Lucene search
+L
PypaMost viewed

7218 matches found

PyPA
PyPA
•added 2026/06/29 11:50 a.m.•12 views

Radicale is vulnerable to directory traversal on Windows Filesystem Storage Backend component

The filesystem storage backend in Radicale before 1.1 on Windows allows remote attackers to read or write to arbitrary files via a crafted path, as demonstrated by /c:/file/ignore...

10CVSS7.4AI score0.02592EPSS
SaveExploits0References11Affected Software1
PyPA
PyPA
•added 2026/06/29 11:50 a.m.•12 views

OpenStack Neutron allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism

The IPTables firewall in OpenStack Neutron before 7.0.4 and 8.0.0 through 8.1.0 allows remote attackers to bypass an intended ICMPv6-spoofing protection mechanism and consequently cause a denial of service or intercept network traffic via a link-local source address...

9.1CVSS6.9AI score0.04248EPSS
SaveExploits1References13Affected Software1
PyPA
PyPA
•added 2026/06/29 11:50 a.m.•12 views

Server-Side Request Forgery in calibreweb

calibreweb prior to version 0.6.17 is vulnerable to server-side request forgery SSRF. This is due to an incomplete fix for CVE-2022-0339. The blacklist does not check for 0.0.0.0, which would result in a payload of 0.0.0.0 resolving to localhost...

9.8CVSS6.8AI score0.01304EPSS
SaveExploits2References6Affected Software1
PyPA
PyPA
•added 2026/06/29 11:50 a.m.•12 views

Session Fixation in ipsilon

A vulnerability in ipsilon 2.0 before 2.0.2, 1.2 before 1.2.1, 1.1 before 1.1.2, and 1.0 before 1.0.3 was found that allows attacker to log out active sessions of other users. This issue is related to how it tracks sessions, and allows an unauthenticated attacker to view and terminate active...

9.1CVSS7.1AI score0.02119EPSS
SaveExploits0References17Affected Software1
PyPA
PyPA
•added 2026/06/29 11:50 a.m.•12 views

OpenStack Murano Code Execution

OpenStack Murano before 1.0.3 liberty and 2.x before 2.0.1 mitaka, Murano-dashboard before 1.0.3 liberty and 2.x before 2.0.1 mitaka, and python-muranoclient before 0.7.3 liberty and 0.8.x before 0.8.5 mitaka improperly use loaders inherited from yaml.Loader when parsing MuranoPL and UI files,...

9.8CVSS7.6AI score0.03193EPSS
SaveExploits0References11Affected Software1
PyPA
PyPA
•added 2026/06/29 11:50 a.m.•12 views

OpenStack os-vif Ageing time of 0 disables linuxbridge MAC learning

In OpenStack os-vif 1.15.x before 1.15.2, and 1.16.0, a hard-coded MAC aging time of 0 disables MAC learning in linuxbridge, forcing obligatory Ethernet flooding of non-local destinations, which both impedes network performance and allows users to possibly view the content of packets for instance...

9.1CVSS7.2AI score0.02591EPSS
SaveExploits0References11Affected Software1
PyPA
PyPA
•added 2026/06/26 2:23 p.m.•12 views

Malicious code in ppkt2synergy (PyPI)

Part of the "Hades" wave of the Shai-Hulud supply-chain campaign. On 2026-06-08,malicious phantom releases of ppkt2synergy were published to PyPI using stolencredentials. The package executes a bundled JavaScript payload via the Bunruntime on import that harvests and exfiltrates credentials and...

5.8AI score
SaveExploits0References3Affected Software1
PyPA
PyPA
•added 2026/06/26 2:17 p.m.•12 views

Malicious code in phenopacket-store-toolkit (PyPI)

Part of the "Hades" wave of the Shai-Hulud supply-chain campaign. On 2026-06-08,malicious phantom releases of phenopacket-store-toolkit were published to PyPI using stolencredentials. The package executes a bundled JavaScript payload via the Bunruntime on import that harvests and exfiltrates...

5.8AI score
SaveExploits0References3Affected Software1
PyPA
PyPA
•added 2026/06/26 8:16 a.m.•12 views

PYSEC-2026-238

The Apache Airflow FTP provider's FTPSHook.getconn created an ftplib.FTPTLS connection but never called protp, so although the control channel was TLS-protected the data channel was transmitted in cleartext. Any deployment using FTPSHook or FTPSFileTransmitOperator to move files over FTPS exposed...

