Known Exploits and Vulnerabilities

Dated: 2026-10-27Packages: 193Advisories: 1372Open: 190

Malicious releases 2

published	advisory	package	summary
2026-05-12	MAL-2026-3608	mistralai	Malicious code in mistralai (PyPI)
published 2026-05-12 modified 2026-05-12 affected 1 listed versions summary Malicious code in mistralai (PyPI)
2026-03-24	MAL-2026-2144	litellm	Malicious code in litellm (PyPI)
published 2026-03-24 modified 2026-10-21 aliases PYSEC-2026-2 affected 3 listed versions summary Malicious code in litellm (PyPI)

Vulnerabilities 1370

published	advisory	package	fixed in	summary
2026-10-23	PYSEC-2026-4322	brotli	1.2.1	Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package
published 2026-10-23 modified 2026-10-23 aliases CVE-2026-111497 affected introduced 0, fixed 1.2.1 fixed in 1.2.1 summary Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package
2026-10-20	PYSEC-2026-4321	uv	0.13.4	uv's bundled CA store trusts an emSign root whose intermediate CA keys are compromised
published 2026-10-20 modified 2026-10-20 aliases GHSA-hq85-5cpj-mr62 affected introduced 0, fixed 0.13.4 fixed in 0.13.4 summary uv's bundled CA store trusts an emSign root whose intermediate CA keys are compromised
2026-10-20	PYSEC-2026-4320	certifi	2026.10.19	certifi bundles emSign root CAs with compromised intermediate CA keys
published 2026-10-20 modified 2026-10-20 aliases GHSA-6q48-6c7w-9gw2 affected introduced 2019.03.09, fixed 2026.10.19 fixed in 2026.10.19 summary certifi bundles emSign root CAs with compromised intermediate CA keys
2026-10-15	PYSEC-2026-4285	pydantic-ai-slim	2.53.0	Pydantic AI: Concurrency-limited models can keep their slot when a streamed request ends early
published 2026-10-15 modified 2026-10-15 aliases CVE-2026-107286, GHSA-6fqq-452j-qhrp affected introduced 2.10.0, fixed 2.53.0 fixed in 2.53.0 summary Pydantic AI: Concurrency-limited models can keep their slot when a streamed request ends early
2026-10-15	PYSEC-2026-4205	datamodel-code-generator	0.81.0	datamodel-code-generator: Protobuf weak-import path traversal allows files to be written outside the temporary directory
published 2026-10-15 modified 2026-10-15 aliases CVE-2026-107377, GHSA-77xj-x4rm-935c affected introduced 0.59.0, fixed 0.81.0 fixed in 0.81.0 summary datamodel-code-generator: Protobuf weak-import path traversal allows files to be written outside the temporary directory
2026-10-15	PYSEC-2026-4290	pydantic-ai-slim	2.52.0	Pydantic AI: Excessive resource use when local web fetching converts nested HTML
published 2026-10-15 modified 2026-10-15 aliases CVE-2026-107287, GHSA-v36g-jcw9-x7cw affected introduced 1.77.0, fixed 1.107.7, introduced 2.0.0b1, fixed 2.52.0 fixed in 2.52.0 summary Pydantic AI: Excessive resource use when local web fetching converts nested HTML
2026-10-15	PYSEC-2026-4288	pydantic-ai-slim	2.30.0	Pydantic AI Web chat UI (`Agent.to_web()`, `clai web`): the local chat endpoint does not validate the `Host` header
published 2026-10-15 modified 2026-10-15 aliases CVE-2026-107292, GHSA-q2xc-rrxj-58x9 affected introduced 1.34.0, fixed 1.107.5, introduced 2.0.0b1, fixed 2.30.0 fixed in 2.30.0 summary Pydantic AI Web chat UI (`Agent.to_web()`, `clai web`): the local chat endpoint does not validate the `Host` header
2026-10-15	PYSEC-2026-4287	pydantic-ai-slim	2.28.0	Pydantic AI Web chat UI (`Agent.to_web()`, `clai web`): a website visited by the developer can trigger agent runs and server-side tool execution on the local chat endpoint
published 2026-10-15 modified 2026-10-15 aliases CVE-2026-107295, GHSA-h4xc-3qfq-jf93 affected introduced 1.34.0, fixed 1.107.4, introduced 2.0.0b1, fixed 2.28.0 fixed in 2.28.0 summary Pydantic AI Web chat UI (`Agent.to_web()`, `clai web`): a website visited by the developer can trigger agent runs and server-side tool execution on the local chat endpoint
2026-10-15	PYSEC-2026-4283	pydantic-ai-slim	2.27.1	Pydantic AI OpenTelemetry instrumentation: retry prompt content is not redacted when `include_content=False`
published 2026-10-15 modified 2026-10-15 aliases CVE-2026-107293, GHSA-3gh4-cghq-f8v4 affected introduced 0.3.4, fixed 1.107.4, introduced 2.0.0b1, fixed 2.27.1 fixed in 2.27.1 summary Pydantic AI OpenTelemetry instrumentation: retry prompt content is not redacted when `include_content=False`
2026-10-15	PYSEC-2026-4289	pydantic-ai-slim	2.24.0	Pydantic AI: Unbounded memory use when downloading remote content via web_fetch or FileUrl
published 2026-10-15 modified 2026-10-15 aliases CVE-2026-107294, GHSA-v2xh-2vp8-57h8 affected introduced 1.77.0, fixed 1.107.2, introduced 2.0.0b1, fixed 2.24.0 fixed in 2.24.0 summary Pydantic AI: Unbounded memory use when downloading remote content via web_fetch or FileUrl
2026-10-15	PYSEC-2026-4286	pydantic-ai-slim	2.44.0	Pydantic AI: Event loop blocked by quadratic title extraction in `web_fetch`
published 2026-10-15 modified 2026-10-15 aliases CVE-2026-107290, GHSA-fpf4-vwcp-v4hp affected introduced 1.77.0, fixed 1.107.6, introduced 2.0.0b1, fixed 2.44.0 fixed in 2.44.0 summary Pydantic AI: Event loop blocked by quadratic title extraction in `web_fetch`
2026-10-15	PYSEC-2026-4284	pydantic-ai-slim	2.44.0	Pydantic AI OpenTelemetry instrumentation: exception events on tool and agent run spans include content when `include_content=False`
published 2026-10-15 modified 2026-10-15 aliases CVE-2026-107291, GHSA-4x9p-g9wm-8q7f affected introduced 0.3.4, fixed 1.107.6, introduced 2.0.0b1, fixed 2.44.0 fixed in 2.44.0 summary Pydantic AI OpenTelemetry instrumentation: exception events on tool and agent run spans include content when `include_content=False`
2026-10-15	PYSEC-2026-4291	pydantic-ai-slim	2.44.0	Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv6 zone identifiers
