Lucene search
+L
PypaMost viewed

7250 matches found

PyPA
PyPA
added 2026/07/07 10:17 a.m.15 views

Segfault via invalid attributes in `pywrap_tfe_src.cc`

ImpactIf a list of quantized tensors is assigned to an attribute, the pywrap code fails to parse the tensor and returns a nullptr, which is not caught. An example can be seen in tf.compat.v1.extractvolumepatches by passing in quantized tensors as input ksizes.pythonimport numpy as npimport...

7.5CVSS7AI score0.00404EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/07/07 10:17 a.m.15 views

Apache Pulsar Disabled Certificate Validation for OAuth Client Credential Requests makes C++/Python Clients vulnerable to MITM attack

The Apache Pulsar C++ Client does not verify peer TLS certificates when making HTTPS calls for the OAuth2.0 Client Credential Flow, even when tlsAllowInsecureConnection is disabled via configuration. This vulnerability allows an attacker to perform a man in the middle attack and intercept and/or...

8.1CVSS7.2AI score0.00711EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/07/07 10:17 a.m.15 views

Twisted vulnerable to NameVirtualHost Host header injection

When the host header does not match a configured host, twisted.web.vhost.NameVirtualHost will return a NoResource resource which renders the Host header unescaped into the 404 response allowing HTML and script injection.Example configuration:pythonfrom twisted.web.server import Sitefrom...

5.4CVSS6.5AI score0.01189EPSS
SaveExploits1References10Affected Software1
PyPA
PyPA
added 2026/07/07 10:17 a.m.15 views

TensorFlow vulnerable to `CHECK` failures in `AvgPool3DGrad`

ImpactThe implementation of AvgPool3DGradOp does not fully validate the input originputshape. This results in an overflow that results in a CHECK failure which can be used to trigger a denial of service attack:pythonimport tensorflow as tfksize = 1, 1, 1, 1, 1strides = 1, 1, 1, 1, 1padding =...

7.5CVSS7AI score0.00398EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/07 10:17 a.m.15 views

TensorFlow vulnerable to `CHECK` fail in `TensorListScatter` and `TensorListScatterV2`

ImpactWhen TensorListScatter and TensorListScatterV2 receive an elementshape of a rank greater than one, they give a CHECK fail that can trigger a denial of service attack.pythonimport tensorflow as tfarg0=tf.random.uniformshape=2, 2, 2, dtype=tf.float16, maxval=Nonearg1=tf.random.uniformshape=2,...

7.5CVSS7AI score0.00457EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/07 10:17 a.m.15 views

TensorFlow vulnerable to `CHECK` fail in `CollectiveGather`

ImpactWhen CollectiveGather receives an scalar input input, it gives a CHECK fails that can be used to trigger a denial of service attack.pythonimport tensorflow as tfarg0=1arg1=1arg2=1arg3=1arg4=3, 3,3arg5='auto'arg6=0arg7=''tf.rawops.CollectiveGatherinput=arg0, groupsize=arg1, groupkey=arg2,...

7.5CVSS7AI score0.00411EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/07 10:17 a.m.15 views

TensorFlow vulnerable to `CHECK` fail in `FakeQuantWithMinMaxVarsGradient`

ImpactWhen tf.quantization.fakequantwithminmaxvarsgradient receives input min or max that is nonscalar, it gives a CHECK fail that can trigger a denial of service attack.pythonimport tensorflow as tfimport numpy as np arg0=tf.constantvalue=np.random.randomsize=2, 2, shape=2, 2,...

7.5CVSS7AI score0.00411EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/07 10:17 a.m.15 views

TensorFlow vulnerable to integer overflow in math ops

ImpactWhen RangeSize receives values that do not fit into an int64t, it crashes.cpp auto size = std::isintegral::value ? Eigen::numext::abslimit - start + Eigen::numext::absdelta - T1 / Eigen::numext::absdelta : Eigen::numext::ceil Eigen::numext::abslimit - start / delta; // This check does not...

7.5CVSS7.1AI score0.00567EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/07 10:17 a.m.15 views

TensorFlow vulnerable to `CHECK` failure in `AvgPoolOp`

ImpactThe AvgPoolOp function takes an argument ksize that must be positive but is not checked. A negative ksize can trigger a CHECK failure and crash the program.pythonimport tensorflow as tfimport numpy as npvalue = np.ones1, 1, 1, 1ksize = 1, 1e20, 1, 1strides = 1, 1, 1, 1padding =...

