += numchannels; it should be dataptr += outputnumchannels; as if the number of input channels is different than the number of output...

8.1CVSS7.3AI score0.00523EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/07/07 10:17 a.m.14 views

Heap overflow in `QuantizeAndDequantizeV2`

ImpactThe function MakeGrapplerFunctionItem takes arguments that determine the sizes of inputs and outputs. If the inputs given are greater than or equal to the sizes of the outputs, an out-of-bounds memory read or a crash is triggered.pythonimport tensorflow as [email protected] test:...

9.1CVSS7.2AI score0.00401EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/07 10:17 a.m.14 views

`CHECK` fail via inputs in `SparseFillEmptyRowsGrad`

ImpactIf SparseFillEmptyRowsGrad is given empty inputs, TensorFlow will crash.pythonimport tensorflow as tftf.rawops.SparseFillEmptyRowsGrad reverseindexmap=, gradvalues=, name=None PatchesWe have patched the issue in GitHub commit af4a6a3c8b95022c351edae94560acc61253a1b8.The fix will be included...

7.5CVSS7AI score0.0044EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/07/07 10:17 a.m.14 views

`tf.raw_ops.Mfcc` crashes

ImpactIf ThreadUnsafeUnigramCandidateSampler is given input filterbankchannelcount greater than the allowed max size, TensorFlow will crash.pythonimport tensorflow as tftf.rawops.Mfcc spectrogram = 1.38, 6.32, 5.75, 9.51, samplerate = 2, upperfrequencylimit = 5.0, lowerfrequencylimit = 1.0,...

7.5CVSS7AI score0.0044EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/07/07 10:17 a.m.14 views

FPE in `tf.image.generate_bounding_box_proposals`

ImpactWhen running on GPU, tf.image.generateboundingboxproposals receives a scores input that must be of rank 4 but is not checked.pythonimport tensorflow as tfa = tf.constantvalue=1.0, 1.0, 1.0, 1.0, 1.0, 1.0, 1.0, 1.0b =...

7.5CVSS7AI score0.00439EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/07/07 10:17 a.m.14 views

snowflake-connector-python is vulnerable to Regular Expression Denial of Service (ReDoS)

An exponential ReDoS Regular Expression Denial of Service can be triggered in the snowflake-connector-python PyPI package, when an attacker is able to supply arbitrary input to the getfiletransfertype method...

7.5CVSS7.2AI score0.00816EPSS
SaveExploits1References8Affected Software1
PyPA
PyPA
added 2026/07/07 10:17 a.m.14 views

Overflow in `FusedResizeAndPadConv2D`

ImpactWhen tf.rawops.FusedResizeAndPadConv2D is given a large tensor shape, it overflows.pythonimport tensorflow as tfmode = "REFLECT"strides = 1, 1, 1, 1padding = "SAME"resizealigncorners = Falseinput = tf.constant147, shape=3,3,1,1, dtype=tf.float16size = tf.constant1879048192,1879048192,...

7.5CVSS6.9AI score0.0043EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/07/07 10:17 a.m.14 views

Overflow in `tf.keras.losses.poisson`

Impacttf.keras.losses.poisson receives a ypred and ytrue that are passed through functor::mul in BinaryOp. If the resulting dimensions overflow an int32, TensorFlow will crash due to a size mismatch during broadcast assignment.pythonimport numpy as npimport tensorflow as tftruevalue =...

7.5CVSS7AI score0.0044EPSS
SaveExploits1References8Affected Software1
PyPA
PyPA
added 2026/07/07 10:17 a.m.14 views

Lin CMS vulnerable to Improper Authentication

An authentication bypass in Lin-CMS v0.2.1 allows attackers to escalate privileges to Super Administrator...

6.6CVSS6.7AI score0.01016EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
added 2026/07/07 10:17 a.m.14 views

When matrix-nio receives forwarded room keys, the receiver doesn't check if it requested the key from the forwarder

When matrix-nio before 0.20 requests a room key from our devices, it correctly accepts key forwards only if they are a response to a previous request. However, it doesn't check that the device that responded matches the device the key was requested from.This allows a malicious homeserver to inser...