published 2026-10-15 modified 2026-10-15 aliases CVE-2026-107289, GHSA-vmxc-h2x2-jmf3 affected introduced 1.56.0, fixed 1.107.6, introduced 2.0.0b1, fixed 2.44.0 fixed in 2.44.0 summary Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv6 zone identifiers
2026-10-15	PYSEC-2026-4311	weasyprint	70.0	WeasyPrint: EPS images reach the Ghostscript interpreter resulting in RCE
published 2026-10-15 modified 2026-10-15 aliases CVE-2026-106443, GHSA-r543-q48m-4c9j affected introduced 0, fixed 70.0 fixed in 70.0 summary WeasyPrint: EPS images reach the Ghostscript interpreter resulting in RCE
2026-10-15	PYSEC-2026-4304	twisted		Twisted: IMAP wildcardToRegexp() ReDoS
published 2026-10-15 modified 2026-10-15 aliases CVE-2026-106454, GHSA-8pqf-f4m5-798g affected introduced 0, last_affected 25.5.0 summary Twisted: IMAP wildcardToRegexp() ReDoS
2026-10-15	PYSEC-2026-4312	werkzeug	3.1.9	Werkzeug safe_join() allows Windows special device names
published 2026-10-15 modified 2026-10-15 aliases CVE-2026-102598, GHSA-g6x2-hccm-hh4m affected introduced 0, fixed 3.1.9 fixed in 3.1.9 summary Werkzeug safe_join() allows Windows special device names
2026-10-15	PYSEC-2026-4296	pymongo	4.18.2	PyMongo: PYTHON-5996 Heap out-of-bounds write via signed size overflow in BSON document encoding
published 2026-10-15 modified 2026-10-15 aliases CVE-2026-96749, GHSA-v4x9-3549-crwv affected introduced 0, fixed 4.18.2 fixed in 4.18.2 summary PyMongo: PYTHON-5996 Heap out-of-bounds write via signed size overflow in BSON document encoding
2026-10-15	PYSEC-2026-4297	pymongo	4.18.2	PyMongo: PYTHON-5986 Host injection in PyMongo connection string parsing via percent-encoded delimiters
published 2026-10-15 modified 2026-10-15 aliases CVE-2026-96748, GHSA-vp6j-j7w5-5xjj affected introduced 3.5.0, fixed 4.18.2 fixed in 4.18.2 summary PyMongo: PYTHON-5986 Host injection in PyMongo connection string parsing via percent-encoded delimiters
2026-10-15	PYSEC-2026-4295	pymongo	4.18.2	PyMongo: PYTHON-5990 Forced Unix domain socket connection via a .sock KMS endpoint in client-side field level encryption
published 2026-10-15 modified 2026-10-15 aliases CVE-2026-96747, GHSA-qx36-8mw2-4r3x affected introduced 3.9.0, fixed 4.18.2 fixed in 4.18.2 summary PyMongo: PYTHON-5990 Forced Unix domain socket connection via a .sock KMS endpoint in client-side field level encryption
2026-10-15	PYSEC-2026-4305	uv	0.12.18	uv: Path traversal on Windows through wheel extraction
published 2026-10-15 modified 2026-10-15 aliases CVE-2026-104843, GHSA-2cv4-cqwr-gwf7 affected introduced 0.12.7, fixed 0.12.18 fixed in 0.12.18 summary uv: Path traversal on Windows through wheel extraction
2026-10-15	PYSEC-2026-4243	mako	1.4.2	Mako: Path traversal via drive-letter URI on Windows in TemplateLookup
published 2026-10-15 modified 2026-10-15 aliases CVE-2026-102991, GHSA-5639-2j2p-m4mx affected introduced 0, fixed 1.4.2 fixed in 1.4.2 summary Mako: Path traversal via drive-letter URI on Windows in TemplateLookup
2026-10-15	PYSEC-2026-4244	multidict	6.9.1	Multidict: Reference leak in CIMultiDict/MultiDict items-view union and subtraction
published 2026-10-15 modified 2026-10-15 aliases CVE-2026-104874, GHSA-54p9-h82j-f925 affected introduced 6.7.0, fixed 6.9.1 fixed in 6.9.1 summary Multidict: Reference leak in CIMultiDict/MultiDict items-view union and subtraction
2026-10-15	PYSEC-2026-4294	pymongo	4.18.1	pymongo: PYTHON-5994 Use exact match for file ID in GridFS delete methods
published 2026-10-15 modified 2026-10-15 aliases CVE-2026-88029, GHSA-8fvv-fgr5-f8ch affected introduced 0, fixed 4.18.1 fixed in 4.18.1 summary pymongo: PYTHON-5994 Use exact match for file ID in GridFS delete methods
2026-10-15	PYSEC-2026-4301	snowflake-connector-python	4.7.3	Snowflake drivers writes sensitive information to logs
published 2026-10-15 modified 2026-10-15 aliases CVE-2026-86597, GHSA-qqj6-54q6-cxv6 affected introduced 0, fixed 4.7.3 fixed in 4.7.3 summary Snowflake drivers writes sensitive information to logs
2026-10-15	PYSEC-2026-4217	fsspec	2026.6.0	fsspec: Server-Side Template Injection in ReferenceFileSystem leads to Remote Code Execution
published 2026-10-15 modified 2026-10-15 aliases CVE-2026-104851, GHSA-27vj-qcqg-25rc affected introduced 0.9.0, fixed 2026.6.0 fixed in 2026.6.0 summary fsspec: Server-Side Template Injection in ReferenceFileSystem leads to Remote Code Execution
2026-10-15	PYSEC-2026-4240	langgraph-sdk	0.4.4	LangGraph SDK custom auth silently ignores actions= on resource decorators
published 2026-10-15 modified 2026-10-15 aliases CVE-2026-104873, GHSA-fvww-7h3r-vfhp affected introduced 0.1.45, fixed 0.4.4 fixed in 0.4.4 summary LangGraph SDK custom auth silently ignores actions= on resource decorators
2026-10-15	PYSEC-2026-4298	python-jose		python-jose algorithm confusion guard bypassed by DER-encoded public keys
published 2026-10-15 modified 2026-10-15 aliases CVE-2026-85394, GHSA-3qf3-8w2g-rqmx affected introduced 0, last_affected 3.5.0 summary python-jose algorithm confusion guard bypassed by DER-encoded public keys
2026-10-01	PYSEC-2026-4056	jupyterlab	4.6.4	JupyterLab: Cross-site scripting (XSS) in JupyterLab via crafted language package (jupyterlab.json)
published 2026-10-01 modified 2026-10-01 aliases CVE-2026-102830, GHSA-3jqq-pw4j-pqcj affected introduced 3.0.0, fixed 4.5.11, introduced 4.6.0, fixed 4.6.4 fixed in 4.6.4 summary JupyterLab: Cross-site scripting (XSS) in JupyterLab via crafted language package (jupyterlab.json)
2026-10-01	PYSEC-2026-4055	jupyterlab	4.6.4	JupyterLab: Argument injection in JupyterLab extension uninstall exposes server-readable files and internal URLs
published 2026-10-01 modified 2026-10-01 aliases CVE-2026-102904, GHSA-3325-v43h-43rv affected introduced 4.0.0, fixed 4.5.11, introduced 4.6.0, fixed 4.6.4 fixed in 4.6.4 summary JupyterLab: Argument injection in JupyterLab extension uninstall exposes server-readable files and internal URLs
