Lucene search
+L
PypaMost viewed

7218 matches found

PyPA
PyPA
added 2026/07/09 4:49 p.m.14 views

Out-of-bounds Write in OpenCV

OpenCV Open Source Computer Vision Library through 3.3 corresponding to OpenCV-Python and OpenCV-Contrib-Python 3.3.0.9 has an out-of-bounds write error in the FillUniColor function in utils.cpp when reading an image file by using cv::imread...

8.8CVSS6.8AI score0.0197EPSS
SaveExploits0References10Affected Software1
PyPA
PyPA
added 2026/07/09 4:49 p.m.14 views

Out-of-bounds Read in OpenCV

OpenCV Open Source Computer Vision Library through 3.3 corresponding to OpenCV-Python 3.3.0.9 has an out-of-bounds read error in the function icvCvtBGRA2BGR8uC4C3R when reading an image file by using cv::imread...

8.8CVSS6.6AI score0.0197EPSS
SaveExploits0References12Affected Software1
PyPA
PyPA
added 2026/07/09 4:49 p.m.14 views

Improper Restriction of XML External Entity Reference in Plone

Plone before 5.2.3 allows XXE attacks via a feature that is protected by an unapplied permission of plone.schemaeditor.ManageSchemata therefore, only available to the Manager role...

8.8CVSS7AI score0.01423EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/09 4:49 p.m.14 views

Double Free in OpenCV

OpenCV 3.0.0 has a double free issue that allows attackers to execute arbitrary code. This issue was fixed in OpenCV version 3.3.1 corresponding to OpenCV-Python and and OpenCV-Contrib-Python 3.3.1.11...

8.8CVSS6.9AI score0.02337EPSS
SaveExploits1References9Affected Software1
PyPA
PyPA
added 2026/07/09 4:49 p.m.14 views

SSRF attacks via tracebacks in Plone

Plone before 5.2.3 allows SSRF attacks via the tracebacks feature only available to the Manager role...

8.8CVSS7AI score0.01423EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/09 4:49 p.m.14 views

Improper Restriction of XML External Entity Reference in Plone

Plone before 5.2.3 allows XXE attacks via a feature that is explicitly only available to the Manager role...

8.8CVSS7AI score0.01423EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/09 4:49 p.m.14 views

Improper Restriction of XML External Entity Reference in Plone

Plone before 5.2.3 allows XXE attacks via a feature that is explicitly only available to the Manager role...

8.8CVSS7AI score0.01423EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/08 8:16 p.m.14 views

PYSEC-2026-3444

httplib2 is a comprehensive HTTP client library for Python. Prior to 0.32.0, httplib2 performs unbounded decompression of HTTP response bodies encoded with Content-Encoding: gzip or deflate in decompressContent in httplib2/init.py, allowing a malicious or compromised HTTP server to return a small...

7.5CVSS6.1AI score0.0041EPSS
SaveExploits1References3Affected Software1
PyPA
PyPA
added 2026/07/08 5:17 p.m.14 views

PYSEC-2026-2213

Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, long sequences of well-formed double-asterisk or triple-asterisk emphasis pairs around a character cause quadratic work in src/mistune/inlineparser.py because the parser scans forward for matching close markers from...

7.5CVSS6.1AI score0.0041EPSS
SaveExploits1References3Affected Software1
PyPA
PyPA
added 2026/07/07 4:3 p.m.14 views

Django vulnerable to partial directory traversal via archives

An issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13, and 5.2 before 5.2.7. The django.utils.archive.extract function, used by the "startapp --template" and "startproject --template" commands, allows partial directory traversal via an archive with file paths sharing a common...

6.5CVSS6AI score0.0085EPSS
SaveExploits0References10Affected Software1
PyPA
PyPA
added 2026/07/07 4:3 p.m.14 views

vLLM is vulnerable to Server-Side Request Forgery (SSRF) through `MediaConnector` class

SummaryA Server-Side Request Forgery SSRF vulnerability exists in the MediaConnector class within the vLLM project's multimodal feature set. The loadfromurl and loadfromurlasync methods fetch and process media from user-provided URLs without adequate restrictions on the target hosts. This allows ...