7.5CVSS7AI score0.00583EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/07 10:17 a.m.15 views

TensorFlow segfault TFLite converter on per-channel quantized transposed convolutions

ImpactWhen converting transposed convolutions using per-channel weight quantization the converter segfaults and crashes the Python process.pythonimport tensorflow as tfclass QuantConv2DTransposedtf.keras.layers.Layer: def buildself, inputshape: self.kernel = self.addweight"kernel", 3, 3,...

7.5CVSS7AI score0.00619EPSS
SaveExploits1References8Affected Software1
PyPA
PyPA
added 2026/07/07 10:17 a.m.15 views

TensorFlow vulnerable to `CHECK` fail in `FakeQuantWithMinMaxVarsPerChannel`

ImpactIf FakeQuantWithMinMaxVarsPerChannel is given min or max tensors of a rank other than one, it results in a CHECK fail that can be used to trigger a denial of service attack.pythonimport tensorflow as tfnumbits = 8narrowrange = Falseinputs = tf.constant0, shape=4, dtype=tf.float32min =...

7.5CVSS7AI score0.00411EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/07 10:16 a.m.15 views

PYSEC-2026-2088

In Apache Airflow before 3.3.0, the REST API task-instance detail and listendpoints returned a deferred task's trigger kwargs without masking. When adeferred operator passed a secret for example a provider API key into itstrigger, any authenticated user with DAG-scoped task-instance read access...

6.5CVSS6.1AI score0.0041EPSS
SaveExploits0References3Affected Software1
PyPA
PyPA
added 2026/07/06 9:16 p.m.15 views

PYSEC-2026-2140

Crawl4AI is an open-source LLM-friendly web crawler and scraper. Prior to 0.9.0, the Docker API server applied its SSRF destination check on the non-streaming /crawl path but not on the streaming path. handlestreamcrawlrequest passed seed URLs straight to the crawler with no destination validatio...

8.6CVSS6.2AI score0.00262EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2026/07/06 9:16 p.m.15 views

PYSEC-2026-2139

Crawl4AI is an open-source LLM-friendly web crawler and scraper. Prior to 0.9.0, the Docker API server accepted request-supplied browserconfig.extraargs, which flowed into Chromium's launch arguments. An attacker could inject Chromium switches that replace a child-process launch command together...

10CVSS6.2AI score0.00534EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2026/07/06 8:16 p.m.15 views

PYSEC-2026-2305

vLLM is an inference and serving engine for large language models. From 0.22.0 to 0.23.0, the /v1/audio/transcriptions and /v1/audio/translations routes call request.file.read to fully materialize an uploaded audio file into memory before vLLM checks the documented VLLMMAXAUDIOCLIPFILESIZEMB...

6.5CVSS6.1AI score0.00289EPSS
SaveExploits0References3Affected Software1
PyPA
PyPA
added 2026/07/06 8:3 a.m.15 views

Incorrect handling of invalid surrogate pair characters

ImpactWhat kind of vulnerability is it? Who is impacted?Anyone parsing JSON from an untrusted source is vulnerable.JSON strings that contain escaped surrogate characters not part of a proper surrogate pair were decoded incorrectly. Besides corrupting strings, this allowed for potential key...

7.5CVSS7AI score0.02298EPSS
SaveExploits1References8Affected Software1
PyPA
PyPA
added 2026/07/06 8:3 a.m.15 views

Django REST framework XSS Vulnerability

Django REST framework aka django-rest-framework before 3.9.1 allows XSS because the default DRF Browsable API view templates disable autoescaping...

6.1CVSS6.4AI score0.00734EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/06 8:3 a.m.15 views

Potential double free of buffer during string decoding

ImpactWhat kind of vulnerability is it? Who is impacted?When an error occurs while reallocating the buffer for string decoding, the buffer gets freed twice.Due to how UltraJSON uses the internal decoder, this double free is impossible to trigger from Python. PatchesHas the problem been patched?...

5.9CVSS6.8AI score0.01694EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/06 8:3 a.m.15 views

Missing validation crashes `QuantizeAndDequantizeV4Grad`

ImpactThe implementation of tf.rawops.QuantizeAndDequantizeV4Grad does not fully validate the input arguments. This results in a CHECK-failure which can be used to trigger a denial of service attack:pythonimport tensorflow as tftf.rawops.QuantizeAndDequantizeV4Grad gradients=tf.constant1,...