2026-10-01	PYSEC-2026-4057	jupyterlab	4.6.4	JupyterLab: Cross-site scripting (XSS) in JupyterLab via notebook cells pasted from the system clipboard
published 2026-10-01 modified 2026-10-01 aliases CVE-2026-102831, GHSA-6966-vjj6-99xv affected introduced 4.5.0, fixed 4.5.11, introduced 4.6.0, fixed 4.6.4 fixed in 4.6.4 summary JupyterLab: Cross-site scripting (XSS) in JupyterLab via notebook cells pasted from the system clipboard
2026-10-01	PYSEC-2026-4159	pypdf	6.19.0	pypdf: Possible long runtimes with large amount of embedded files
published 2026-10-01 modified 2026-10-01 aliases CVE-2026-102999, GHSA-v247-6f48-mgcj affected introduced 0, fixed 6.19.0 fixed in 6.19.0 summary pypdf: Possible long runtimes with large amount of embedded files
2026-10-01	PYSEC-2026-4157	pypdf	6.19.0	pypdf: Possible long runtimes when generating appearance streams
published 2026-10-01 modified 2026-10-01 aliases CVE-2026-102998, GHSA-php9-fj8v-98fj affected introduced 0, fixed 6.19.0 fixed in 6.19.0 summary pypdf: Possible long runtimes when generating appearance streams
2026-10-01	PYSEC-2026-4160	pypdf	6.19.0	pypdf: Possible large memory usage when retrieving alphabetical page labels
published 2026-10-01 modified 2026-10-01 aliases CVE-2026-103000, GHSA-w23x-9jrw-r45c affected introduced 0, fixed 6.19.0 fixed in 6.19.0 summary pypdf: Possible large memory usage when retrieving alphabetical page labels
2026-10-01	PYSEC-2026-4156	pypdf	6.18.1	pypdf: Possible long runtimes for partially malformed FlateDecode streams (Follow-up)
published 2026-10-01 modified 2026-10-01 aliases CVE-2026-102997, GHSA-jw7q-gvrg-4vj3 affected introduced 0, fixed 6.18.1 fixed in 6.18.1 summary pypdf: Possible long runtimes for partially malformed FlateDecode streams (Follow-up)
2026-10-01	PYSEC-2026-4155	pypdf	6.18.1	pypdf: Possible large memory usage when parsing font data
published 2026-10-01 modified 2026-10-01 aliases CVE-2026-102996, GHSA-g9cg-prrw-2r8q affected introduced 0, fixed 6.18.1 fixed in 6.18.1 summary pypdf: Possible large memory usage when parsing font data
2026-10-01	PYSEC-2026-4154	pypdf	6.18.1	pypdf: Possible large memory usage for large /ToUnicode streams (Follow-up 2)
published 2026-10-01 modified 2026-10-01 aliases CVE-2026-102995, GHSA-fp3h-c4fm-7vvf affected introduced 0, fixed 6.18.1 fixed in 6.18.1 summary pypdf: Possible large memory usage for large /ToUnicode streams (Follow-up 2)
2026-10-01	PYSEC-2026-4153	pypdf	6.18.0	pypdf: Possible long runtimes/large memory usage when parsing indirect objects
published 2026-10-01 modified 2026-10-01 aliases CVE-2026-102994, GHSA-5jq2-8x83-x246 affected introduced 0, fixed 6.18.0 fixed in 6.18.0 summary pypdf: Possible long runtimes/large memory usage when parsing indirect objects
2026-10-01	PYSEC-2026-4158	pypdf	6.17.0	pypdf: Possible large memory usage when retrieving Roman page labels
published 2026-10-01 modified 2026-10-01 aliases CVE-2026-102993, GHSA-qv6h-rv94-w285 affected introduced 0, fixed 6.17.0 fixed in 6.17.0 summary pypdf: Possible large memory usage when retrieving Roman page labels
2026-10-01	PYSEC-2026-4146	pyjwt		PyJWT.decode() reintroduces options-dict mutation, enabling silent claim-verification bypass on dict reuse
published 2026-10-01 modified 2026-10-01 aliases CVE-2026-103001, GHSA-gvp8-978c-rx2q affected introduced 2.11.0, last_affected 2.13.0 summary PyJWT.decode() reintroduces options-dict mutation, enabling silent claim-verification bypass on dict reuse
2026-10-01	PYSEC-2026-4066	litellm	1.96.2	LiteLLM: Authenticated SSRF and provider-credential exfiltration via unvalidated request-body routing parameters
published 2026-10-01 modified 2026-10-01 aliases CVE-2026-84377, GHSA-3cv6-jpf6-8222 affected introduced 0, fixed 1.88.6, introduced 1.89.0, fixed 1.89.7, introduced 1.90.0, fixed 1.90.7, introduced 1.91.0, fixed 1.91.5, introduced 1.92.0, fixed 1.92.2, introduced 1.93.0, fixed 1.93.2, introduced 1.94.0, fixed 1.94.3, introduced 1.95.0, fixed 1.95.1, introduced 1.96.0, fixed 1.96.2 fixed in 1.96.2 summary LiteLLM: Authenticated SSRF and provider-credential exfiltration via unvalidated request-body routing parameters
2026-10-01	PYSEC-2026-4141	pyjwt	2.15.0	PyJWT: Unauthenticated RecursionError DoS in pre-verification payload parse (PyJWKClient.get_signing_key_from_jwt / verify_signature=False)
published 2026-10-01 modified 2026-10-01 aliases CVE-2026-101918, GHSA-42vr-xj54-vc7v affected introduced 2.0.0a1, fixed 2.15.0 fixed in 2.15.0 summary PyJWT: Unauthenticated RecursionError DoS in pre-verification payload parse (PyJWKClient.get_signing_key_from_jwt / verify_signature=False)
2026-10-01	PYSEC-2026-4176	urllib3	2.8.0	urllib3: Chunked Deflate streaming can enter an infinite loop
published 2026-10-01 modified 2026-10-01 aliases CVE-2026-97688, GHSA-gh4c-6fx4-qh6g affected introduced 2.6.2, fixed 2.8.0 fixed in 2.8.0 summary urllib3: Chunked Deflate streaming can enter an infinite loop
2026-10-01	PYSEC-2026-4177	urllib3	2.8.0	urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory
published 2026-10-01 modified 2026-10-01 aliases CVE-2026-97689, GHSA-vxq7-64xx-v4gw affected introduced 1.10.3, fixed 2.8.0 fixed in 2.8.0 summary urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory
2026-10-01	PYSEC-2026-4175	urllib3	2.8.0	urllib3: HTTPS proxy TLS configuration may be ignored or overridden
published 2026-10-01 modified 2026-10-01 aliases CVE-2026-97687, GHSA-8988-9cw3-xx77 affected introduced 1.26.0, fixed 2.8.0 fixed in 2.8.0 summary urllib3: HTTPS proxy TLS configuration may be ignored or overridden
2026-10-01	PYSEC-2026-4148	pyjwt	2.14.0	PyJWT: ReDoS vulnerability when calling the `is_pem_format` function.
published 2026-10-01 modified 2026-10-01 aliases CVE-2026-102270, GHSA-jwrc-g2q2-pq5p affected introduced 0, fixed 2.14.0 fixed in 2.14.0 summary PyJWT: ReDoS vulnerability when calling the `is_pem_format` function.
