Lucene search
+L
PypaMost viewed

7218 matches found

PyPA
PyPA
added 2026/07/07 2:34 p.m.14 views

open-webui allows writing and deleting arbitrary files

In version v0.3.8 of open-webui/open-webui, the endpoint /api/pipelines/upload is vulnerable to arbitrary file write and delete due to unsanitized file.filename concatenation with CACHEDIR. This vulnerability allows attackers to overwrite and delete system files, potentially leading to remote cod...

7.2CVSS7AI score0.01062EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.14 views

Werkzeug safe_join not safe on Windows

On Python = 3.11, or not using Windows, are not vulnerable...

6.3CVSS6AI score0.0077EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.14 views

Heap-based Buffer Overflow in sqlite-vec

sqlite-vec v0.1.1 was discovered to contain a heap buffer overflow via the npytokennext function. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted file...

9.1CVSS6.2AI score0.00425EPSS
SaveExploits2References7Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.14 views

Mesop has a local file Inclusion via static file serving functionality

A vulnerability has been discovered and fixed in Mesop that could potentially allow unauthorized access to files on the server hosting the Mesop application. The vulnerability was related to insufficient input validation in a specific endpoint. This could have allowed an attacker to access files...

8.7CVSS5.8AI score0.0028EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.14 views

xhtml2pdf Denial of Service via crafted string

An issue in the getcolor function in utils.py of xhtml2pdf v0.2.13 allows attackers to cause a Regular expression Denial of Service ReDOS via supplying a crafted string...

7.5CVSS6AI score0.00636EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.14 views

OpenStack Ironic fails to verify checksums of supplied image_source URLs

In OpenStack Ironic before 21.4.4, 22.x and 23.x before 23.0.3, 23.x and 24.x before 24.1.3, and 25.x and 26.x before 26.1.0, there is a lack of checksum validation of supplied imagesource URLs when configured to convert images to a raw format for streaming...

6.9CVSS6AI score0.00663EPSS
SaveExploits0References11Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.14 views

LangChain pickle deserialization of untrusted data

A vulnerability in the FAISS.deserializefrombytes function of langchain-ai/langchain allows for pickle deserialization of untrusted data. This can lead to the execution of arbitrary commands via the os.system function. The issue affects versions prior to 0.2.4...

8.4CVSS6.2AI score0.00358EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.14 views

Cleanlab Deserialization of Untrusted Data vulnerability

Deserialization of untrusted data can occur in versions 2.4.0 or newer of the Cleanlab project, enabling a maliciously crafted datalab.pkl file to run arbitrary code on an end user’s system when the data directory is loaded...

8.6CVSS6.3AI score0.00243EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.14 views

Refuel Autolab Eval Injection vulnerability

An arbitrary code execution vulnerability exists in versions 0.0.8 and newer of the Refuel Autolabel library because of the way its classification tasks handle provided CSV files. If a victim user creates a classification task using a maliciously crafted CSV file containing Python code, the code...

8.6CVSS6.6AI score0.00349EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.14 views

Mage AI Path Traversal vulnerability

Mage AI allows remote users with the "Viewer" role to leak arbitrary files from the Mage server due to a path traversal in the "File Content" request...

7.1CVSS6.3AI score0.00881EPSS
SaveExploits1References5Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.14 views

FastAPI Admin cross-site scripting (XSS) vulnerability in the Create Product function

A cross-site scripting XSS vulnerability in the Create Product function of fastapi-admin pro v0.1.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Product Name parameter...

6.1CVSS6AI score0.00286EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.14 views

Weave server API vulnerable to arbitrary file leak

The Weave server API allows remote users to fetch files from a specific directory, but due to a lack of input validation, it is possible to traverse and leak arbitrary files remotely. In various common scenarios, this allows a low-privileged user to assume the role of the server admin...

8.8CVSS7.5AI score0.04974EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.14 views

Apache Airflow Providers FAB Insufficient Session Expiration vulnerability

Insufficient Session Expiration vulnerability in Apache Airflow Providers FAB.This issue affects Apache Airflow Providers FAB: 1.2.1 when used with Apache Airflow 2.9.3 and FAB 1.2.0 for all Airflow versions. The FAB provider prevented the user from logging out. FAB provider 1.2.1 only affected...

