Advisory Catalog

Feast vulnerable to Deserialization of Untrusted Data

Picklescan is vulnerable to RCE via missing detection when calling built-in python _operator.attrgetter

Picklescan is vulnerable to RCE via missing detection when calling built-in python _operator.methodcaller

Picklescan is vulnerable to RCE through missing detection when calling numpy.f2py.crackfortran._eval_length

Picklescan is vulnerable to RCE via missing detection when calling numpy.f2py.crackfortran.getlincoef

Picklescan is vulnerable to RCE via missing detection when calling numpy.f2py.crackfortran.param_eval

Picklescan is vulnerable to RCE through missing detection when calling numpy.f2py.crackfortran.myeval

Picklescan is vulnerable to RCE through missing detection when calling built-in python operator.methodcaller

Picklescan missing detection when calling numpy.f2py.crackfortran.getlincoef

Picklescan Bypasses Unsafe Globals Check using pty.spawn

Picklescan missing detection when calling pty.spawn

FastMCP updated to MCP 1.23+ due to CVE-2025-66416

lmdeploy vulnerable to Arbitrary Code Execution via Insecure Deserialization in torch.load()

Hugging Face Transformers GLM4 Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the ta

Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vuln

Hugging Face Transformers HuBERT convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the targ

Hugging Face Transformers SEW-D convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the targe

Hugging Face Transformers SEW convert_config Code Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in that the target

Hugging Face Transformers megatron_gpt2 Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in th

Hugging Face Transformers Transformer-XL Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerabilit

Hugging Face Transformers Perceiver Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Hugging Face Transformers. User interaction is required to exploit this vulnerability in

FastAPI Users Vulnerable to 1-click Account Takeover in Apps Using FastAPI SSO

External Control of File Name or Path in Langflow

Langflow vulnerable to Server-Side Request Forgery

Weblate has an arbitrary file read via symbolic links

Dify v1.9.1 is vulnerable to Insecure Permissions. An unauthenticated attacker can directly send HTTP GET requests to the /console/api/system-features endpoint without any authentication credentials or session tokens. The endpoint fails to implement proper authorization checks, allowing anonymous ac

nbconvert has an uncontrolled search path that leads to unauthorized code execution on Windows

Fickling has Code Injection vulnerability via pty.spawn()

Fickling has missing detection for marshal.loads and types.FunctionType in unsafe modules list

Universal Tool Calling Protocol (UTCP) client library for Python vulnerable to Trust Boundary Violation through Manual JSON specification

Tornado: Quadratic DoS via Crafted Multipart Parameters

Tornado: Quadratic DoS via Repeated Header Coalescing

LangGraph's SQLite is vulnerable to SQL injection via metadata filter key in SQLite checkpointer list method

NiceGUI has a path traversal in app.add_media_files() allows arbitrary file read

urllib3 streaming API improperly handles highly compressed data

urllib3 allows an unbounded number of links in the decompression chain

Open WebUI vulnerable to Server-Side Request Forgery (SSRF) via Arbitrary URL Processing in /api/v1/retrieval/process/web

ComposioHQ has a directory traversal vulnerability

Model Context Protocol (MCP) Python SDK does not enable DNS rebinding protection by default

Django is vulnerable to DoS via XML serializer text extraction

vLLM vulnerable to remote code execution via transformers_utils/get_config

trytond does not enforce access rights for the route of the HTML editor.

Duplicate Advisory: Keras keras.utils.get_file API is vulnerable to a path traversal attack

Fugue is Vulnerable to Remote Code Execution by Pickle Deserialization via FlaskRPCServer

Keylime allows users to register new agents by recycling existing UUIDs when using different TPM devices

vLLM vulnerable to DoS with incorrect shape of multimodal embedding inputs

vLLM deserialization vulnerability leading to DoS and potential RCE

LangChain Vulnerable to Template Injection via Attribute Access in Prompt Templates

cbor2 C extension decoder flaws can cause denial of service

OpenStack Keystone allows /v3/ec2tokens or /v3/s3tokens request with valid AWS Signature to provide Keystone authorization.