2026-10-01	PYSEC-2026-4143	pyjwt	2.14.0	PyJWT: PyJWK accepts empty HMAC keys, bypassing PyJWT's empty-key validation
published 2026-10-01 modified 2026-10-01 aliases CVE-2026-102266, GHSA-9j54-fg26-wv3r affected introduced 2.13.0, fixed 2.14.0 fixed in 2.14.0 summary PyJWT: PyJWK accepts empty HMAC keys, bypassing PyJWT's empty-key validation
2026-10-01	PYSEC-2026-4142	pyjwt	2.14.0	PyJWT: Uncaught RecursionError in jwt.decode() on deeply nested token header
published 2026-10-01 modified 2026-10-01 aliases CVE-2026-102265, GHSA-8wjv-2p76-3863 affected introduced 2.13.0, fixed 2.14.0 fixed in 2.14.0 summary PyJWT: Uncaught RecursionError in jwt.decode() on deeply nested token header
2026-10-01	PYSEC-2026-4147	pyjwt	2.14.0	PyJWT: Non-canonical signature segments enable raw-token revocation bypass
published 2026-10-01 modified 2026-10-01 aliases CVE-2026-102269, GHSA-hxm8-2xgr-2p9m affected introduced 0, fixed 2.14.0 fixed in 2.14.0 summary PyJWT: Non-canonical signature segments enable raw-token revocation bypass
2026-10-01	PYSEC-2026-4145	pyjwt	2.14.0	PyJWT: Asymmetric-PEM detection bypass: whitespace/line-ending-mutated public keys skip the HS/asymmetric confusion guard
published 2026-10-01 modified 2026-10-01 aliases CVE-2026-102268, GHSA-ffc3-869f-jxw9 affected introduced 0, fixed 2.14.0 fixed in 2.14.0 summary PyJWT: Asymmetric-PEM detection bypass: whitespace/line-ending-mutated public keys skip the HS/asymmetric confusion guard
2026-10-01	PYSEC-2026-4151	pyjwt	2.14.0	PyJWT accepts public JWK containers as HMAC secrets
published 2026-10-01 modified 2026-10-01 aliases CVE-2026-102273, GHSA-w2cx-738m-mc7w affected introduced 2.13.0, fixed 2.14.0 fixed in 2.14.0 summary PyJWT accepts public JWK containers as HMAC secrets
2026-10-01	PYSEC-2026-4144	pyjwt	2.14.0	PyJWT: PyJWKClient follows redirects when fetching JWKS
published 2026-10-01 modified 2026-10-01 aliases CVE-2026-102267, GHSA-9v7f-9g4p-ffgj affected introduced 0, fixed 2.14.0 fixed in 2.14.0 summary PyJWT: PyJWKClient follows redirects when fetching JWKS
2026-10-01	PYSEC-2026-4149	pyjwt	2.14.0	PyJWT: Public keys in DER form are accepted as HMAC secrets, bypassing the CVE-2022-29217 guard
published 2026-10-01 modified 2026-10-01 aliases CVE-2026-102271, GHSA-p4g4-x82p-q773 affected introduced 2.4.0, fixed 2.14.0 fixed in 2.14.0 summary PyJWT: Public keys in DER form are accepted as HMAC secrets, bypassing the CVE-2022-29217 guard
2026-10-01	PYSEC-2026-4150	pyjwt	2.14.0	PyJWT BOM Bypass
published 2026-10-01 modified 2026-10-01 aliases CVE-2026-102272, GHSA-r6x4-923q-g947 affected introduced 2.13.0, fixed 2.14.0 fixed in 2.14.0 summary PyJWT BOM Bypass
2026-10-01	PYSEC-2026-4140	pyjwt	2.14.0	PyJWT: PyJWKClient still amplifies unauthenticated JWKS fetches on unknown kid values (incomplete fix of CVE-2026-48524)
published 2026-10-01 modified 2026-10-01 aliases CVE-2026-101917, GHSA-2gx3-rcp4-g85q affected introduced 0, fixed 2.14.0 fixed in 2.14.0 summary PyJWT: PyJWKClient still amplifies unauthenticated JWKS fetches on unknown kid values (incomplete fix of CVE-2026-48524)
2026-10-01	PYSEC-2026-4152	pyjwt	2.14.0	PyJWT: Malformed RSA JWK aborts parsing of an entire JWK Set
published 2026-10-01 modified 2026-10-01 aliases CVE-2026-102274, GHSA-w6j9-cwv2-h6wq affected introduced 2.9.0, fixed 2.14.0 fixed in 2.14.0 summary PyJWT: Malformed RSA JWK aborts parsing of an entire JWK Set
2026-10-01	PYSEC-2026-4114	oauthlib	4.0.0	Oauthlib: Timing Attack Vulnerability in PKCE code_verifier Comparison (CWE-208)
published 2026-10-01 modified 2026-10-01 aliases CVE-2026-49265, GHSA-xpv3-w29h-x7cv affected introduced 3.0.0, fixed 4.0.0 fixed in 4.0.0 summary Oauthlib: Timing Attack Vulnerability in PKCE code_verifier Comparison (CWE-208)
2026-10-01	PYSEC-2026-4113	oauthlib	4.0.0	Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation
published 2026-10-01 modified 2026-10-01 aliases CVE-2026-49264, GHSA-hj66-6f7g-4r5v affected introduced 0.6.1, fixed 4.0.0 fixed in 4.0.0 summary Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation
2026-10-01	PYSEC-2026-4053	hpack	4.2.0	hpack: Unbounded variable integer decoding can cause run-away computation on malformed input
published 2026-10-01 modified 2026-10-01 aliases CVE-2026-59980, GHSA-8v8h-hg4w-mvq2 affected introduced 0, fixed 4.2.0 fixed in 4.2.0 summary hpack: Unbounded variable integer decoding can cause run-away computation on malformed input
2026-10-01	PYSEC-2026-4023	anyio	4.14.2	AnyIO run_process/open_process ignores extra_groups and can retain parent supplementary groups
published 2026-10-01 modified 2026-10-01 aliases CVE-2026-63349, GHSA-3w57-8xmc-8v26 affected introduced 4.14.0, fixed 4.14.2 fixed in 4.14.2 summary AnyIO run_process/open_process ignores extra_groups and can retain parent supplementary groups
2026-10-01	PYSEC-2026-4025	anyio	4.14.2	AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing
published 2026-10-01 modified 2026-10-01 aliases CVE-2026-63374, GHSA-82r6-8w77-94w6 affected introduced 0, fixed 4.14.2 fixed in 4.14.2 summary AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing
2026-10-01	PYSEC-2026-4024	anyio	4.14.2	AnyIO process-pool workers can block indefinitely on undrained stderr
published 2026-10-01 modified 2026-10-01 aliases CVE-2026-64847, GHSA-5p39-cfhj-2xmp affected introduced 0, fixed 4.14.2 fixed in 4.14.2 summary AnyIO process-pool workers can block indefinitely on undrained stderr
2026-10-01	PYSEC-2026-4170	soupsieve	2.9.0	Soup Sieve: Polynomial-time ReDoS (O(n²)) in the `IDENTIFIER` / `VALUE` selector sub-patterns