7.5CVSS5.8AI score0.00295EPSS
SaveExploits0References3Affected Software1
PyPA
PyPA
•added 2026/06/25 2:36 p.m.•12 views

Malicious code in embiggen (PyPI)

Part of the "Hades" wave of the Shai-Hulud supply-chain campaign. On 2026-06-08,malicious phantom releases of embiggen were published to PyPI using stolencredentials. The package executes a bundled JavaScript payload via the Bunruntime on import that harvests and exfiltrates credentials and...

5.8AI score
SaveExploits0References3Affected Software1
PyPA
PyPA
•added 2026/06/24 6:17 p.m.•12 views

PYSEC-2026-240

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.13.0 until 2.74.0, the USPTO patent XML parser used the standard xml.sax.parseString without protection against XML External Entity XXE attacks. An attacker could...

7.5CVSS5.9AI score0.0033EPSS
SaveExploits0References1Affected Software1
PyPA
PyPA
•added 2026/06/23 6:18 p.m.•12 views

PYSEC-2026-241

Home Assistant is open source home automation software that puts local control and privacy first. Prior to 2026.6.0, the Konnected integration registers an HTTP endpoint, KonnectedView homeassistant/components/konnected/init.py, that is marked as not requiring authentication requiresauth = False....

7.6CVSS5.8AI score0.00292EPSS
SaveExploits1References1Affected Software1
PyPA
PyPA
•added 2026/06/23 1:16 p.m.•12 views

PYSEC-0000-CVE-2026-56258

Crawl4AI before 0.8.8 contains an arbitrary file write vulnerability in the screenshot and PDF endpoints that allows unauthenticated attackers to write files outside the intended directory via symlink and time-of-check-time-of-use TOCTOU attacks on the outputpath parameter. Remote attackers can...

9.2CVSS6.4AI score0.0067EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2026/06/21 2:16 p.m.•12 views

PYSEC-2026-247

picklescan before 0.0.30 fails to detect cProfile.runctx function calls in pickle file reduce methods, allowing attackers to execute arbitrary code. Malicious pickle files bypass picklescan detection and execute remote code when loaded via pickle.load...

8.1CVSS6.2AI score0.00338EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
•added 2026/06/20 7:16 p.m.•12 views

PYSEC-2026-250

vLLM versions = 0.10.2 and 0.13.0 are missing sparse tensor validation in multimodal embeddings processing. Because PyTorch disables sparse tensor invariant checks by default, an attacker can submit crafted embedding requests with malformed negative or out-of-bounds tensor indices, when the...

8.8CVSS7AI score0.00923EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2026/06/12 6:16 p.m.•12 views

PYSEC-2026-217

MariaDB server is a community developed fork of MySQL server. In versions 3.3.18 and 3.4.8, an application that was taking non-validated user input, escaping it with mysqlrealescapestring and sending it to the database using text protocol and big5 character set was vulnerable to SQL injections,...

9.8CVSS5.5AI score0.00591EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2026/06/10 10:16 p.m.•12 views

PYSEC-2026-2191

kafka-python prior to 2.3.2 contains a denial-of-service vulnerability in SCRAM authentication handling that allows a malicious or machine-in-the-middle broker to freeze the client event loop by supplying an excessively large iteration count. In scram.py, ScramClient.processserverfirstmessage...

8.7CVSS6.1AI score0.00517EPSS
SaveExploits0References10Affected Software1
PyPA
PyPA
•added 2026/06/09 11:16 p.m.•12 views

PYSEC-2026-210

SQLFluff is a modular SQL linter and auto-formatter with support for multiple dialects and templated code. Prior to version 4.2.0, in deployments where untrusted users can provide SQL queries to be linted, an untrusted user can submit a malicious long query to any application using the parser to...

7.5CVSS5.5AI score0.00263EPSS
SaveExploits0References1Affected Software1
PyPA
PyPA
•added 2026/06/05 11:16 p.m.•12 views

PYSEC-0000-CVE-2026-45409

Internationalized Domain Names in Applications IDNA for Python provides support for Internationalized Domain Names in Applications IDNA and Unicode IDNA Compatibility Processing. In versions prior to 3.15, payloads such as "\u0660" N or "\u30fb" N + "\u6f22" utilize the validcontexto function pri...