8.6CVSS6.9AI score0.00572EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 10:17 a.m.14 views

TensorFlow vulnerable to `CHECK` fail in `FractionalMaxPoolGrad`

ImpactFractionalMaxPoolGrad validates its inputs with CHECK failures instead of with returning errors. If it gets incorrectly sized inputs, the CHECK failure can be used to trigger a denial of service attack:pythonimport tensorflow as tfoverlapping = Trueoriginput = tf.constant.453409232,...

7.5CVSS7AI score0.00411EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/07 10:17 a.m.14 views

TensorFlow vulnerable to segfault in `QuantizedAdd`

ImpactIf QuantizedAdd is given mininput or maxinput tensors of a nonzero rank, it results in a segfault that can be used to trigger a denial of service attack.pythonimport tensorflow as tfToutput = tf.qint32x = tf.constant140, shape=1, dtype=tf.quint8y = tf.constant26, shape=10, dtype=tf.quint8mi...

7.5CVSS7AI score0.00424EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/07 10:17 a.m.14 views

TensorFlow vulnerable to Int overflow in `RaggedRangeOp`

ImpactThe RaggedRangOp function takes an argument limits that is eventually used to construct a TensorShape as an int64. If limits is a very large float, it can overflow when converted to an int64. This triggers an InvalidArgument but also throws an abort signal that crashes the...

7.5CVSS7AI score0.00567EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/07 10:17 a.m.14 views

TensorFlow vulnerable to null dereference on MLIR on empty function attributes

ImpactEig can be fed an incorrect Tout input, resulting in a CHECK fail that can trigger a denial of service attack.pythonimport tensorflow as tfimport numpy as np arg0=tf.constantvalue=np.random.randomsize=2, 2, shape=2, 2, dtype=tf.float32arg1=tf.complex128arg2=Truearg3=''tf.rawops.Eiginput=arg...

7.5CVSS7AI score0.00411EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/07 10:17 a.m.14 views

TensorFlow vulnerable to null-dereference in `mlir::tfg::GraphDefImporter::ConvertNodeDef`

ImpactWhen mlir::tfg::GraphDefImporter::ConvertNodeDef tries to convert NodeDefs without an op name, it crashes.cppStatus GraphDefImporter::ConvertNodeDefOpBuilder , ConversionState , const NodeDef VLOG4 opdef; else auto it = functionopdefs.findnode.op; if it == functionopdefs.end return...

7.5CVSS7.1AI score0.00567EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/07 10:17 a.m.14 views

TensorFlow vulnerable to `CHECK` fail in `RandomPoissonV2`

ImpactWhen RandomPoissonV2 receives large input shape and rates, it gives a CHECK fail that can trigger a denial of service attack.pythonimport tensorflow as tfarg0=tf.random.uniformshape=4,, dtype=tf.int32, maxval=65536arg1=tf.random.uniformshape=4, 4, 4, 4, 4, dtype=tf.float32,...

7.5CVSS7AI score0.00411EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/07 10:17 a.m.14 views

TensorFlow vulnerable to segfault in `Requantize`

ImpactIf Requantize is given inputmin, inputmax, requestedoutputmin, requestedoutputmax tensors of a nonzero rank, it results in a segfault that can be used to trigger a denial of service attack.pythonimport tensorflow as tfouttype = tf.quint8input = tf.constant1, shape=3, dtype=tf.qint32inputmin...

7.5CVSS7AI score0.00439EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/07 10:17 a.m.14 views

TensorFlow vulnerable to `CHECK` fail in `RaggedTensorToVariant`

ImpactIf RaggedTensorToVariant is given a rtnestedsplits list that contains tensors of ranks other than one, it results in a CHECK fail that can be used to trigger a denial of service attack.pythonimport tensorflow as tfbatchedinput = Truertnestedsplits = tf.constant0,32,64, shape=3,...

7.5CVSS7AI score0.00398EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/07 10:17 a.m.14 views

TensorFlow vulnerable to `CHECK` failure in `AvgPoolOp`

ImpactThe AvgPoolOp function takes an argument ksize that must be positive but is not checked. A negative ksize can trigger a CHECK failure and crash the program.pythonimport tensorflow as tfimport numpy as npvalue = np.ones1, 1, 1, 1ksize = 1, 1e20, 1, 1strides = 1, 1, 1, 1padding =...