5.5CVSS6.2AI score0.0034EPSS
SaveExploits1References11Affected Software1
PyPA
PyPA
added 2026/07/06 8:3 a.m.15 views

Zope Command Execution Vulnerability

Unspecified vulnerability in Zope 2.12.x and 2.13.x, as used in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2, allows remote attackers to execute arbitrary commands via vectors related to the p class in OFS/misc.py and the use of Python modules...

9.3CVSS6.2AI score0.78332EPSS
SaveExploits15References14Affected Software1
PyPA
PyPA
added 2026/07/06 8:3 a.m.15 views

Plone anonymous access to sub-objects in CMFEditions where KwAsAttributes classes were publishable

The CMFEditions component 2.x in Plone 4.0.x through 4.0.9, 4.1, and 4.2 through 4.2a2 does not prevent the KwAsAttributes classes from being publishable, which allows remote attackers to access sub-objects via unspecified vectors, a different vulnerability than CVE-2011-3587...

9.3CVSS6AI score0.01975EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/06 8:3 a.m.15 views

OpenStack Compute (Nova) allows remote authenticated users to gain privileges via API requests

The Nova EC2 API security group implementation in OpenStack Compute Nova 2013.1 before 2013.2.4 and icehouse before icehouse-rc2 does not enforce RBAC policies for 1 addrules, 2 removerules, 3 destroy, and other unspecified methods in compute/api.py when using non-default policies, which allows...

7.7CVSS6AI score0.01647EPSS
SaveExploits1References10Affected Software1
PyPA
PyPA
added 2026/07/06 8:3 a.m.15 views

OpenStack Object Storage (Swift) Sensitive Data Exposure

OpenStack Object Storage Swift before 2.4.0 allows attackers to obtain sensitive information via a PUT tempurl and a DLO object manifest that references an object in another container...

5CVSS7AI score0.02605EPSS
SaveExploits0References13Affected Software1
PyPA
PyPA
added 2026/07/06 8:3 a.m.15 views

Openstack DBaaS (Trove) Improper Link Resolution Before File Access

The writeconfig function in trove/guestagent/datastore/experimental/mongodb/service.py, resetconfiguration function in trove/guestagent/datastore/experimental/postgresql/service/config.py, writeconfig function in trove/guestagent/datastore/experimental/redis/service.py, writemycnf function in...

5.5CVSS6.1AI score0.00459EPSS
SaveExploits0References16Affected Software1
PyPA
PyPA
added 2026/07/06 8:3 a.m.15 views

simplejson before 2.6.1 vulnerable to array index error

Array index error in the scanstring function in the json module in Python 2.7 through 3.5 and simplejson before 2.6.1 allows context-dependent attackers to read arbitrary process memory via a negative index value in the idx argument to the rawdecode function...

5.9CVSS6.8AI score0.08125EPSS
SaveExploits1References13Affected Software1
PyPA
PyPA
added 2026/07/06 8:3 a.m.15 views

OpenStack Nova instance migration process does not stop when instance is deleted

OpenStack Compute nova 2015.1 through 2015.1.1, 2014.2.3, and earlier does not stop the migration process when the instance is deleted, which allows remote authenticated users to cause a denial of service disk, network, and other resource consumption by resizing and then deleting an instance...

6.8CVSS7.1AI score0.03451EPSS
SaveExploits0References17Affected Software1
PyPA
PyPA
added 2026/07/02 2:13 p.m.15 views

SaltStack RSA Key Generation allows remote users to decrypt communications

SaltStack RSA Key Generation allows remote users to decrypt communications...

8.1CVSS7.2AI score0.01945EPSS
SaveExploits0References10Affected Software1
PyPA
PyPA
added 2026/07/02 2:13 p.m.15 views

Mercurial Directory traversal vulnerability

Directory traversal vulnerability in patch.py in Mercurial before 1.0.2 allows user-assisted attackers to modify arbitrary files via ".." dot dot sequences in a patch file...

6.8CVSS7.3AI score0.01885EPSS
SaveExploits3References17Affected Software1
PyPA
PyPA
added 2026/07/02 2:13 p.m.15 views

Plone credentials stored in session cookie

Plone CMS 3.1.x uses invariant data a client username and a server secret when calculating an HMAC-SHA1 value for an authentication cookie, which makes it easier for remote attackers to gain permanent access to an account by sniffing the network...