9.8CVSS6AI score0.00929EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.14 views

MobSF vulnerable to Open Redirect in Login Redirect

ImpactWhat kind of vulnerability is it? Who is impacted?An open redirect vulnerability exist in MobSF authentication view. PoC1. Go to http://127.0.0.1:8000/login/?next=//afine.com in a web browser.2. Enter credentials and press "Sign In".3. You will be redirected to afine.comUsers who are not...

6.8CVSS5.9AI score0.01EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.14 views

Mobile Security Framework (MobSF) has a Zip Slip Vulnerability in .a Static Library Files

SummaryUpon reviewing the MobSF source code, I identified a flaw in the Static Libraries analysis section. Specifically, during the extraction of .a extension files, the measure intended to prevent Zip Slip attacks is improperly implemented.Since the implemented measure can be bypassed, the...

9.8CVSS6AI score0.00956EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.14 views

Aim Stored Cross-site Scripting Vulnerability

A stored cross-site scripting XSS vulnerability exists in aimhubio/aim version 3.19.3. The vulnerability arises from the improper neutralization of input during web page generation, specifically in the logs-tab for runs. The terminal output logs are displayed using the dangerouslySetInnerHTML...

7.2CVSS5.8AI score0.00282EPSS
SaveExploits1References5Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.14 views

TensorFlow has segfault in array_ops.upper_bound

Impactarrayops.upperbound causes a segfault when not given a rank 2 tensor. PatchesWe have patched the issue in GitHub commit 915884fdf5df34aaedd00fc6ace33a2cfdefa586.The fix will be included in TensorFlow 2.13. We will also cherrypick this commit in TensorFlow 2.12.1. For more informationPlease...

8.7CVSS5.9AI score0.00429EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.14 views

Anki Latex Incomplete Blocklist Vulnerability

An vulnerability in the handling of Latex exists in Ankitects Anki 24.04. When Latex is sanitized to prevent unsafe commands, the verbatim package, which comes installed by default in many Latex distributions, has been overlooked. A specially crafted flashcard can lead to an arbitrary file read. ...

6.5CVSS6AI score0.11732EPSS
SaveExploits1References9Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.14 views

Vanna vulnerable to SQL Injection

vanna-ai/vanna version v0.3.4 is vulnerable to SQL injection in some file-critical functions such as pgreadfile. This vulnerability allows unauthenticated remote users to read arbitrary local files on the victim server, including sensitive files like /etc/passwd, by exploiting the exposed SQL...

8.7CVSS7.3AI score0.00599EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.14 views

Local File Inclusion in Solara

A Local File Inclusion LFI vulnerability was identified in widgetti/solara, in version 1.35.1, which was fixed in version 1.35.1. This vulnerability arises from the application's failure to properly validate URI fragments for directory traversal sequences such as '../' when serving static files. ...

8.6CVSS7.3AI score0.02884EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.14 views

Inclusion of Untrusted polyfill.io Code Vulnerability in fides.js

NoteOn Thursday, June 27, 2024, Cloudflare and Namecheap intervened at a domain level to ensure polyfill.io and its subdomains could not resolve to the compromised service, rendering this vulnerability unexploitable.The following sections describe this vulnerability prior to the domain level...

9.8CVSS5.8AI score0.01427EPSS
SaveExploits0References9Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.14 views

Apache Superset server arbitrary file read

Improper Input Validation vulnerability in Apache Superset, allows for an authenticated attacker to create a MariaDB connection with localinfile enabled. If both the MariaDB server off by default and the local mysql client on the web server are set to allow for local infile, it's possible for the...

6.8CVSS6.1AI score0.01571EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.14 views

TinyMCE Cross-Site Scripting (XSS) vulnerability using noscript elements

ImpactA cross-site scripting XSS vulnerability was discovered in TinyMCE’s content parsing code. This allowed specially crafted noscript elements containing malicious code to be executed when that content was loaded into the editor. PatchesThis vulnerability has been patched in TinyMCE 7.2.0,...

6.1CVSS5.9AI score0.00529EPSS
SaveExploits0References10Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.14 views

LNbits improperly handles potential network and payment failures when using Eclair backend

SummaryPaying invoices in Eclair that do not get settled within the internal timeout about 30s lead to a payment being considered failed, even though it may still be in flight. DetailsUsing blocking: true on the API call will lead to a timeout error if a payment does not get settled in the 30s...

