Advisory Catalog

Picklescan does not block ctypes

Picklescan vulnerable to Arbitrary File Writing

Hugging Face smolagents: Unsafe deserialization in Remote Python Executor leads to RCE

LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs

Weblate is vulnerable to RCE through Git config file overwrite

Apache Airflow Providers Edge3 exposes internal API allowing RCE in web server context

pgadmin4 has a Meta-Command Filter Command Execution

Cybersecurity AI (CAI) vulnerable to Command Injection in run_ssh_command_with_credentials Agent tool

NUT-14 allows cashu tokens to be created with a preimage hash. However, nutshell (cashubtc/nuts) before 0.18.0 do not validate the size of preimage when the token is spent. The preimage is stored by the mint and attacker can exploit this vulnerability to fill the mint's db nd disk with arbitrary dat

Langflow CORS misconfiguration enables Account Takeover and RCE

asyncmy is vulnerable to SQL injection via crafted dict keys

fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib

Ray's New Token Authentication is Disabled By Default

Ray is vulnerable to Critical RCE via Safari & Firefox Browsers through DNS Rebinding Attack

Modular Max Serve has Unsafe Deserialization vulnerability

joserfc has Possible Uncontrolled Resource Consumption Vulnerability Triggered by Logging Arbitrarily Large JWT Token Payloads

AstrBot is vulnerable to RCE with hard-coded JWT signing keys

pgAdmin4 vulnerable to Remote Code Execution (RCE) when running in server mode

Django vulnerable to SQL injection via _connector keyword argument in QuerySet and Q objects.

Kitware VTK (Visualization Toolkit) through 9.5.0 contains a heap use-after-free vulnerability in vtkGLTFDocumentLoader. The vulnerability manifests during mesh object copy operations where vector members are accessed after the underlying memory has been freed, specifically when handling GLTF files

MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability

MLflow Weak Password Requirements Authentication Bypass Vulnerability

pg8000 SQL injection vulnerability via a specially crafted Python list input

pyquokka is Vulnerable to Remote Code Execution by Pickle Deserialization via FlightServer

Keras framework vulnerable to deserialization of untrusted data

BBOT's various issues in unarchive.py can cause arbitrary file write and RCE

BBOT's insufficient sanitization issues in gitdumper.py can lead to RCE

scio is vunerable to Remote Command Execution through PyTorch

Django vulnerable to SQL injection in column aliases

Apache Pyfory python is vulnerable to deserialization of untrusted data

Apache IoTDB: Deserialization of untrusted Data

H2O affected by a deserialization vulnerability

InvokeAI has External Control of File Name or Path

mcp-kubernetes-server has an OS Command Injection vulnerability

Picklescan Bypass is Possible via File Extension Mismatch

Picklescan: ZIP archive scan bypass is possible through non-exhaustive Cyclic Redundancy Check

Picklescan is Vulnerable to Unsafe Globals Check Bypass through Subclass Imports

internetarchive Vulnerable to Directory Traversal in File.download()

TkEasyGUI Vulnerable to OS Command Injection

Pixar OpenUSD Sdf_PathNode Module Use-After-Free Vulnerability Leading to Potential Remote Code Execution

DeepDiff Class Pollution in Delta class leading to DoS, Remote Code Execution, and more

Picklescan has pickle parsing logic flaw that leads to malicious pickle file bypass

ExecuTorch integer overflow vulnerability leads to code execution

ExecuTorch vulnerable to Heap-based Buffer Overflow

ExecuTorch out-of-bounds access vulnerability

ExecuTorch heap buffer overflow vulnerability

ExecuTorch integer overflow vulnerability

ExecuTorch integer overflow vulnerability

pyLoad CNL Blueprint allows Path Traversal through `dlc_path` which leads to Remote Code Execution (RCE)