4.3CVSS6AI score0.0113EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/02 2:13 p.m.15 views

MoinMoin Improper Access Control

macroGetval in wikimacro.py in MoinMoin 1.5.8 and earlier does not properly enforce ACLs, which allows remote attackers to read protected pages. The issue has been fixed on 4a7de0173734...

5CVSS6AI score0.02005EPSS
SaveExploits0References16Affected Software1
PyPA
PyPA
added 2026/07/02 2:13 p.m.15 views

MoinMoin Insertion of Sensitive Information into Log File

An information leak was discovered in MoinMoin's debug reporting version 1.5.7, which could expose information about the versions of software running on the host system. MoinMoin administrators can add "showtraceback=0" to their site configurations to disable debug tracebacks...

5CVSS5.9AI score0.01284EPSS
SaveExploits0References9Affected Software1
PyPA
PyPA
added 2026/07/02 2:13 p.m.15 views

Zope XSS Vulnerability

Cross-site scripting XSS vulnerability in Zope 2.8.x before 2.8.12, 2.9.x before 2.9.12, 2.10.x before 2.10.11, 2.11.x before 2.11.6, and 2.12.x before 2.12.3, 3.1.1 through 3.4.1. allows remote attackers to inject arbitrary web script or HTML via vectors related to the way error messages perform...

6.1CVSS6.5AI score0.0195EPSS
SaveExploits0References13Affected Software1
PyPA
PyPA
added 2026/07/02 2:13 p.m.15 views

Out of bounds read in Tensorflow

ImpactThe TFG dialect of TensorFlow MLIR makes several assumptions about the incoming GraphDef before converting it to the MLIR-based dialect.If an attacker changes the SavedModel format on disk to invalidate these assumptions and the GraphDef is then converted to MLIR-based IR then they can caus...

8.8CVSS6.2AI score0.00142EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/02 2:13 p.m.15 views

Out-of-bounds Write in OpenCV

In opencv calls that use libpng, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges required. User interaction is not required for exploitation. Product: AndroidVersions: Android-10Android...

7.8CVSS7.2AI score0.00293EPSS
SaveExploits0References9Affected Software1
PyPA
PyPA
added 2026/07/02 2:13 p.m.15 views

Cross-site scripting vulnerability in TinyMCE plugins

ImpactA cross-site scripting XSS vulnerability was discovered in the URL processing logic of the image and link plugins. The vulnerability allowed arbitrary JavaScript execution when updating an image or link using a specially crafted URL. This issue only impacted users while editing and the...

6.1CVSS6.5AI score0.00956EPSS
SaveExploits1References8Affected Software1
PyPA
PyPA
added 2026/07/02 2:13 p.m.15 views

Out-of-bounds Read in OpenCV

An out-of-bounds read was discovered in OpenCV before 4.1.1 OpenCV-Python before 4.1.0.25. Specifically, variable coarsestscale is assumed to be greater than or equal to finestscale within the calc/oclcalc functions in disflow.cpp. However, this is not true when dealing with small images, leading...

6.5CVSS6.3AI score0.01742EPSS
SaveExploits1References8Affected Software1
PyPA
PyPA
added 2026/07/02 2:13 p.m.15 views

Memory leak in Nanopb

ImpactDecoding specifically formed message can leak memory if dynamic allocation is enabled and an oneof field contains a static submessage that contains a dynamic field, and the message being decoded contains the submessage multiple times. This is rare in normal messages, but it is a concern whe...

7.5CVSS6.7AI score0.0261EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/07/01 10:16 p.m.15 views

PYSEC-2026-613

Wagtail is an open source content management system built on Django. In versions prior to 7.0.8, 7.3.3 and 7.4.2, an authenticated admin user can trigger expensive rendition processing with purposefully crafted filter specs resulting in potentially service degradation. The vulnerability is not...

4.3CVSS5.8AI score0.0022EPSS
SaveExploits0References1Affected Software1
PyPA
PyPA
added 2026/06/30 11:17 p.m.15 views

PYSEC-2026-798

Crawl4AI before 0.8.7 contains an arbitrary JavaScript execution vulnerability in the Docker API server's /executejs endpoint, which accepts and executes arbitrary user-supplied JavaScript in the server's browser context with --disable-web-security enabled. An attacker can execute arbitrary...