published 2026-10-01 modified 2026-10-01 aliases CVE-2026-86000, GHSA-gjv8-xp57-g29c affected introduced 0, fixed 2.9.0 fixed in 2.9.0 summary Soup Sieve: Polynomial-time ReDoS (O(n²)) in the `IDENTIFIER` / `VALUE` selector sub-patterns
2026-10-01	PYSEC-2026-4171	soupsieve	2.9.0	Soup Sieve: Polynomial-time ReDoS (O(n²)) in the whitespace/comment trimming regex `RE_WS_END` (triggers on VALID selectors)
published 2026-10-01 modified 2026-10-01 aliases CVE-2026-85999, GHSA-j934-xhv5-fg8f affected introduced 0, fixed 2.9.0 fixed in 2.9.0 summary Soup Sieve: Polynomial-time ReDoS (O(n²)) in the whitespace/comment trimming regex `RE_WS_END` (triggers on VALID selectors)
2026-10-01	PYSEC-2026-4054	jupyter-server	2.21.0	Jupyter Server: 5xx request logging leaks token-bearing Referer header values
published 2026-10-01 modified 2026-10-01 aliases CVE-2026-86049, GHSA-c3mw-737p-c7g2 affected introduced 0, fixed 2.21.0 fixed in 2.21.0 summary Jupyter Server: 5xx request logging leaks token-bearing Referer header values
2026-10-01	PYSEC-2026-4070	litellm	1.83.9	LiteLLM Proxy has server-side request forgery via the `user_config` request parameter
published 2026-10-01 modified 2026-10-01 aliases CVE-2026-59823, GHSA-hx8v-g79f-8w5f affected introduced 0, fixed 1.83.9 fixed in 1.83.9 summary LiteLLM Proxy has server-side request forgery via the `user_config` request parameter
2026-10-01	PYSEC-2026-4174	transformers		Hugging Face Transformers downloads custom generation code before trust consent
published 2026-10-01 modified 2026-10-01 aliases CVE-2026-80047, GHSA-x9r9-c232-4q39 affected introduced 4.49.0, last_affected 5.8.1 summary Hugging Face Transformers downloads custom generation code before trust consent
2026-10-01	PYSEC-2026-4035	django	6.0.8	Django GeoDjango spatial lookups allow file writes and outbound requests through GDAL raster parsing
published 2026-10-01 modified 2026-10-01 aliases CVE-2026-15307, GHSA-wvqv-fj8w-qmhm affected introduced 0, fixed 5.2.17, introduced 6.0a1, fixed 6.0.8 fixed in 6.0.8 summary Django GeoDjango spatial lookups allow file writes and outbound requests through GDAL raster parsing
2026-10-01	PYSEC-2026-4164	sentence-transformers	5.6.0	sentence-transformers local model loading bypasses trust_remote_code and executes custom Python
published 2026-10-01 modified 2026-10-01 aliases CVE-2026-68770, GHSA-jhr6-gm9c-rqjv affected introduced 0, fixed 5.6.0 fixed in 5.6.0 summary sentence-transformers local model loading bypasses trust_remote_code and executes custom Python
2026-10-01	PYSEC-2026-4076	litellm		BerriAI litellm: SSO Login Does Not Invalidate Previous UI Session Tokens
published 2026-10-01 modified 2026-10-01 aliases CVE-2026-12796, GHSA-w2mh-qq9q-453x affected introduced 0, last_affected 1.82.2 summary BerriAI litellm: SSO Login Does Not Invalidate Previous UI Session Tokens
2026-10-01	PYSEC-2026-4069	litellm		BerriAI litellm has SSRF via Unvalidated spec_path URL in MCP OpenAPI Spec Loader
published 2026-10-01 modified 2026-10-01 aliases CVE-2026-12798, GHSA-c693-x898-5g4h affected introduced 0, last_affected 1.82.2 summary BerriAI litellm has SSRF via Unvalidated spec_path URL in MCP OpenAPI Spec Loader
2026-10-01	PYSEC-2026-4072	litellm		BerriAI litellm: UI User Enumeration leads to System-Wide Information Disclosure
published 2026-10-01 modified 2026-10-01 aliases CVE-2026-12799, GHSA-m2v5-74w2-qhcj affected introduced 0, last_affected 1.82.2 summary BerriAI litellm: UI User Enumeration leads to System-Wide Information Disclosure
2026-10-01	PYSEC-2026-4074	litellm		BerriAI litellm has Security Feature Bypass in BannedKeywords and AzureContentSafety Guardrails via call_type Mismatch on Async Endpoints
published 2026-10-01 modified 2026-10-01 aliases CVE-2026-12797, GHSA-p897-vf7j-f5h8 affected introduced 0, last_affected 1.82.5 summary BerriAI litellm has Security Feature Bypass in BannedKeywords and AzureContentSafety Guardrails via call_type Mismatch on Async Endpoints
2026-10-01	PYSEC-2026-4071	litellm		LiteLLM: SSO Debug Flow Has Improper Authentication
published 2026-10-01 modified 2026-10-01 aliases CVE-2026-12795, GHSA-j37q-q7p9-vpwm affected introduced 0, last_affected 1.82.2 summary LiteLLM: SSO Debug Flow Has Improper Authentication
2026-10-01	PYSEC-2026-4067	litellm	1.84.0	LiteLLM: MCP Proxy Has Improper Authentication
published 2026-10-01 modified 2026-10-01 aliases CVE-2026-12773, GHSA-4jcj-7x88-m979 affected introduced 0, fixed 1.84.0 fixed in 1.84.0 summary LiteLLM: MCP Proxy Has Improper Authentication
2026-10-01	PYSEC-2026-4075	litellm		LiteLLM: M2M JWT Handler Has Improper Authorization
published 2026-10-01 modified 2026-10-01 aliases CVE-2026-12771, GHSA-qmf3-4767-5fg3 affected introduced 0, last_affected 1.82.2 summary LiteLLM: M2M JWT Handler Has Improper Authorization
2026-10-01	PYSEC-2026-4073	litellm		LiteLLM: PROXY_ADMIN database API Key Generator Has Insufficient Session Expiration
published 2026-10-01 modified 2026-10-01 aliases CVE-2026-12772, GHSA-mf52-j94g-746m affected introduced 0, last_affected 1.82.2 summary LiteLLM: PROXY_ADMIN database API Key Generator Has Insufficient Session Expiration
2026-10-01	PYSEC-2026-4068	litellm		LiteLLM: Admin Key Handler Has Improper Authorization
published 2026-10-01 modified 2026-10-01 aliases CVE-2026-12770, GHSA-6qr3-3g89-m4jj affected introduced 0, last_affected 1.63.1 summary LiteLLM: Admin Key Handler Has Improper Authorization
2026-09-28	PYSEC-2026-4183	pyjwt	2.15.0	PyJWT is a Python implementation of JSON Web Token standards.
published 2026-09-28 modified 2026-10-07 aliases CVE-2026-102275, GHSA-x33g-cr3x-6449 affected introduced 2.1.0, fixed 2.15.0 fixed in 2.15.0 summary PyJWT is a Python implementation of JSON Web Token standards.