6.9CVSS5.2AI score0.00408EPSS
SaveExploits0References1Affected Software1
PyPA
PyPA
•added 2026/06/04 12:16 p.m.•12 views

PYSEC-0000-CVE-2026-10803

A flaw has been found in MLflow up to 3.10.0. This issue affects the function mlflow.data.digestutils of the file mlflow/data/digestutils.py of the component Dataset Digest Computation. This manipulation causes use of weak hash. It is possible to launch the attack on the local host. The attack is...

3.6CVSS4.7AI score0.00103EPSS
SaveExploits1References7Affected Software1
PyPA
PyPA
•added 2026/06/03 2:16 p.m.•12 views

PYSEC-2026-214

daphne before 4.2.2 reconstructs a raw HTTP request from Twisted's parsed headers and feeds it to autobahn for WebSocket handshake processing. Twisted does not treat \x0b, \x0c, \x1c, \x1d, \x1e, or \x85 as header line separators, but autobahn decodes header values to str and calls splitlines. An...

5.3CVSS5.4AI score0.00172EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2026/06/01 9:16 a.m.•12 views

PYSEC-0000-CVE-2026-48726

A bug in Apache Airflow's auth manager logout handling left previously-issued JWT tokens valid after the user clicked logout in the UI: the logout flow for FabAuthManager and KeycloakAuthManager did not actually reach the underlying revoketoken call, so the JWT remained accepted by the API server...

6.5CVSS5.9AI score0.00382EPSS
SaveExploits0References3Affected Software1
PyPA
PyPA
•added 2026/05/28 7:16 p.m.•12 views

PYSEC-2026-601

An issue was discovered in OpenStack Keystone before 29.0.2. When combined with an application credential impersonation vulnerability, an attacker with the member role on a project can escalate to admin by chaining unrestricted application credentials with Keystone trusts. The impersonated token...

8.8CVSS6AI score0.00328EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
•added 2026/05/28 5:16 p.m.•12 views

PYSEC-2026-194

Synapse is an open source Matrix homeserver implementation. Prior to 1.152.1, in federated rooms, malicious homeservers can craft room events in such a way that prevents Synapse from providing full history to paginating clients. Clients could therefore fail to display room history. This...

5.1CVSS5.4AI score0.00369EPSS
SaveExploits0References1Affected Software1
PyPA
PyPA
•added 2026/05/27 9:16 p.m.•12 views

PYSEC-2026-2293

UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+. Prior to 5.12.1, when ujson.dump writes to a file-like object and the write operation raises an exception, the serialized JSON string object is not decremented, leaking memory. Each failed write operatio...

8.7CVSS6.1AI score0.00421EPSS
SaveExploits1References3Affected Software1
PyPA
PyPA
•added 2026/05/25 7:16 a.m.•12 views

PYSEC-2026-2220

A vulnerability in MLflow versions =3.10.1.dev0 allows unauthorized access to multipart upload MPU endpoints when the --serve-artifacts mode is enabled. The authorization logic does not enforce resource-level permission checks for /mlflow-artifacts/mpu/ endpoints, enabling attackers to overwrite...

9CVSS7.4AI score0.00345EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
•added 2026/04/10 3:16 a.m.•12 views

PYSEC-2026-202

An issue was discovered in OpenStack Keystone 14 through 26 before 26.1.1, 27.0.0, 28.0.0, and 29.0.0. Restricted application credentials can create EC2 credentials. By using a restricted application credential to call the EC2 credential creation API, an authenticated user with only a reader role...

5.3CVSS5.5AI score0.0022EPSS
SaveExploits1References4Affected Software1
PyPA
PyPA
•added 2026/04/08 9:17 p.m.•12 views

PYSEC-2026-36

cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 45.0.0 to before 46.0.7, if a non-contiguous buffer was passed to APIs which accepted Python buffers e.g. Hash.update, this could lead to buffer overflows. This vulnerability is fixed in...

9.8CVSS5.9AI score0.00652EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2026/04/08 1:16 p.m.•12 views

PYSEC-2026-111

A new API endpoint introduced in pretix 2025 that is supposed to return all check-in events of a specific event in fact returns all check-in events belonging to the respective organizer. This allows an API consumer to access information for all other events under the same organizer, even those th...

5.5CVSS5.8AI score0.00255EPSS
SaveExploits0References2Affected Software1
PyPA
PyPA
•added 2026/04/06 6:16 p.m.•12 views

PYSEC-2026-159

BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to 1.4.38, the Dockerfile generation function generatecontainerfile in src/bentoml/internal/container/generate.py uses an unsandboxed jinja2.Environment with the jinja2.ext.do extensio...