7.1CVSS5.8AI score0.00229EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/07 4:3 p.m.14 views

JupyterLab LaTeX typesetter links did not enforce `noopener` attribute

Links generated with LaTeX typesetters in Markdown files and Markdown cells in JupyterLab and Jupyter Notebook did not include the noopener attribute.This is deemed to have no impact on the default installations. Theoretically users of third-party LaTeX-rendering extensions could find themselves...

4.3CVSS6AI score0.00222EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 4:3 p.m.14 views

ml-logger has path traversal in the file argument

A vulnerability was identified in geyang ml-logger 0.10.36 and prior. Affected by this vulnerability is the function loghandler of the file mllogger/server.py. Such manipulation of the argument File leads to path traversal. It is possible to launch the attack remotely. The exploit is publicly...

7.5CVSS5.8AI score0.00558EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/07 4:3 p.m.14 views

xml2rfc is vulnerable to arbitrary file reads through prepped files

ImpactWhen generating PDF files, this vulnerability allows an attacker to read arbitrary files from the filesystem by injecting malicious link element into the prepped RFCXML. WorkaroundsTest untrusted input with link elements with rel="attachment" before processing. ReferencesThis is related to...

8.7CVSS6AI score0.00278EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/07 4:3 p.m.14 views

Hugging Face Transformers is vulnerable to ReDoS through its MarianTokenizer

A Regular Expression Denial of Service ReDoS vulnerability was discovered in the Hugging Face Transformers library, specifically affecting the MarianTokenizer's removelanguagecode method. This vulnerability is present in version 4.52.4 and has been fixed in version 4.53.0. The issue arises from...

7.5CVSS5.9AI score0.00483EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/07/07 4:3 p.m.14 views

OctoPrint is Vulnerable to RCE Attacks via Unsanitized Filename in File Upload

ImpactOctoPrint versions up until and including 1.11.2 contain a vulnerability that allows an authenticated attacker to upload a file under a specially crafted filename that will allow arbitrary command execution if said filename becomes included in a command defined in a system event handler and...

8.8CVSS6AI score0.19313EPSS
SaveExploits4References8Affected Software1
PyPA
PyPA
added 2026/07/07 4:3 p.m.14 views

Fides Webserver API is Vulnerable to OAuth Client Privilege Escalation

SummaryThe OAuth client creation and update endpoints of the Fides Webserver API do not properly authorize scope assignment. This allows highly privileged users with client:create or client:update permissions to escalate their privileges to owner-level. DetailsWhen creating or updating OAuth...

8.6CVSS6AI score0.00392EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/07 4:3 p.m.14 views

MobSF Path Traversal in GET /download/<filename> using absolute filenames

SummaryThe GET /download/ route uses string path verification via os.path.commonprefix, which allows an authenticated user to download files outside the DWDDIR download directory from "neighboring" directories whose absolute paths begin with the same prefix as DWDDIR e.g., .../downloadsbak,...

5.3CVSS6.1AI score0.00758EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/07/07 4:3 p.m.14 views

OMERO.web displays unecessary user information when requesting password reset

BackgroundIf an error occurred when resetting a user's password using the Forgot Password option in OMERO.web, the error message displayed on the Web page can disclose information about the user. ImpactOMERO.web before 5.29.1 PatchesUser should upgrade to 5.29.2 or higher WorkaroundsDisable the...

5.3CVSS6AI score0.00261EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 4:3 p.m.14 views

Langflow Vulnerable to Privilege Escalation via CLI Superuser Creation (Post-RCE)

This vulnerability was discovered by researchers at Check Point. We are sharing this report as part of a responsible disclosure process and are happy to assist in validation and remediation if needed. SummaryA privilege escalation vulnerability exists in Langflow containers where an authenticated...

