Lucene search
+L
PypaMost viewed

7218 matches found

PyPA
PyPA
added 2026/07/07 4:3 p.m.22 views

pypdf has possible Infinite Loop when processing outlines/bookmarks

ImpactAn attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires accessing the outlines/bookmarks. PatchesThis has been fixed in pypdf 6.6.2. WorkaroundsIf projects cannot upgrade yet, consider applying the changes from PR 3610...

5.1CVSS5.8AI score0.00388EPSS
SaveExploits2References8Affected Software1
PyPA
PyPA
added 2026/07/07 4:3 p.m.22 views

Sentencepiece has a a heap overflow issue

Invalid memory access in Sentencepiece versions less than 0.2.1 when using a vulnerable model file, which is not created in the normal training procedure...

8.5CVSS6AI score0.00163EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 4:3 p.m.22 views

AIOHTTP vulnerable to DoS through chunked messages

SummaryHandling of chunked messages can result in excessive blocking CPU usage when receiving a large number of chunks. ImpactIf an application makes use of the request.read method in an endpoint, it may be possible for an attacker to cause the server to spend a moderate amount of blocking CPU ti...

8.7CVSS5.9AI score0.00351EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/07 4:3 p.m.22 views

arcade-mcp-server Has Default Hardcoded Worker Secret That Allows Full Unauthorized Access to All HTTP MCP Worker Endpoints

SummaryThe arcade-mcp HTTP server uses a hardcoded default worker secret "dev" that is never validated or overridden during normal server startup. As a result, any unauthenticated attacker who knows this default key can forge valid JWTs and fully bypass the FastAPI authentication layer. This gran...

6.5CVSS6.1AI score0.00315EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/07 4:3 p.m.22 views

trytond does not enforce access rights for data export

Tryton trytond 6.0 before 7.6.11 does not enforce access rights for data export. This is fixed in 7.6.11, 7.4.21, 7.0.40, and 6.0.70...

6.5CVSS5.9AI score0.00232EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 4:3 p.m.22 views

Keras Directory Traversal Vulnerability

SummaryKeras's keras.utils.getfile function is vulnerable to directory traversal attacks despite implementing filtersafepaths. The vulnerability exists because extractarchive uses Python's tarfile.extractall method without the security-critical filter="data" parameter. A PATHMAX symlink resolutio...

9.8CVSS6AI score0.00584EPSS
SaveExploits0References9Affected Software1
PyPA
PyPA
added 2026/07/07 4:3 p.m.22 views

Arbitrary Code Execution in pdfminer.six via Crafted PDF Input

Summarypdfminer.six will execute arbitrary code from a malicious pickle file if provided with a malicious PDF file. The CMapDB.loaddata function in pdfminer.six uses pickle.loads to deserialize pickle files. These pickle files are supposed to be part of the pdfminer.six distribution stored in the...

8.6CVSS6.6AI score0.00309EPSS
SaveExploits7References9Affected Software1
PyPA
PyPA
added 2026/07/07 4:3 p.m.22 views

BBOT's gitlab.py exposes globally configured "gitlab" API key

Summarybbot's gitlab.py sends the user's "gitlab" API key to on-premise GitLab instances.If a user has configured a gitlab.com API key using this mechanism, it may be leaked to an attacker-controlled server. ImpactA user with a "gitlab" API key configured who uses bbot to scan a malicious webserv...

4.7CVSS5.9AI score0.00213EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 4:3 p.m.22 views

Starlette vulnerable to O(n^2) DoS via Range header merging in ``starlette.responses.FileResponse``

SummaryAn unauthenticated attacker can send a crafted HTTP Range header that triggers quadratic-time processing in Starlette's FileResponse Range parsing/merging logic. This enables CPU exhaustion per request, causing denial‑of‑service for endpoints serving files e.g., StaticFiles or any use of...

7.5CVSS6AI score0.00638EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/07 4:3 p.m.22 views

python-ldap is Vulnerable to Improper Encoding or Escaping of Output and Improper Null Termination

Summaryldap.dn.escapednchars escapes \x00 incorrectly by emitting a backslash followed by a literal NUL byte instead of the RFC-4514 hex form \00. Any application that uses this helper to construct DNs from untrusted input can be made to consistently fail before a request is sent to the LDAP serv...