9.6CVSS6AI score0.00392EPSS
SaveExploits1References1Affected Software1
PyPA
PyPA
•added 2026/03/31 10:16 p.m.•12 views

PYSEC-2026-2115

The Claude SDK for Python provides access to the Claude API from Python applications. From version 0.86.0 to before version 0.87.0, the async local filesystem memory tool in the Anthropic Python SDK validated that model-supplied paths resolved inside the sandboxed memory directory, but then...

5.8CVSS6AI score0.00138EPSS
SaveExploits0References3Affected Software1
PyPA
PyPA
•added 2026/03/31 3:15 a.m.•12 views

PYSEC-2026-2193

LangChain is a framework for building agents and LLM-powered applications. Prior to version 1.2.22, multiple functions in langchaincore.prompts.loading read files from paths embedded in deserialized config dicts without validating against directory traversal or absolute path injection. When an...

7.5CVSS7.1AI score0.01204EPSS
SaveExploits2References8Affected Software1
PyPA
PyPA
•added 2026/03/22 1:16 a.m.•12 views

PYSEC-2026-38

Deluge 1.3.15 contains a denial of service vulnerability that allows local attackers to crash the application by supplying an excessively long string in the Webseeds field. Attackers can paste a buffer of 5000 bytes into the Webseeds field during torrent creation to trigger an application crash...

6.9CVSS6AI score0.00177EPSS
SaveExploits1References4Affected Software1
PyPA
PyPA
•added 2026/02/19 4:27 p.m.•12 views

PYSEC-2026-2181

Indico is an event management system that uses Flask-Multipass, a multi-backend authentication system for Flask. Versions prior to 3.3.10 are vulnerable to server-side request forgery. Indico makes outgoing requests to user-provides URLs in various places. This is mostly intentional and part of...

6.9CVSS6.1AI score0.00189EPSS
SaveExploits0References3Affected Software1
PyPA
PyPA
•added 2026/02/06 8:16 p.m.•12 views

PYSEC-2026-74

A flaw was found in Keylime. The Keylime registrar, since version 7.12.0, does not enforce client-side Transport Layer Security TLS authentication. This authentication bypass vulnerability allows unauthenticated clients with network access to perform administrative operations, including listing...

9.8CVSS5.7AI score0.05431EPSS
SaveExploits0References6Affected Software1
PyPA
PyPA
•added 2025/11/07 9:15 p.m.•12 views

PYSEC-2025-73

Datasette is an open source multi-tool for exploring and publishing data. In versions 0.65.1 and below and 1.0a0 through 1.0a19, deployed instances of Datasette include an open redirect vulnerability. Hits to the path //example.com/foo/bar/ the trailing slash is required will redirect the user to...

6.9CVSS5.7AI score0.00387EPSS
SaveExploits0References3
PyPA
PyPA
•added 2025/10/31 3:15 p.m.•12 views

PYSEC-2025-226

Kitware VTK Visualization Toolkit through 9.5.0 contains a heap use-after-free vulnerability in vtkGLTFDocumentLoader. The vulnerability manifests during mesh object copy operations where vector members are accessed after the underlying memory has been freed, specifically when handling GLTF files...

9.8CVSS5.7AI score0.00369EPSS
SaveExploits1References1Affected Software1
PyPA
PyPA
•added 2025/09/25 3:16 p.m.•12 views

PYSEC-2025-201

In PyTorch before 2.7.0, bitwiserightshift produces incorrect output for certain out-of-bounds values of the "other" argument...

5.3CVSS5.8AI score0.00423EPSS
SaveExploits0References3Affected Software1
PyPA
PyPA
•added 2025/09/17 10:15 a.m.•12 views

PYSEC-2025-151

An Improper Input Validation vulnerability in the scanning logic of mmaitre314 picklescan versions up to and including 0.0.30 allows a remote attacker to bypass pickle files security checks by supplying a standard pickle file with a PyTorch-related file extension. When the pickle file incorrectly...

9.3CVSS7.5AI score0.00816EPSS
SaveExploits1References2Affected Software1
PyPA
PyPA
•added 2025/09/15 5:15 p.m.•12 views

PYSEC-2025-143

wangxutech MoneyPrinterTurbo 1.2.6 allows path traversal via /api/v1/download/ URIs such as /api/v1/download//etc/passwd...