8.8CVSS6.4AI score0.00465EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/07 4:2 p.m.14 views

FastAPI Guard has a regex bypass

SummaryThe regular expression patched to mitigate the ReDoS vulnerability by limiting the length of string fails to catch inputs that exceed this limit. DetailsIn version 3.0.1, you can find a commit like the one in the link below, which was made to prevent...

8.8CVSS6AI score0.00734EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/07/07 4:2 p.m.14 views

LlamaIndex vulnerable to Path Traversal attack through its encode_image function

A path traversal vulnerability exists in run-llama/llamaindex versions 0.11.23 through 0.12.40, specifically within the encodeimage function in genericutils.py. This vulnerability allows an attacker to manipulate the imagepath input to read arbitrary files on the server, including sensitive syste...

7.5CVSS6AI score0.00545EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/07/07 4:2 p.m.14 views

LlamaIndex is vulnerable to Path Traversal attack through its ObsidianReader class

A vulnerability in the ObsidianReader class in LlamaIndex Readers Integration: Obsidian before version 0.5.1 from the run-llama/llamaindex repository versions 0.12.23 to 0.12.28 allows for arbitrary file read through symbolic links. The ObsidianReader fails to resolve symlinks to their real paths...

7.5CVSS6AI score0.00555EPSS
SaveExploits1References8Affected Software1
PyPA
PyPA
added 2026/07/07 4:2 p.m.14 views

HumanSignal label-studio-ml-backend Deserialization of Untrusted Data vulnerability

A vulnerability has been found in HumanSignal label-studio-ml-backend up to 9fb7f4aa186612806af2becfb621f6ed8d9fdbaf and classified as problematic. Affected by this vulnerability is the function load of the file label-studio-ml-backend/labelstudioml/examples/yolo/utils/neuralnets.py of the...

7.8CVSS4.9AI score0.00195EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/07 4:2 p.m.14 views

Langroid has a Code Injection vulnerability in LanceDocChatAgent through vector_store

SummaryLanceDocChatAgent uses pandas eval through computefromdocs:https://github.com/langroid/langroid/blob/18667ec7e971efc242505196f6518eb19a0abc1c/langroid/vectorstore/base.pyL136-L150As a result, an attacker may be able to make the agent run malicious commands through QueryPlan.dataframecalc...

9.8CVSS5.9AI score0.00482EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 4:2 p.m.14 views

AWorld OS Command Injection vulnerability

A vulnerability was found in inclusionAI AWorld up to 8c257626e648d98d793dd9a1a950c2af4dd84c4e. It has been rated as critical. This issue affects the function subprocess.run/subprocess.Popen of the file AWorld/aworld/virtualenvironments/terminals/shelltool.py. The manipulation leads to os command...

8.1CVSS5AI score0.03072EPSS
SaveExploits1References10Affected Software1
PyPA
PyPA
added 2026/07/07 4:2 p.m.14 views

jupyterlab-git has a command injection vulnerability in "Open Git Repository in Terminal"

OverviewOn many platforms, a third party can create a Git repository under a name that includes a shell command substitution ^1 string in the syntax $. These directory names are allowed in macOS and a majority of Linux distributions ^2. If a user starts jupyter-lab in a parent directory of this...

7.4CVSS6.5AI score0.0057EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.14 views

SageMaker Workflow component allows possibility of MD5 hash collisions

A vulnerability in the SageMaker Workflow component of aws/sagemaker-python-sdk allows for the possibility of MD5 hash collisions in all versions. This can lead to workflows being inadvertently replaced due to the reuse of results from different configurations that produce the same MD5 hash. This...

5.9CVSS5.9AI score0.00245EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.14 views

LiteLLM Has an Improper Authorization Vulnerability

An improper authorization vulnerability exists in the main-latest version of BerriAI/litellm. When a user with the role 'internaluserviewer' logs into the application, they are provided with an overly privileged API key. This key can be used to access all the admin functionality of the applicatio...