6.9CVSS6.1AI score0.00427EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/07/07 2:34 p.m.22 views

LiteLLM Reveals Portion of API Key via a Logging File

In berriai/litellm before version 1.44.12, the litellm/litellmcoreutils/litellmlogging.py file contains a vulnerability where the API key masking code only masks the first 5 characters of the key. This results in the leakage of almost the entire API key in the logs, exposing a significant amount ...

7.5CVSS7.2AI score0.00708EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
added 2026/07/07 11:45 a.m.22 views

Remote Code Execution in Custom Integration Upload

ImpactThe Fides webserver API allows custom integrations to be uploaded as a ZIP file. This ZIP file must contain YAML files, but Fides can be configured to also accept the inclusion of custom Python code in it. The custom code is executed in a restricted, sandboxed environment, but the sandbox c...

8.8CVSS7.4AI score0.00837EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/07 10:17 a.m.22 views

No protection against brute-force attacks on login page

ImpactPrevious versions of Kiwi TCMS do not impose rate limits which makes it easier to attempt brute-force attacks against the login page. PatchesUsers should upgrade to v12.0 or later. WorkaroundsUsers may install and configure a rate-limiting proxy in front of Kiwi TCMS. For example nginx...

9.8CVSS7.2AI score0.00902EPSS
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/02 2:13 p.m.22 views

Zope Server vulnerable to DoS via header injection

Zope is a Web application server for Linux. Zope versions 2.0 through 2.5.1 b1 are vulnerable to a denial of service attack, caused by a vulnerability that occurs when using the "through the Web code" capability. A remote attacker could inject malicious headers into a response to cause the...

5CVSS6AI score0.01467EPSS
SaveExploits0References10Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.22 views

Apache Airflow Google Provider Improper Input Validation vulnerability

Improper Input Validation vulnerability in the Apache Airflow Google Provider. This issue affects Apache Airflow Google Provider versions before 8.10.0...

9.8CVSS7.2AI score0.01583EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/06/29 11:50 a.m.22 views

NASA AIT-Core vulnerable to remote code execution

An issue in NASA AIT-Core v2.5.2 allows attackers to execute arbitrary code via a crafted packet...

9.3CVSS6.3AI score0.00438EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
added 2026/05/10 1:16 p.m.22 views

PYSEC-2026-131

Sentry 8.2.0 contains a remote code execution vulnerability that allows authenticated superusers to execute arbitrary commands by injecting malicious pickle-serialized objects through the audit log entry data parameter. Attackers can submit crafted POST requests to the admin audit log endpoint wi...

8.8CVSS6.7AI score0.00927EPSS
SaveExploits1References4Affected Software1
PyPA
PyPA
added 2026/04/23 7:17 p.m.22 views

PYSEC-2026-88

Mako is a template library written in Python. Prior to 1.3.11, TemplateLookup.gettemplate is vulnerable to path traversal when a URI starts with // e.g., //../../../secret.txt. The root cause is an inconsistency between two slash-stripping implementations. Any file readable by the process can be...

8.7CVSS5.8AI score0.00361EPSS
SaveExploits0References1Affected Software1
PyPA
PyPA
added 2026/03/27 2:53 p.m.22 views

Two telnyx versions published containing credential harvesting malware

After an API token exposure from an exploited Trivy dependency,two new releases of telnyx were uploaded to PyPI containing automatically activated malware, harvesting sensitive credentials and files, and exfiltrating to a remote API. Compromised versions execute code during importing the telnyx...

6.1AI score
SaveExploits0References4Affected Software1
PyPA
PyPA
added 2025/09/25 4:15 p.m.22 views

PYSEC-2025-206

pytorch v2.8.0 was discovered to contain an integer overflow in the component torch.nantonum-.long...

5.3CVSS5.8AI score0.00294EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
added 2025/03/25 9:15 a.m.22 views

PYSEC-2025-164

A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been classified as critical. Affected is the function SceneCombiner::MergeScenes of the file code/AssetLib/LWS/LWSLoader.cpp of the component LWS File Handler. The manipulation leads to out-of-bounds read. It is possible ...

8.8CVSS6.1AI score0.00462EPSS
SaveExploits1References5Affected Software1
PyPA
PyPA
added 2022/10/11 10:15 p.m.22 views

PYSEC-2022-43022

The d8s-asns package for Python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. The backdoor is the democritus-html package. The affected version is 0.1.0...