6.3CVSS5.8AI score0.00293EPSS
SaveExploits0References4Affected Software1
PyPA
PyPA
•added 2025/09/09 12:15 a.m.•12 views

PYSEC-2025-140

MONAI Medical Open Network for AI is an AI toolkit for health care imaging. The extractall function zipfile.extractalloutputdir is used directly to process compressed files. It is used in many places in the project. In versions up to and including 1.5.0, when the Zip file containing malicious...

8.8CVSS5.7AI score0.00572EPSS
SaveExploits1References1Affected Software1
PyPA
PyPA
•added 2025/08/11 8:15 a.m.•12 views

PYSEC-2025-75

A safe mode bypass vulnerability in the Model.loadmodel method in Keras versions 3.0.0 through 3.10.0 allows an attacker to achieve arbitrary code execution by convincing a user to load a specially crafted .keras model archive...

8.6CVSS6.3AI score0.00116EPSS
SaveExploits0References3
PyPA
PyPA
•added 2025/07/31 9:15 p.m.•12 views

PYSEC-2025-183

pyjwt v2.10.1 was discovered to contain weak encryption. NOTE: this is disputed by the Supplier because the key length is chosen by the application that uses the library admittedly, library users may benefit from a minimum value and a mechanism for opting in to strict enforcement...

7CVSS5.8AI score0.0016EPSS
SaveExploits0References3Affected Software1
PyPA
PyPA
•added 2025/07/18 3:15 p.m.•12 views

PYSEC-2025-181

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to version 6.6.6, an IDOR vulnerability in the GrapQL NotificationLineNotificationMarkReadMutation and NotificationLineNotificationDeleteMutation mutations of OpenCTI allows an authenticated...

5.4CVSS5.8AI score0.00208EPSS
SaveExploits0References1Affected Software1
PyPA
PyPA
•added 2025/06/17 7:15 a.m.•12 views

PYSEC-2025-64

A vulnerability classified as critical has been found in themanojdesai python-a2a up to 0.5.5. Affected is the function createworkflow of the file pythona2a/agentflow/server/api.py. The manipulation leads to path traversal. Upgrading to version 0.5.6 is able to address this issue. It is recommend...

9.8CVSS6.8AI score0.00723EPSS
SaveExploits1References12Affected Software1
PyPA
PyPA
•added 2025/06/10 4:15 p.m.•12 views

PYSEC-2025-79

Nautobot is a Network Source of Truth and Network Automation Platform. All users of Nautobot versions prior to 2.4.10 or prior to 1.6.32 are potentially affected. Due to insufficient security configuration of the Jinja2 templating feature used in computed fields, custom links, etc. in Nautobot, a...

7.1CVSS5.8AI score0.00306EPSS
SaveExploits0References5Affected Software1
PyPA
PyPA
•added 2025/05/26 8:15 a.m.•12 views

PYSEC-2025-46

A vulnerability was found in erdogant pypickle up to 1.1.5. It has been classified as critical. This affects the function Save of the file pypickle/pypickle.py. The manipulation leads to improper authorization. Attacking locally is a requirement. The exploit has been disclosed to the public and m...

5.5CVSS6.6AI score0.00207EPSS
SaveExploits1References18Affected Software1
PyPA
PyPA
•added 2025/05/26 7:15 a.m.•12 views

PYSEC-2025-45

A vulnerability was found in erdogant pypickle up to 1.1.5 and classified as problematic. Affected by this issue is the function load of the file pypickle/pypickle.py. The manipulation leads to deserialization. Local access is required to approach this attack. The exploit has been disclosed to th...

7.8CVSS6AI score0.00276EPSS
SaveExploits1References15Affected Software1
PyPA
PyPA
•added 2025/05/26 3:15 a.m.•12 views

PYSEC-2025-172

A vulnerability was found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This issue affects the function MDCImporter::ValidateSurfaceHeader of the file assimp/code/AssetLib/MDC/MDCLoader.cpp. The manipulation of the argument pcSurface2 leads to out-of-bounds read...

5.5CVSS4.8AI score0.00218EPSS
SaveExploits1References6Affected Software1
PyPA
PyPA
•added 2025/05/14 4:15 p.m.•12 views

PYSEC-2025-39

motionEye is an online interface for the software motion, a video surveillance program with motion detection. In versions 0.43.1b1 through 0.43.1b3, using a constructed camera device path with the add/addcamera motionEye web API allows an attacker with motionEye admin user credentials to execute...

9.3CVSS7.3AI score0.0045EPSS
SaveExploits0References3Affected Software1
Total number of security vulnerabilities5000