8.1CVSS6AI score0.00602EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.14 views

urllib3's Proxy-Authorization request header isn't stripped during cross-origin redirects

When using urllib3's proxy support with ProxyManager, the Proxy-Authorization header is only sent to the configured proxy, as expected.However, when sending HTTP requests without using urllib3's proxy support, it's possible to accidentally configure the Proxy-Authorization header even though it...

6.5CVSS6.8AI score0.01141EPSS
SaveExploits1References10Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.14 views

Invalid char to bool conversion when printing a tensor

ImpactWhen printing a tensor, we get it's data as a const char array since that's the underlying storage and then we typecast it to the element type. However, conversions from char to bool are undefined if the char is not 0 or 1, so sanitizers/fuzzers will crash. PatchesWe have patched the issue ...

7.5CVSS7.1AI score0.00389EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.14 views

Skops unsafe deserialization

Deserialization of untrusted data can occur in versions 0.6 or newer of the skops python library, enabling a maliciously crafted model to run arbitrary code on an end user's system when loaded...

7.8CVSS7.4AI score0.00239EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.14 views

MLFlow unsafe deserialization

Deserialization of untrusted data can occur in versions of the MLflow platform running version 2.0.0rc0 or newer, enabling a maliciously uploaded Tensorflow model to run arbitrary code on an end user’s system when interacted with...

8.8CVSS6.3AI score0.00618EPSS
SaveExploits1References5Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.14 views

code injection vulnerability exists in the huggingface/text-generation-inference repository

A code injection vulnerability exists in the huggingface/text-generation-inference repository, specifically within the autodocs.yml workflow file. The vulnerability arises from the insecure handling of the github.headref user input, which is used to dynamically construct a command for installing ...

4.4CVSS6.5AI score0.00316EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.14 views

jupyter-scheduler's endpoint is missing authentication

Impactjupyterscheduler is missing an authentication check in Jupyter Server on an API endpoint GET /scheduler/runtimeenvironments which lists the names of the Conda environments on the server. In affected versions, jupyterscheduler allows an unauthenticated user to obtain the list of Conda...

5.3CVSS6AI score0.00331EPSS
SaveExploits0References10Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.14 views

OMERO.web must check that the JSONP callback is a valid function

BackgroundThere is currently no escaping or validation of the callback parameter that can be passed to various OMERO.web endpoints that have JSONP enabled. One such endpoint is /webclient/imgData/.... As we only really use these endpoints with jQuery's own callback name generation ^1 it is quite...

6.1CVSS6AI score0.00291EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.14 views

dbt allows Binding to an Unrestricted IP Address via socketsocket

SummaryBinding to INADDRANY 0.0.0.0 or IN6ADDRANY :: exposes an application on all network interfaces, increasing the risk of unauthorized access.While doing some static analysis and code inspection, I found the following code binding a socket to INADDRANY by passing "" as the address. This...

5.3CVSS5.8AI score0.0071EPSS
SaveExploits0References15Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.14 views

Arbitrary HTML present after sanitization because of unicode normalization

ImpactIf using keeptypographicwhitespace=False which is the default, the sanitizer normalizes unicode to the NFKC form at the end. Some unicode characters normalize to chevrons; this allows specially crafted HTML to escape sanitization. PatchesThe problem has been fixed in 2.4.2. WorkaroundsSet...

6.1CVSS5.9AI score0.00551EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.14 views

sagemaker-python-sdk Command Injection vulnerability

ImpactThe capturedependencies function in sagemaker.serve.saveretrive.version100.save.utils module before version 2.214.3 allows for potentially unsafe Operating System OS Command Injection if inappropriate command is passed as the “requirementspath” parameter. This consequently may allow an...

7.8CVSS7.3AI score0.01143EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.14 views

Ryu Infinite Loop vulnerability

OFPFlowStats in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service infinite loop via inst.length=0...

7.5CVSS7.1AI score0.00681EPSS
SaveExploits1References5Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.14 views

Ryu Infinite Loop vulnerability

OFPBucket in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service infinite loop via action.len=0...

5.3CVSS6.1AI score0.00457EPSS
SaveExploits1References5Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.14 views

Ryu Infinite Loop vulnerability

OFPGroupDescStats in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service infinite loop via OFPBucket.len=0...

7.5CVSS7.1AI score0.00681EPSS
SaveExploits1References5Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.14 views

Ryu Infinite Loop vulnerability

OFPPacketQueue in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service infinite loop via OFPQueueProp.len=0...

