Advisory Catalog

ZenML Server Remote Privilege Escalation Vulnerability

diffoscope Path Traversal vulnerability

Vyper's `extract32` can ready dirty memory

Vyper's `_abi_decode` vulnerable to Memory Overflow

PyPop C extensions possible vulnerability: missing arguments and redundant null pointers

ESPHome vulnerable to remote code execution via arbitrary file write

LangChain Experimental vulnerable to arbitrary code execution

pretix mishandles file validation

orjson does not limit recursion for deeply nested JSON documents

langchain Server-Side Request Forgery vulnerability

Uninitialized Variable in fastecdsa

Cross-site Scripting in MLFlow

MLFlow Cross-site Scripting vulnerability leads to client-side Remote Code Execution

Onnx Directory Traversal vulnerability

Onnx Out-of-bounds Read vulnerability

Gradio apps vulnerable to timing attacks to guess password

Label Studio vulnerable to Cross-site Scripting if `<Choices>` or `<Labels>` are used in labeling config

pypqc private key retrieval vulnerability

Potentially untrusted input is rendered as HTML in final output

pymatgen vulnerable to arbitrary code execution when parsing a maliciously crafted JonesFaithfulTransformation transformation_string

cryptography NULL pointer dereference with pkcs12.serialize_key_and_certificates when called with a non-matching certificate and private key and an hmac_hash override

Improper Certificate Validation in apache airflow mongo hook

Cross-site Scripting in Pyhtml2pdf

Potential buffer overflow in CBOR2 decoder

tuf's Metadata API: Targets.get_delegated_role() is missing input validation

Scrapy decompression bomb vulnerability

Scrapy authorization header leakage on cross-domain redirect

Scrapy vulnerable to ReDoS via XMLFeedSpider

Duplicate Advisory: Apache Superset uncontrolled resource consumption

Exiv2 has an out-of-bounds read in QuickTimeVideo::NikonTagsDecoder

Exiv2 has a denial of service due to unbounded recursion in QuickTimeVideo::multipleEntriesDecoder

commonground-api-common unexploitable privilege escalation in JWT authentication middleware

NoneBot Potential Information Leak in User-Constructed Message Templates

Kinto Attachment's attachments can be replaced on read-only records

DIRAC's TokenManager does not check permissions on cached tokens

Vyper negative array index bounds checks

SQLAlchemyDA unauthenticated arbitrary SQL query execution

Django denial-of-service attack in the intcomma template filter

Allegro AI ClearML path traversal vulnerability

Allegro AI ClearML vulnerable to deserialization of untrusted data

Ansible-core information disclosure flaw

pyLoad open redirect vulnerability due to improper validation of the is_safe_url function

Gradio Path Traversal vulnerability

Allegro AI ClearML Stores Credentials in Plaintext in MongoDB Instance

Python Cryptography package vulnerable to Bleichenbacher timing oracle attack

m2crypto Bleichenbacher timing attack - incomplete fix for CVE-2020-25657

Vyper sha3 codegen bug

python-multipart vulnerable to Content-Type Header ReDoS

Vyper's external calls can overflow return data to return input buffer