2026-09-18	PYSEC-2026-4013	virtualenv	21.7.13	virtualenv bash and fish activation scripts execute commands embedded in paths
published 2026-09-18 modified 2026-09-30 aliases CVE-2026-102925, GHSA-p58f-9548-mpm2 affected introduced 0, fixed 21.7.13 fixed in 21.7.13 summary virtualenv bash and fish activation scripts execute commands embedded in paths
2026-09-18	PYSEC-2026-4014	virtualenv	21.7.12	Command injection via --prompt in activate.bat (batch activator)
published 2026-09-18 modified 2026-09-30 aliases CVE-2026-102937, GHSA-x78j-v8h9-3j2q affected introduced 0, fixed 21.7.12 fixed in 21.7.12 summary Command injection via --prompt in activate.bat (batch activator)
2026-09-18	PYSEC-2026-4011	virtualenv	21.7.12	Downloaded seed wheels (pip/setuptools) are not integrity-checked before use
published 2026-09-18 modified 2026-09-30 aliases CVE-2026-102930, GHSA-94p9-xgh2-xp45 affected introduced 0, fixed 21.7.12 fixed in 21.7.12 summary Downloaded seed wheels (pip/setuptools) are not integrity-checked before use
2026-09-17	PYSEC-2026-4012	virtualenv	21.7.11	virtualenv writes prompt values into pyvenv.cfg without sanitizing line boundaries, allowing configuration injection
published 2026-09-17 modified 2026-09-30 aliases CVE-2026-102938, GHSA-9h9j-4vrj-gf7g affected introduced 0, fixed 21.7.11 fixed in 21.7.11 summary virtualenv writes prompt values into pyvenv.cfg without sanitizing line boundaries, allowing configuration injection
2026-09-10	PYSEC-2026-3940	weasyprint	70.0	weasyprint Has Server-Side Request Forgery (SSRF)
published 2026-09-10 modified 2026-09-10 aliases CVE-2026-55073, GHSA-jf6q-chmf-3h3v affected introduced 0, fixed 70.0 fixed in 70.0 summary weasyprint Has Server-Side Request Forgery (SSRF)
2026-09-10	PYSEC-2026-3846	httpx2	2.12.0	HTTPX2: Streaming response decompression does not bound peak memory (decompression amplification)
published 2026-09-10 modified 2026-09-10 aliases CVE-2026-84382, GHSA-8xx6-hgc6-gc2m affected introduced 0, fixed 2.12.0 fixed in 2.12.0 summary HTTPX2: Streaming response decompression does not bound peak memory (decompression amplification)
2026-09-10	PYSEC-2026-3849	httpx2	2.11.0	HTTPX2: Conflicting Content-Length and Transfer-Encoding headers can be auto-generated
published 2026-09-10 modified 2026-09-10 aliases CVE-2026-84380, GHSA-pf96-p4fj-6566 affected introduced 0, fixed 2.11.0 fixed in 2.11.0 summary HTTPX2: Conflicting Content-Length and Transfer-Encoding headers can be auto-generated
2026-09-10	PYSEC-2026-3848	httpx2	2.11.0	HTTPX2: Multipart part header injection via unvalidated file Content-Type and custom headers
published 2026-09-10 modified 2026-09-10 aliases CVE-2026-84379, GHSA-h4x7-gw46-3wm6 affected introduced 0, fixed 2.11.0 fixed in 2.11.0 summary HTTPX2: Multipart part header injection via unvalidated file Content-Type and custom headers
2026-09-10	PYSEC-2026-3847	httpx2	2.10.0	HTTPX2: Quadratic SSE line buffering can cause CPU denial of service
published 2026-09-10 modified 2026-09-10 aliases CVE-2026-84378, GHSA-f2fp-rgf2-35cp affected introduced 2.5.0, fixed 2.10.0 fixed in 2.10.0 summary HTTPX2: Quadratic SSE line buffering can cause CPU denial of service
2026-09-10	PYSEC-2026-3844	httpcore2	2.10.0	HTTPX2: Secure WebSocket traffic sent without TLS through SOCKS proxies
published 2026-09-10 modified 2026-09-10 aliases CVE-2026-84381, GHSA-7mj9-2mp8-4m2p affected introduced 0, fixed 2.10.0 fixed in 2.10.0 summary HTTPX2: Secure WebSocket traffic sent without TLS through SOCKS proxies
2026-09-10	PYSEC-2026-3837	gitpython	3.1.59	GitPython: TagReference.create positional reference bypasses kwargs-only --file guard, enabling arbitrary file read (incomplete fix of 3af0c251)
published 2026-09-10 modified 2026-09-10 aliases CVE-2026-78679, GHSA-3wxw-xv34-2frg affected introduced 0, fixed 3.1.59 fixed in 3.1.59 summary GitPython: TagReference.create positional reference bypasses kwargs-only --file guard, enabling arbitrary file read (incomplete fix of 3af0c251)
2026-09-10	PYSEC-2026-3863	mistune	3.3.3	Mistune: Denial of Service — RecursionError via Excessive Emphasis Markers in Markdown
published 2026-09-10 modified 2026-09-10 aliases CVE-2026-76098, GHSA-6m44-fpc8-c3rq affected introduced 3.3.0, fixed 3.3.3 fixed in 3.3.3 summary Mistune: Denial of Service — RecursionError via Excessive Emphasis Markers in Markdown
2026-09-10	PYSEC-2026-3928	tornado	6.5.8	Tornado: Urlencoded body parsing omits max_num_fields, so one request can stall the event loop
published 2026-09-10 modified 2026-09-10 aliases CVE-2026-82397, GHSA-mpf4-983q-p7j4 affected introduced 0, fixed 6.5.8 fixed in 6.5.8 summary Tornado: Urlencoded body parsing omits max_num_fields, so one request can stall the event loop
2026-09-10	PYSEC-2026-3912	pypdf	6.15.0	pypdf: Inefficient handling of non-whitespace inputs in read_until_whitespace
published 2026-09-10 modified 2026-09-10 aliases CVE-2026-82398, GHSA-fc8x-2rww-xw9m affected introduced 0, fixed 6.15.0 fixed in 6.15.0 summary pypdf: Inefficient handling of non-whitespace inputs in read_until_whitespace
2026-09-10	PYSEC-2026-3871	nltk	3.10.3	NLTK: Quadratic CPU Exhaustion in `XMLCorpusView._read_xml_fragment()`
published 2026-09-10 modified 2026-09-10 aliases CVE-2026-81723, GHSA-vp2x-qp44-57v7 affected introduced 0, fixed 3.10.3 fixed in 3.10.3 summary NLTK: Quadratic CPU Exhaustion in `XMLCorpusView._read_xml_fragment()`
2026-09-10	PYSEC-2026-3869	nltk	3.10.3	NLTK: Uncontrolled resource consumption in RecursiveDescentParser via ambiguous or left-recursive grammars
published 2026-09-10 modified 2026-09-10 aliases CVE-2026-12876, GHSA-ff5c-cp5c-9wjf affected introduced 0, fixed 3.10.3 fixed in 3.10.3 summary NLTK: Uncontrolled resource consumption in RecursiveDescentParser via ambiguous or left-recursive grammars
2026-09-10	PYSEC-2026-3910	pypdf	6.16.1	pypdf: Possible long runtimes/large memory usage when retrieving outlines