8.7CVSS7.1AI score0.00646EPSS
SaveExploits1References5Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.14 views

changedetection.io Cross-site Scripting vulnerability

SummaryInput in parameter notificationurls is not processed resulting in javascript execution in the application Detailschangedetection.io version: v0.45.21https://github.com/dgtlmoon/changedetection.io/blob/0.45.21/changedetectionio/forms.pyL226 for serverurl in field.data: if not...

4.3CVSS6.2AI score0.0127EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.14 views

langchain vulnerable to path traversal

langchain-ai/langchain is vulnerable to path traversal due to improper limitation of a pathname to a restricted directory 'Path Traversal' in its LocalFileStore functionality. An attacker can leverage this vulnerability to read or write files anywhere on the filesystem, potentially leading to...

8.8CVSS7AI score0.01856EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.14 views

Apache Airflow: Sensitive configuration for providers displayed when "non-sensitive-only" config used

Airflow versions 2.7.0 through 2.8.4 have a vulnerability that allows an authenticated user to see sensitive provider configuration via the "configuration" UI pagewhen "non-sensitive-only" was set as "webserver.exposeconfig" configuration The celery provider is the only community provider current...

5.3CVSS6AI score0.01049EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.14 views

Saleor: Customers' addresses leak when using Warehouse as a `Pickup: Local stock only` delivery method

SummaryUsing Pickup: Local stock only as a click-and-collect points could cause a leak of customer addresses DetailsWhen using Pickup: Local stock only click-and-collect as a delivery method in specific conditions the customer could overwrite the warehouse address with its own, which exposes its...

5.4CVSS5.9AI score0.00537EPSS
SaveExploits0References21Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.14 views

PaddlePaddle allows arbitrary file read via paddle.vision.ops.read_file

paddlepaddle/paddle 2.6.0 allows arbitrary file read via paddle.vision.ops.readfile...

8.2CVSS7.2AI score0.00564EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.14 views

`qiskit_ibm_runtime.RuntimeDecoder` can execute arbitrary code

Summarydeserializing json data using qiskitibmruntime.RuntimeDecoder can be made to execute arbitrary code given a correctly formatted input string DetailsRuntimeDecoder is supposed to be able to deserialize JSON strings containing various special types encoded via RuntimeEncoder. However, one ca...

7.8CVSS6.5AI score0.00372EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.14 views

Django MarkdownX Cross-Site Scripting (XSS) vulnerability

Cross-Site Scripting XSS vulnerability in the Django MarkdownX project, affecting version 4.0.2. An attacker could store a specially crafted JavaScript payload in the upload functionality due to lack of proper sanitisation of JavaScript elements...

6.1CVSS6.2AI score0.00386EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.14 views

Gradio apps vulnerable to timing attacks to guess password

ImpactThis security policy is with regards to a timing attack that allows users of Gradio apps to potentially guess the password of password-protected Gradio apps. This relies on the fact that string comparisons in Python terminate early, as soon as there is a string mismatch. Because Gradio apps...

5.9CVSS6.2AI score0.00497EPSS
SaveExploits1References8Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.14 views

Scrapy authorization header leakage on cross-domain redirect

ImpactWhen you send a request with the Authorization header to one domain, and the response asks to redirect to a different domain, Scrapy’s built-in redirect middleware creates a follow-up redirect request that keeps the original Authorization header, leaking its content to that second domain.Th...

7.5CVSS7AI score0.00642EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.14 views

glance-store logs s3 access keys

A vulnerability was found in python-glance-store. The issue occurs when the package logs the accesskey for the glance-store when the DEBUG log level is enabled...

5.5CVSS6.1AI score0.00226EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.14 views

Ansible symlink attack vulnerability

An absolute path traversal attack exists in the Ansible automation platform. This flaw allows an attacker to craft a malicious Ansible role and make the victim execute the role. A symlink can be used to overwrite a file outside of the extraction path...

6.3CVSS6.8AI score0.00859EPSS
SaveExploits0References11Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.14 views

mlflow Command Injection vulnerability

with only one user interactiondownload a malicious config, attackers can gain full command execution on the victim system...

9CVSS7.3AI score0.01219EPSS
SaveExploits0References9Affected Software1
Total number of security vulnerabilities5000