9.8CVSS7AI score0.01219EPSS
SaveExploits1References4Affected Software1
PyPA
PyPA
added 2020/11/18 10:15 p.m.22 views

PYSEC-2020-215

Jupyter Notebook before version 6.1.5 has an Open redirect vulnerability. A maliciously crafted link to a notebook server could redirect the browser to a different website. All notebook servers are technically affected, however, these maliciously crafted links can only be reasonably made for know...

6.1CVSS6.8AI score0.01213EPSS
SaveExploits0References3Affected Software1
PyPA
PyPA
added 2026/07/23 11:41 a.m.22 views

LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks

ImpactLiteLLM's Custom Code Guardrails production create/update paths did not apply the same sandboxing and validation used by the test endpoint.A privileged user with access to create or update guardrails could submit custom Python code that executed in the LiteLLM proxy environment. In...

7.2CVSS6.3AI score0.00355EPSS
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/23 11:41 a.m.22 views

Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()

SummaryPdfParser.PdfStream.decode in Pillow's PdfParser.py calls zlib.decompress with the bufsize parameter set to the value of the PDF stream's Length field, without any upper bound on the actual decompressed output size. Python's zlib.decompress bufsize argument is an initial output buffer hint...

7.5CVSS7.6AI score0.00385EPSS
SaveExploits1References8Affected Software1
PyPA
PyPA
added 2026/07/23 11:41 a.m.22 views

LightRAG: CORS Wildcard + Credentials Enables Any-Origin Credentialed Requests

SummaryThe server defaults to CORSORIGINS= combined with allowcredentials=True. Starlette's CORSMiddleware echoes the requesting origin in preflight responses when credentials are enabled, meaning every origin is effectively whitelisted for credentialed cross-origin requests. Any malicious websit...

9.3CVSS5.3AI score0.00305EPSS
SaveExploits0References10Affected Software1
PyPA
PyPA
added 2026/07/23 11:41 a.m.22 views

Flask-Reuploaded: Extension-denylist bypass via case-folding asymmetry in name-override path (incomplete-fix variant of CVE-2026-27641)

Header| Field | Value ||---|---|| Title | Extension-denylist bypass via case-folding asymmetry in name-override path incomplete-fix variant of CVE-2026-27641 || Project | Flask-Reuploaded flaskuploads || Affected | extension"shell.php" = "php" - extensionallowed"php" - DENY correctname-override...

9.8CVSS5.8AI score0.01046EPSS
SaveExploits2References6Affected Software1
PyPA
PyPA
added 2026/07/23 11:41 a.m.22 views

plone.app.textfield: Stored XSS by spoofing mime type

ImpactA stored XSS affecting RichText fields. RichTextValue.output returns the raw, unsanitized stored value whenever the stored mimeType equals the outputMimeType. Because the safe-HTML output type text/x-html-safe is the type that signifies "already sanitized", any value whose stored mimeType...

4.3CVSS5.3AI score
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/07/23 11:41 a.m.22 views

sh _uid does not drop supplementary groups (incomplete privilege drop)

ImpactThe uid option performed an incomplete privilege drop on Linux/Unix-like systems.When sh was run from a process with elevated privileges, such as root, and a command was launched with uid=, the child process changed its UID and primary GID but did not reset its supplementary groups. As a...

7.9CVSS5.4AI score
SaveExploits0References6Affected Software1
PyPA
PyPA
added 2026/07/23 11:41 a.m.22 views

MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal

SummaryIn affected versions, the SSE and Streamable HTTP server transports routed incoming requests to an existing session based only on the session identifier, without verifying that the request was authenticated as the same principal that created the session. Anyone who learned or guessed a...

7.1CVSS5.3AI score0.00319EPSS
SaveExploits0References10Affected Software1
PyPA
PyPA
added 2026/07/23 11:41 a.m.22 views

Pixeldrain API key shared with unverified thirdparty sites

SummaryWhen processing Pixeldrain URLs, cyberdrop-dl-patched could send an Authorization header that includes the user's API key to unverified hosts. DetailsPixeldrain offers several alternative domains in case the user's ISP blocks the primary domain. To support this, requests made by...

6.9CVSS5.3AI score
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/23 11:41 a.m.22 views

NetLicensing-MCP: Unauthenticated Use of Server-Side NetLicensing API Key in HTTP Mode

Unauthenticated Use of Server-Side NetLicensing API Key in HTTP Mode SummaryWhen netlicensing-mcp is run in HTTP transport mode, the ApiKeyMiddleware fails to enforce authentication: requests that carry no client API key are unconditionally forwarded to the next handler server.py:1427. The...