published 2026-09-10 modified 2026-09-10 aliases CVE-2026-84310, GHSA-23w6-3w8w-8484 affected introduced 0, fixed 6.16.1 fixed in 6.16.1 summary pypdf: Possible long runtimes/large memory usage when retrieving outlines
2026-09-10	PYSEC-2026-3911	pypdf	6.16.1	pypdf: Possible long runtimes/large memory usage when extracting XForm objects
published 2026-09-10 modified 2026-09-10 aliases CVE-2026-84311, GHSA-763m-79hh-57f2 affected introduced 0, fixed 6.16.1 fixed in 6.16.1 summary pypdf: Possible long runtimes/large memory usage when extracting XForm objects
2026-09-10	PYSEC-2026-3913	pypdf	6.16.0	pypdf: Possible infinite loop for TreeObject.insert_child
published 2026-09-10 modified 2026-09-10 aliases CVE-2026-84309, GHSA-jp53-mhqp-8xcg affected introduced 0, fixed 6.16.0 fixed in 6.16.0 summary pypdf: Possible infinite loop for TreeObject.insert_child
2026-09-10	PYSEC-2026-3923	sqlparse	0.6.0	sqlparse: Reindentation of tuple lists causes near-cap quadratic CPU consumption
published 2026-09-10 modified 2026-09-10 aliases CVE-2026-84305, GHSA-cfqr-cjx5-5jcm affected introduced 0, fixed 0.6.0 fixed in 0.6.0 summary sqlparse: Reindentation of tuple lists causes near-cap quadratic CPU consumption
2026-09-10	PYSEC-2026-3868	nltk	3.10.3	NLTK: Uncontrolled search path when invoking the Graphviz 'dot' binary
published 2026-09-10 modified 2026-09-10 aliases CVE-2026-78680, GHSA-6hwm-xvph-95vm affected introduced 0, fixed 3.10.3 fixed in 3.10.3 summary NLTK: Uncontrolled search path when invoking the Graphviz 'dot' binary
2026-09-10	PYSEC-2026-3827	djangorestframework	3.17.2	Django REST framework: Potential bypass of Django `DATA_UPLOAD_MAX_MEMORY_SIZE` when parsing oversized JSON and urlencoded request bodies via DRF `request.data`
published 2026-09-10 modified 2026-09-10 aliases CVE-2026-73228, GHSA-2m8g-3cmr-wg3w affected introduced 0, fixed 3.17.2 fixed in 3.17.2 summary Django REST framework: Potential bypass of Django `DATA_UPLOAD_MAX_MEMORY_SIZE` when parsing oversized JSON and urlencoded request bodies via DRF `request.data`
2026-09-10	PYSEC-2026-3828	djangorestframework	3.17.2	Django REST framework: AdminRenderer may disclose GET-protected data when rendering invalid write requests
published 2026-09-10 modified 2026-09-10 aliases CVE-2026-73229, GHSA-g47c-3xmw-q6m2 affected introduced 0, fixed 3.17.2 fixed in 3.17.2 summary Django REST framework: AdminRenderer may disclose GET-protected data when rendering invalid write requests
2026-09-10	PYSEC-2026-3861	litellm	1.83.7	LiteLLM vulnerable to server-side template injection in the /prompts/test endpoint
published 2026-09-10 modified 2026-09-10 aliases CVE-2026-37004, GHSA-6wvf-77m9-58rm affected introduced 0, fixed 1.83.7 fixed in 1.83.7 summary LiteLLM vulnerable to server-side template injection in the /prompts/test endpoint
2026-09-10	PYSEC-2026-3867	nltk	3.10.3	NLTK AllowlistUnpickler dotted-name validation bypass allows remote code execution
published 2026-09-10 modified 2026-09-10 aliases CVE-2026-71513, GHSA-5gh2-94qg-qppq affected introduced 3.10.0, fixed 3.10.3 fixed in 3.10.3 summary NLTK AllowlistUnpickler dotted-name validation bypass allows remote code execution
2026-09-10	PYSEC-2026-3870	nltk	3.10.1	NLTK TweetTokenizer vulnerable to denial of service through catastrophic regex backtracking
published 2026-09-10 modified 2026-09-10 aliases CVE-2026-72818, GHSA-qx2g-xrx7-vfh8 affected introduced 0, fixed 3.10.1 fixed in 3.10.1 summary NLTK TweetTokenizer vulnerable to denial of service through catastrophic regex backtracking
2026-09-10	PYSEC-2026-3804	accelerate		Accelerate path traversal and denial of service via sharded checkpoint weight_map entries
published 2026-09-10 modified 2026-09-10 aliases CVE-2026-69112, GHSA-4j2p-28q2-5m79 affected introduced 0, last_affected 1.14.0 summary Accelerate path traversal and denial of service via sharded checkpoint weight_map entries
2026-09-10	PYSEC-2026-3843	gitpython	3.1.58	GitPython: Unsafe git option guard bypass via split_single_char_options=False short-option token smuggling enables command execution
published 2026-09-10 modified 2026-09-10 aliases CVE-2026-76220, GHSA-wvpp-8hx9-p66j affected introduced 0, fixed 3.1.58 fixed in 3.1.58 summary GitPython: Unsafe git option guard bypass via split_single_char_options=False short-option token smuggling enables command execution
2026-09-10	PYSEC-2026-3841	gitpython	3.1.58	GitPython: Arbitrary file read via --pathspec-from-file in IndexFile.remove() and Head.checkout()
published 2026-09-10 modified 2026-09-10 aliases CVE-2026-76217, GHSA-hh9p-6wh2-4mfc affected introduced 0, fixed 3.1.58 fixed in 3.1.58 summary GitPython: Arbitrary file read via --pathspec-from-file in IndexFile.remove() and Head.checkout()
2026-09-10	PYSEC-2026-3840	gitpython	3.1.58	GitPython: Unguarded git option forwarding in Repo.init enables arbitrary command execution via --template clone hooks
published 2026-09-10 modified 2026-09-10 aliases CVE-2026-76218, GHSA-9rj7-rf2p-w77r affected introduced 0, fixed 3.1.58 fixed in 3.1.58 summary GitPython: Unguarded git option forwarding in Repo.init enables arbitrary command execution via --template clone hooks
2026-09-10	PYSEC-2026-3838	gitpython	3.1.58	GitPython: Unguarded git read-tree option forwarding in IndexFile.from_tree/reset/merge_tree enables arbitrary file overwrite
published 2026-09-10 modified 2026-09-10 aliases CVE-2026-76219, GHSA-4gmw-gg2m-w46p affected introduced 0, fixed 3.1.58 fixed in 3.1.58 summary GitPython: Unguarded git read-tree option forwarding in IndexFile.from_tree/reset/merge_tree enables arbitrary file overwrite
2026-09-10	PYSEC-2026-3865	mlflow		MLflow AI Gateway permits SSRF through an unvalidated api_base
published 2026-09-10 modified 2026-09-10 aliases CVE-2026-71211, GHSA-h7x2-h6g9-p789 affected introduced 3.13.0, last_affected 3.15.2 summary MLflow AI Gateway permits SSRF through an unvalidated api_base