7.5CVSS7AI score0.00583EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/07 10:17 a.m.14 views

TensorFlow vulnerable to OOB read in `Gather_nd` in TF Lite

ImpactThe GatherNd function takes arguments that determine the sizes of inputs and outputs. If the inputs given are greater than or equal to the sizes of the outputs, an out-of-bounds memory read is triggered. PatchesWe have patched the issue in GitHub commit...

9.1CVSS7.1AI score0.00458EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/07 10:17 a.m.14 views

TensorFlow vulnerable to `CHECK` fail in `QuantizeAndDequantizeV3`

ImpactIf QuantizeAndDequantizeV3 is given a nonscalar numbits input tensor, it results in a CHECK fail that can be used to trigger a denial of service attack.pythonimport tensorflow as tfsignedinput = Truerangegiven = Falsenarrowrange = Falseaxis = -1input = tf.constant-3.5, shape=1,...

7.5CVSS7AI score0.00411EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/06 9:16 p.m.14 views

PYSEC-2026-2140

Crawl4AI is an open-source LLM-friendly web crawler and scraper. Prior to 0.9.0, the Docker API server applied its SSRF destination check on the non-streaming /crawl path but not on the streaming path. handlestreamcrawlrequest passed seed URLs straight to the crawler with no destination validatio...

8.6CVSS6.2AI score0.00262EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2026/07/06 9:16 p.m.14 views

PYSEC-2026-2304

vLLM is a high-throughput and memory-efficient inference and serving engine for LLMs. Prior to 0.24.0, the structuredoutputs.regex API parameter passes a user-supplied regular expression string directly to the grammar compiler backends with no compilation timeout; in the xgrammar backend the stri...

8.7CVSS6.1AI score0.00324EPSS
SaveExploits0References3Affected Software1
PyPA
PyPA
added 2026/07/06 8:3 a.m.14 views

sanic vulnerable to Path Traversal when using `app.static` if using encoded `%2F` URLs

ImpactAccess to lateral directories when using app.static if using encoded %2F URLs. Parent directory traversal is not impacted. Patches- v20.12.7 LTS- v21.12.2 LTS- v22.6.1 Referenceshttps://github.com/sanic-org/sanic/issues/2478https://github.com/sanic-org/sanic/pull/2495 For more informationIf...

8.3CVSS7.1AI score0.01104EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/07/06 8:3 a.m.14 views

Incorrect handling of invalid surrogate pair characters

ImpactWhat kind of vulnerability is it? Who is impacted?Anyone parsing JSON from an untrusted source is vulnerable.JSON strings that contain escaped surrogate characters not part of a proper surrogate pair were decoded incorrectly. Besides corrupting strings, this allowed for potential key...

7.5CVSS7AI score0.02298EPSS
SaveExploits1References8Affected Software1
PyPA
PyPA
added 2026/07/06 8:3 a.m.14 views

Django REST framework XSS Vulnerability

Django REST framework aka django-rest-framework before 3.9.1 allows XSS because the default DRF Browsable API view templates disable autoescaping...

6.1CVSS6.4AI score0.00717EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/06 8:3 a.m.14 views

Apache Superset allows authenticated users to access metadata they have no permission to

Apache Superset up to 1.5.1 allowed for authenticated users to access metadata information related to datasets they have no permission on. This metadata included the dataset name, columns and metrics...

4.3CVSS5.9AI score0.01258EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/06 8:3 a.m.14 views

Microsoft: CBC Padding Oracle in Azure Blob Storage Encryption Library

SummaryThe Azure Storage Encryption library in Java and other languages is vulnerable to a CBC Padding Oracle attack, similar to CVE-2020-8911. The library is not vulnerable to the equivalent of CVE-2020-8912, but only because it currently only supports AES-CBC as encryption mode. SeverityModerat...

4.7CVSS6.4AI score0.00521EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/06 8:3 a.m.14 views

Missing validation crashes `QuantizeAndDequantizeV4Grad`

ImpactThe implementation of tf.rawops.QuantizeAndDequantizeV4Grad does not fully validate the input arguments. This results in a CHECK-failure which can be used to trigger a denial of service attack:pythonimport tensorflow as tftf.rawops.QuantizeAndDequantizeV4Grad gradients=tf.constant1,...