8.1CVSS5.5AI score
SaveExploits0References7Affected Software1
PyPA
PyPA
added 2026/07/23 11:41 a.m.22 views

praisonai-platform: default JWT signing secret 'dev-secret-change-me' enables token forgery

praisonai-platform: default JWT signing secret dev-secret-change-meResearcher: Kai Aizen — SnailSploit @SnailSploit, Adversarial & Offensive Security ResearchTarget: https://github.com/MervinPraison/PraisonAI---Package: praisonai-platform on PyPILatest version and version tested: 0.1.4, current a...

9.8CVSS5.4AI score
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/07/23 11:41 a.m.22 views

DIRAC is vulnerable to RCE in RequestManager due to eval on untrusted input

SummaryAn remote code execution vulnerability exists in RequestManager due to the use of eval on untrusted input that allows any authenticated user to run code/commands on the DIRAC server as the system user running the DIRAC services. DetailsThe exportgetRequestCountersWeb function is callable b...

9.9CVSS6.3AI score
SaveExploits0References8Affected Software1
PyPA
PyPA
added 2026/07/23 11:41 a.m.22 views

PraisonAI: IMAP Command Injection via Unsanitized Email Search Parameters

SummaryThe email search tool in src/praisonai-agents/praisonaiagents/tools/emailtools.py constructs IMAP SEARCH commands by interpolating LLM-controlled parameters fromaddr, subject, query directly into IMAP protocol strings using f-string formatting with double-quote delimiters. An attacker who...

8.1CVSS5.8AI score
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/07/23 11:41 a.m.22 views

PraisonAI GitHub template cache path traversal allows outside-cache file write and directory deletion

SummaryPraisonAI's template loader accepts GitHub template URIs with refs, for examplegithub:owner/repo/[email protected]. The resolver stores the user-controlledtemplate path and ref verbatim, and the cache layer later joins those values into/.praison/cache/templates/github//// withoutnormalizing...

8.1CVSS5.6AI score
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/07/23 11:41 a.m.22 views

PraisonAI: Unauthenticated RCE via Jobs API + Approval Bypass

Unauthenticated Remote Code Execution via Jobs API and Approval Bypass in PraisonAI Summary An unauthenticated attacker can execute arbitrary OS commands on any server runningthe PraisonAI Jobs API by submitting a crafted workflow YAML. The attack chains twoweaknesses: the /api/v1/runs endpoint...

9.8CVSS7.1AI score
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/07/23 11:41 a.m.21 views

PraisonAI: SpiderTools redirect-target SSRF protection bypass

SpiderTools redirect-target SSRF protection bypass SummarySpiderTools.scrapepage validates the initial URL and rejects directloopback, private, link-local, metadata, and internal hostnames. It then callsrequests.Session.get without disabling automatic redirects or validatingredirect Location...

6.5CVSS6.3AI score
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/07/23 11:41 a.m.21 views

PraisonAI dynamic-context artifact tools read arbitrary host files outside artifact storage

PraisonAI dynamic-context artifact tools read arbitrary host files outside artifact storage SummaryPraisonAI's Dynamic Context Discovery feature exposes artifact helper toolsthrough ctx.gettools:pythonctx = setupdynamiccontextagent = Agent instructions="You are a data analyst.", tools=ctx.gettool...

7.5CVSS5.3AI score
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/07/23 11:41 a.m.21 views

PraisonAI: Compute-bridged file tools allow shell command injection

Compute-bridged file tools allow shell command injection SummaryLocalManagedAgent / SandboxedAgent compute bridging wrapsreadfile, listfiles, and writefile when a compute provider isattached. The bridge converts those file operations into shell command stringsusing raw path arguments, then sends...

8.8CVSS6.1AI score
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/07/23 11:41 a.m.21 views

OpenStack oslo.messaging does not verify RabbitMQ broker hostname during TLS handshake

An issue was discovered in OpenStack oslo.messaging 1.0.0 through 17.3.0. The oslo.messaging RabbitMQ driver does not perform TLS hostname verification when connecting to the message broker. When sslcafile is configured, the driver enables certificate chain validation but does not pass the expect...