8.1CVSS6AI score0.00315EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.14 views

LiteLLM Has a Leakage of Langfuse API Keys

In berriai/litellm version v1.52.1, an issue in proxyserver.py causes the leakage of Langfuse API keys when an error occurs while parsing team settings. This vulnerability exposes sensitive information, including langfusesecret and langfusepublickey, which can provide full access to the Langfuse...

7.5CVSS6AI score0.00523EPSS
SaveExploits1References5Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.14 views

MLflow Uncontrolled Resource Consumption vulnerability

In mlflow/mlflow version 2.17.2, the /graphql endpoint is vulnerable to a denial of service attack. An attacker can create large batches of queries that repeatedly request all runs from a given experiment. This can tie up all the workers allocated by MLFlow, rendering the application unable to...

7.5CVSS6.3AI score0.10414EPSS
SaveExploits1References5Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.14 views

composio allows Server-Side Request Forgery (SSRF) in BROWSERTOOL

A Server-Side Request Forgery SSRF vulnerability exists in composiohq/composio version v0.4.4. This vulnerability allows an attacker to read the contents of any file in the system by exploiting the BROWSERTOOLGOTOPAGE and BROWSERTOOLGETPAGEDETAILS actions...

7.5CVSS6.7AI score0.00679EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.14 views

LiteLLM Vulnerable to Denial of Service (DoS) via Crafted HTTP Request

A Denial of Service DoS vulnerability exists in berriai/litellm version v1.44.5. This vulnerability can be exploited by appending characters, such as dashes -, to the end of a multipart boundary in an HTTP request. The server continuously processes each character, leading to excessive resource...

7.5CVSS7.1AI score0.00792EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.14 views

Open WebUI allows Remote Code Execution via Arbitrary File Upload to /audio/api/v1/transcriptions

OpenWebUI version 0.3.0 contains a vulnerability in the audio API endpoint /audio/api/v1/transcriptions that allows for arbitrary file upload. The application performs insufficient validation on the file.contenttype and allows user-controlled filenames, leading to a path traversal vulnerability...

8.1CVSS6.7AI score0.00902EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.14 views

Flask-CORS vulnerable to Improper Handling of Case Sensitivity

corydolphin/flask-cors version 5.0.1 contains a vulnerability where the request path matching is case-insensitive due to the use of the trymatch function, which is originally intended for matching hosts. This results in a mismatch because paths in URLs are case-sensitive, but the regex matching...

7.5CVSS5.9AI score0.00642EPSS
SaveExploits1References8Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.14 views

LlamaIndex vulnerable to Creation of Temporary File in Directory with Insecure Permissions

A vulnerability in the defaultjsonalyzer function of the JSONalyzeQueryEngine in the run-llama/llamaindex repository allows for SQL injection via prompt injection. This can lead to arbitrary file creation and Denial-of-Service DoS attacks. The vulnerability affects the latest version and is fixed...

7.1CVSS6.1AI score0.00478EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.14 views

InvokeAI has Denial of Service (DoS) vulnerability in `/api/v1/images/upload`

A Denial of Service DoS vulnerability in the multipart request boundary processing mechanism of the Invoke-AI server version v5.0.1 allows unauthenticated attackers to cause excessive resource consumption. The server fails to handle excessive characters appended to the end of multipart boundaries...

7.5CVSS6AI score0.00593EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.14 views

FastChat open redirect vulnerability

An open redirect vulnerability in lm-sys/fastchat Release v0.2.36 allows a remote unauthenticated attacker to redirect users to arbitrary websites via a specially crafted URL. This can be exploited for phishing attacks, malware distribution, and credential theft...

6.1CVSS6.6AI score0.0077EPSS
SaveExploits1References5Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.14 views

Gradio Vulnerable to Denial of Service (DoS) via Crafted HTTP Request

A Regular Expression Denial of Service ReDoS vulnerability exists in the gradio-app/gradio repository, affecting the gr.Datetime component. The affected version is git commit 98cbcae. The vulnerability arises from the use of a regular expression ^?:\snow\s?:-\s\d+\sdmhs??\s$ to process user input...