5.5CVSS6.2AI score0.0034EPSS
SaveExploits1References11Affected Software1
PyPA
PyPA
added 2026/07/06 8:3 a.m.14 views

Mirumee Saleor CSRF Protection Disabled

In Mirumee Saleor 2.7.0 fixed in 2.8.0, CSRF protection middleware was accidentally disabled, which allowed attackers to send a POST request without a valid CSRF token and be accepted by the server...

8.8CVSS7.2AI score0.00613EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/07/06 8:3 a.m.14 views

Zope Command Execution Vulnerability

Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2, allows remote attackers to execute arbitrary commands via vectors related to the p class in OFS/misc.py and the use of Python modules...

9.3CVSS6.2AI score0.78332EPSS
SaveExploits15References14Affected Software1
PyPA
PyPA
added 2026/07/06 8:3 a.m.14 views

Plone anonymous access to sub-objects in CMFEditions where KwAsAttributes classes were publishable

The CMFEditions component 2.x in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2 does not prevent the KwAsAttributes classes from being publishable, which allows remote attackers to access sub-objects via unspecified vectors, a different vulnerability than CVE-2011-3587...

9.3CVSS6AI score0.01975EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/06 8:3 a.m.14 views

OpenStack Cinder, Glance, and Nova contain Uncontrolled Resource Consumption

The image parser in OpenStack Cinder prior to 7.0.2, and 8.0.0 and above, prior to 9.0.0; Glance prior to 14.00; and Nova prior to 12.0.4 does not properly limit qemu-img calls, which might allow attackers to cause a denial of service memory and disk consumption via a crafted disk image. This iss...

7.8CVSS6.8AI score0.03062EPSS
SaveExploits1References17Affected Software1
PyPA
PyPA
added 2026/07/02 2:13 p.m.14 views

SaltStack RSA Key Generation allows remote users to decrypt communications

SaltStack RSA Key Generation allows remote users to decrypt communications...

8.1CVSS7.2AI score0.01945EPSS
SaveExploits0References10Affected Software1
PyPA
PyPA
added 2026/07/02 2:13 p.m.14 views

Plone credentials stored in session cookie

Plone CMS 3.1.x uses invariant data a client username and a server secret when calculating an HMAC-SHA1 value for an authentication cookie, which makes it easier for remote attackers to gain permanent access to an account by sniffing the network...

4.3CVSS6AI score0.0113EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/02 2:13 p.m.14 views

Plone CMS Improper Session Management

Plone CMS before 3 places a base64 encoded form of the username and password in the ac cookie for all user accounts, which makes it easier for remote attackers to obtain access by sniffing the network...

7.5CVSS6AI score0.01426EPSS
SaveExploits0References9Affected Software1
PyPA
PyPA
added 2026/07/02 2:13 p.m.14 views

Django Improper Access Control

The LazyUser class in the AuthenticationMiddleware for Django 0.95 does not properly cache the user name across requests, which allows remote authenticated users to gain the privileges of a different user...

6.5CVSS6AI score0.01188EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/02 2:13 p.m.14 views

Zope XSS Vulnerability

Cross-site scripting XSS vulnerability in Zope 2.8.x before 2.8.12, 2.9.x before 2.9.12, 2.10.x before 2.10.11, 2.11.x before 2.11.6, and 2.12.x before 2.12.3, 3.1.1 through 3.4.1. allows remote attackers to inject arbitrary web script or HTML via vectors related to the way error messages perform...

6.1CVSS6.5AI score0.0195EPSS
SaveExploits0References13Affected Software1
PyPA
PyPA
added 2026/07/02 2:13 p.m.14 views

Out of bounds read in Tensorflow

ImpactThe TFG dialect of TensorFlow MLIR makes several assumptions about the incoming GraphDef before converting it to the MLIR-based dialect.If an attacker changes the SavedModel format on disk to invalidate these assumptions and the GraphDef is then converted to MLIR-based IR then they can caus...

8.8CVSS6.2AI score0.00142EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/02 2:13 p.m.14 views

Out-of-bounds Write in OpenCV

In opencv calls that use libpng, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges required. User interaction is not required for exploitation. Product: AndroidVersions: Android-10Android...

7.8CVSS7.2AI score0.00293EPSS
SaveExploits0References9Affected Software1
Total number of security vulnerabilities5000