7.4CVSS5.2AI score0.0016EPSS
SaveExploits0References9Affected Software1
PyPA
PyPA
added 2026/07/23 11:41 a.m.21 views

jupyter-server is vulnerable to CORS origin validation bypass when the `allow_origin_pat` configuration is used

A vulnerability in jupyter-server versions 1.12.0 through 2.17.0 allows an attacker to bypass CORS origin validation when the alloworiginpat configuration is used. The issue arises from the use of re.match for validating the Origin header, which only anchors at the start of the string. This allow...

8.8CVSS6.4AI score0.00197EPSS
SaveExploits1References5Affected Software1
PyPA
PyPA
added 2026/07/14 5:17 p.m.21 views

PYSEC-2026-3455

pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER decoder shared by the CER and DER codecs parses long-form tags by accumulating continuation octets without an upper bound on the tag ID size, allowing a crafted input to force construction of an arbitrarily large integer with C...

7.5CVSS5.2AI score0.00349EPSS
SaveExploits0References3Affected Software1
PyPA
PyPA
added 2026/07/13 3:46 p.m.21 views

Rattler vulnerable to package cache path traversal via conda package build string

rattlercache and py-rattler were vulnerable to package-cache path traversal when handling package metadata from conda channels.During cache materialization, the rattercache code used the package record build string as part of a cache key that was joined into a filesystem path. A malicious or...

5.4CVSS6.1AI score0.00033EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/07/13 3:46 p.m.21 views

BabelDOC: Arbitrary Code Execution via CMap Pickle Deserialization in babeldoc/pdfminer/cmapdb.py

Arbitrary Code Execution via CMap Pickle Deserialization in babeldoc/pdfminer/cmapdb.py SummaryBabelDOC's vendored PDF parser babeldoc/pdfminer/cmapdb.py deserializes untrusted pickle data when loading CMap files. The loaddata method strips only NUL bytes from a PDF-controlled CMap name, then...

7.8CVSS6.6AI score
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/07/13 3:46 p.m.21 views

Soup Sieve: Regular Expression Denial of Service (ReDoS) via Selector Parser

SummaryThe CSS selector parser in soupsieve the CSS selector engine for Beautiful Soup 4 contains a regular expression vulnerable to catastrophic backtracking. When processing an attribute selector with an unterminated quoted value, the VALUE regex pattern in cssparser.py enters exponential...

7.5CVSS6AI score0.00522EPSS
SaveExploits1References5Affected Software1
PyPA
PyPA
added 2026/07/13 3:46 p.m.21 views

Serena: Unauthenticated Flask dashboard on fixed port enables DNS rebinding → memory poisoning → RCE

SummarySerena's built-in web dashboard exposes an unauthenticated Flask API on a fixed, predictable port TCP 24282, hardcoded as 0x5EDA in constants.py. The server has no authentication, no CSRF protection, and no Host header validation. A DNS rebinding attack allows a malicious webpage to reach...

8.3CVSS6.6AI score0.00291EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/07/13 3:46 p.m.21 views

ONNX has Null Pointer Dereference in Upsample Version Converter Adapter (Zero Inputs)

SummaryNull pointer dereference SIGSEGV in Upsample67::adaptupsample67 onnx/versionconverter/adapters/upsample67.h:31 when convertversion processes a model with an Upsample node that has zero inputs. The adapter accesses node-inputs0-sizes without checking input count. 107-byte PoC crashes on...

5.5CVSS6.1AI score0.00183EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
added 2026/07/13 3:46 p.m.21 views

Langroid: Sandbox Escape to Remote Code Execution via Incomplete `eval()` Mitigation in TableChatAgent

Advisory DetailsTitle: Sandbox Escape to Remote Code Execution via Incomplete eval Mitigation in TableChatAgentDescription: SummaryLangroid is vulnerable to a critical Sandbox Escape leading to Remote Code Execution RCE in its TableChatAgent and VectorStore capabilities. When these agents evaluat...

10CVSS6.4AI score0.00638EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
added 2026/07/13 3:46 p.m.21 views

motionEye's missing authentication on ActionHandler allows unauthenticated camera action execution

SummaryThe ActionHandler.post method in motionEye has no authentication decorator, allowing any unauthenticated attacker to trigger camera actions including snapshots, recording start/stop, and configured action scripts PTZ controls, alarm triggers, etc.. Vulnerability DetailsFile:...

5.3CVSS6.1AI score
SaveExploits0References5Affected Software1
Total number of security vulnerabilities5000