7.5CVSS6AI score0.01015EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.14 views

Aim Vulnerable to Denial of Service (DoS)

In version 3.23.0 of aimhubio/aim, the ScheduledStatusReporter object can be instantiated to run on the main thread of the tracking server, leading to the main thread being blocked indefinitely. This results in a denial of service as the tracking server becomes unable to respond to other requests...

7.5CVSS5.9AI score0.00588EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.14 views

copyparty renders unsanitized filenames as HTML when user uploads empty files

SummaryA DOM-Based XSS was discovered in copyparty, a portable fileserver. The vulnerability is considered low-risk. DetailsBy handing someone a maliciously-named file, and then tricking them into dragging the file into copyparty's Web-UI, an attacker could execute arbitrary javascript with the...

6.1CVSS6.1AI score0.00457EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.14 views

CodeChecker open redirect when URL contains multiple slashes after the product name

Summary---CodeChecker versions up to 6.24.5 contain an open redirect vulnerability due to missing protections against multiple slashes after the product name in the URL's path segment. This results in bypassing protections against CVE-2021-28861, leading to the same open redirect...

6.1CVSS5.9AI score0.00257EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.14 views

Vulnerable OpenSSL included in cryptography wheels

pyca/cryptography's wheels include a statically linked copy of OpenSSL. The versions of OpenSSL included in cryptography 42.0.0-44.0.0 are vulnerable to a security issue. More details about the vulnerability itself can be found in https://openssl-library.org/news/secadv/20250211.txt.If you are...

6.3CVSS6.1AI score0.02439EPSS
SaveExploits0References11Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.14 views

pgAdmin has Incorrect Default Permissions

A vulnerability was found in pgadmin. Users logging into pgAdmin running in server mode using LDAP authentication may be attached to another user's session if multiple connection attempts occur simultaneously...

8CVSS5.8AI score0.00447EPSS
SaveExploits0References9Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.14 views

changedetection.io Vulnerable to Improper Input Validation Leading to LFR/Path Traversal

SummaryImproper input validation in the application can allow attackers to perform local file read LFR or path traversal attacks. These vulnerabilities occur when user input is used to construct file paths without adequate sanitization or validation. For example, using file:../../../etc/passwd or...

8.6CVSS5.9AI score0.00705EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.14 views

Composio Command Execution vulnerability

composio =0.5.40 is vulnerable to Command Execution in composioopenai, composioclaude, and composiojulep via the handletoolcalls function...

6.4CVSS6AI score0.00584EPSS
SaveExploits1References10Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.14 views

D-Tale allows Remote Code Execution through the Custom Filter Input

ImpactUsers hosting D-Tale publicly can be vulnerable to remote code execution allowing attackers to run malicious code on the server. PatchesUsers should upgrade to version 3.16.1 where the update-settings endpoint blocks the ability for users to update the enablecustomfilters flag. You can find...

6.9CVSS6.7AI score0.02203EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.14 views

unstructured XML External Entity (XXE)

unstructured v.0.14.2 and before is vulnerable to XML External Entity XXE via the XMLParser...

9.8CVSS5.9AI score0.00545EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.14 views

sigstore has insufficient validation of integration timestamp during verification

SummaryVersions of sigstore-python newer than 2.0.0 but prior to 3.6.0 perform insufficient validation of the "integration time" present in "v2" and "v3" bundles during the verification flow: the "integration time" is verified if a source of signed time such as an inclusion promise is present, bu...

6.9CVSS6AI score0.0024EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.14 views

Apache Superset: Error verbosity exposes metadata in analytics databases

Generation of Error Message Containing analytics metadata Information in Apache Superset.This issue affects Apache Superset: before 4.1.0.Users are recommended to upgrade to version 4.1.0, which fixes the issue...

5.3CVSS5.9AI score0.00787EPSS
SaveExploits0References7Affected Software1
Total number of security vulnerabilities5000