9.2CVSS6.3AI score0.00334EPSS
SaveExploits0References3Affected Software1
PyPA
PyPA
added 2026/06/30 8:12 p.m.15 views

Malicious code in executor-http (PyPI)

Part of the "Hades" wave of the Shai-Hulud supply-chain campaign. On 2026-06-08,malicious phantom releases of executor-http were published to PyPI using stolencredentials. The package executes a bundled JavaScript payload via the Bunruntime on import that harvests and exfiltrates credentials and...

5.9AI score
SaveExploits0References3Affected Software1
PyPA
PyPA
added 2026/06/29 4:24 p.m.15 views

Malicious code in nhmpy (PyPI)

Part of the "Hades" wave of the Shai-Hulud supply-chain campaign. On 2026-06-08,malicious phantom releases of nhmpy were published to PyPI using stolencredentials. The package executes a bundled JavaScript payload via the Bunruntime on import that harvests and exfiltrates credentials and...

5.9AI score
SaveExploits0References3Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.15 views

praisonai-platform: Any workspace member can add arbitrary user as owner via POST /workspaces/{id}/members

SummaryType: Privilege escalation / cross-tenant member injection. The POST /workspaces/workspaceid/members endpoint is gated only by requireworkspacememberworkspaceid default minrole="member" and forwards the request body's userid and role straight into MemberService.addworkspaceid, userid, role...

9.6CVSS6AI score0.00209EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.15 views

Codechecker has an authentication bypass for certain API calls

SummaryAuthentication bypass occurs when the URL ends with Authentication with certain function calls. This bypass allows assigning arbitrary permissions to any existing user in CodeChecker. DetailsThe following functions are affected under the Authentication endpoint: getAuthorisedNames,...

10CVSS6.2AI score0.00447EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.15 views

FireFighter has unauthenticated SSRF in its Raid jira_bot endpoint that allows IAM credential theft

Impact The POST /api/v2/firefighter/raid/jirabot endpoint CreateJiraBotView is reachable without authentication permissionclasses = permissions.AllowAny. Its attachments payload is fetched server-side via httpx.get with no URL validation, then uploaded as an attachment on the Jira ticket that get...

9.9CVSS6.2AI score0.00272EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.15 views

llm CLI tool contains a code injection vulnerability via `--functions` command-line argument

The llm CLI tool thru 0.27.1 contains a critical code injection vulnerability via its --functions command-line argument. This argument is intended to allow users to provide custom Python function definitions. However, the tool directly executes the provided code using the unsafe exec function...

9.8CVSS6.5AI score0.00327EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.15 views

SGLang: Unauthenticated RCE via --enable-custom-logit-processor

SGLang's multimodal generation runtime is vulnerable to unauthenticated remote code execution when the --enable-custom-logit-processor option is enabled, as Python objects loaded via dill.loads will be deserialized without validation...

9.8CVSS6.6AI score0.00585EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.15 views

PraisonAI has an incomplete fix for CVE-2026-34935 - OS Command Injection

SummaryThe fix for PraisonAI's MCP command handling does not add a command allowlist or argument validation to parsemcpcommand, allowing arbitrary executables like bash, python, or /bin/sh with inline code execution flags to pass through to subprocess execution. Affected Package- Ecosystem: PyPI-...

9.8CVSS6.8AI score0.00824EPSS
SaveExploits2References7Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.15 views

Marimo: Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass

SummaryMarimo 19.6k stars has a Pre-Auth RCE vulnerability. The terminal WebSocket endpoint /terminal/ws lacks authentication validation, allowing an unauthenticated attacker to obtain a full PTY shell and execute arbitrary system commands.Unlike other WebSocket endpoints e.g., /ws that correctly...

9.8CVSS7.6AI score0.96576EPSS
SaveExploits18References10Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.15 views

Remote Code Execution due to Full Controled File Write in mlflow

The mlflow web server includes tools for tracking experiments, packaging code into reproducible runs, and sharing and deploying models. As this vulnerability allows to write / overwrite any file on the file system, it gives a lot of ways to archive code execution like overwriting /home//.bashrc. ...

10CVSS7.6AI score0.47594EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.15 views

Ray has arbitrary code execution via jobs submission API

Anyscale Ray allows a remote attacker to execute arbitrary code via the job submission API. NOTE: the vendor's position is that this report is irrelevant because Ray, as stated in its documentation, is not intended for use outside of a strictly controlled network environment...

9.8CVSS7.4AI score0.83942EPSS
SaveExploits6References17Affected Software1
Total number of security vulnerabilities5000