2026-09-10	PYSEC-2026-3929	transformers	5.10.0	Transformers save_pretrained path traversal allows arbitrary file writes through chat template names
published 2026-09-10 modified 2026-09-10 aliases CVE-2026-9856, GHSA-xrqw-3rrv-vx5w affected introduced 0, fixed 5.10.0 fixed in 5.10.0 summary Transformers save_pretrained path traversal allows arbitrary file writes through chat template names
2026-09-10	PYSEC-2026-3927	thrift	0.24.0	Apache Thrift Python bindings have a Improper Validation of Certificate with Host Mismatch vulnerabilit
published 2026-09-10 modified 2026-09-10 aliases CVE-2026-66053, GHSA-hwrj-9rr4-24xh affected introduced 0, fixed 0.24.0 fixed in 0.24.0 summary Apache Thrift Python bindings have a Improper Validation of Certificate with Host Mismatch vulnerabilit
2026-09-10	PYSEC-2026-3926	thrift	0.24.0	Apache Thrift Python, Go, PHP and Java bindings have an Infinite Loop
published 2026-09-10 modified 2026-09-10 aliases CVE-2026-43871, GHSA-8wv5-x4w7-5gww affected introduced 0, fixed 0.24.0 fixed in 0.24.0 summary Apache Thrift Python, Go, PHP and Java bindings have an Infinite Loop
2026-09-10	PYSEC-2026-3925	thrift	0.24.0	Apache Thrift Python bindings have an Improper Handling of Highly Compressed Data (Data Amplification) vulnerability
published 2026-09-10 modified 2026-09-10 aliases CVE-2026-41608, GHSA-6pjx-3pjc-mrj8 affected introduced 0, fixed 0.24.0 fixed in 0.24.0 summary Apache Thrift Python bindings have an Improper Handling of Highly Compressed Data (Data Amplification) vulnerability
2026-09-10	PYSEC-2026-3842	gitpython	3.1.52	GitPython: Environment-variable exfiltration via os.path.expandvars() on Repo.clone_from() URL
published 2026-09-10 modified 2026-09-10 aliases CVE-2026-67322, GHSA-rwj8-pgh3-r573 affected introduced 0, fixed 3.1.52 fixed in 3.1.52 summary GitPython: Environment-variable exfiltration via os.path.expandvars() on Repo.clone_from() URL
2026-09-10	PYSEC-2026-3839	gitpython	3.1.51	GitPython: command injection via unguarded Git options in `Repo.archive()`, `git.ls_remote()`, and arbitrary file overwrite via `Repo.iter_commits()` / `Repo.blame()`
published 2026-09-10 modified 2026-09-10 aliases CVE-2026-67323, GHSA-956x-8gvw-wg5v affected introduced 0, fixed 3.1.51 fixed in 3.1.51 summary GitPython: command injection via unguarded Git options in `Repo.archive()`, `git.ls_remote()`, and arbitrary file overwrite via `Repo.iter_commits()` / `Repo.blame()`
2026-09-10	PYSEC-2026-3836	gitpython	3.1.51	GitPython: Command Injection via git long-option prefix abbreviation bypass of CVE-2026-42215 blocklist
published 2026-09-10 modified 2026-09-10 aliases CVE-2026-67325, GHSA-2f96-g7mh-g2hx affected introduced 0, fixed 3.1.51 fixed in 3.1.51 summary GitPython: Command Injection via git long-option prefix abbreviation bypass of CVE-2026-42215 blocklist
2026-09-10	PYSEC-2026-3920	snowflake-connector-python	4.7.1	Snowflake Connector for Python improperly verifies TLS hostnames
published 2026-09-10 modified 2026-09-10 aliases CVE-2026-15925, GHSA-5cc2-282f-jjq2 affected introduced 0, fixed 3.18.1, introduced 4.0.0, fixed 4.7.1 fixed in 4.7.1 summary Snowflake Connector for Python improperly verifies TLS hostnames
2026-09-10	PYSEC-2026-3921	snowflake-sqlalchemy	1.11.0	Snowflake SQLAlchemy affected by SQL injection and local file disclosure vulnerabilities
published 2026-09-10 modified 2026-09-10 aliases CVE-2026-15736, GHSA-8g6f-qw9x-4q6q affected introduced 1.1.6, fixed 1.11.0 fixed in 1.11.0 summary Snowflake SQLAlchemy affected by SQL injection and local file disclosure vulnerabilities
2026-09-09	PYSEC-2026-3984	gitpython	3.1.60	GitPython before 3.1.60 contains a regular expression denial of service vulnerability in Actor.name_email_regex that processes commit author and committer fields.
published 2026-09-09 modified 2026-09-17 aliases CVE-2026-87819, GHSA-g5vv-9gxw-82hx affected introduced 0, fixed 3.1.60 fixed in 3.1.60 summary GitPython before 3.1.60 contains a regular expression denial of service vulnerability in Actor.name_email_regex that processes commit author and committer fields.
2026-09-09	PYSEC-2026-3983 withdrawn	gitpython	3.1.60	GitPython 3.1.59 fails to restrict the --no-index option in the high-level diff API, allowing attackers to read arbitrary filesystem paths as repository operands.
published 2026-09-09 modified 2026-10-01 withdrawn 2026-10-01 aliases CVE-2026-87818, GHSA-whh4-5q6c-9v3x, GHSA-rw58-wc66-99g4 affected introduced 3.1.59, fixed 3.1.60 fixed in 3.1.60 summary GitPython 3.1.59 fails to restrict the --no-index option in the high-level diff API, allowing attackers to read arbitrary filesystem paths as repository operands.
2026-09-09	PYSEC-2026-3982	gitpython	3.1.60	GitPython before 3.1.60 fails to properly validate the git directory location, allowing attackers to impersonate the git directory using tracked files like gitdir, commondir, and HEAD.
published 2026-09-09 modified 2026-09-17 aliases CVE-2026-87817, GHSA-239g-whfq-7xj9 affected introduced 0, fixed 3.1.60 fixed in 3.1.60 summary GitPython before 3.1.60 fails to properly validate the git directory location, allowing attackers to impersonate the git directory using tracked files like gitdir, commondir, and HEAD.
2026-09-02	PYSEC-2026-3966	pyspark	3.5.8	There is a lack of XSS escaping in the Spark History Server prior to 3.5.8 which allows a malicious Spark job to generate arbitrary unescaped frontend code which could lead to a minimal privilege esc…
published 2026-09-02 modified 2026-09-10 aliases CVE-2026-32773, GHSA-9437-39hj-3c93 affected introduced 3.0.0, fixed 3.5.8 fixed in 3.5.8 summary There is a lack of XSS escaping in the Spark History Server prior to 3.5.8 which allows a malicious Spark job to generate arbitrary unescaped frontend code which could lead to a minimal privilege esc…
2026-08-27	PYSEC-2026-3741	nltk	3.10.3	NLTK versions before 3.10.3 contain a filesystem containment bypass vulnerability in the Downloader.download and Downloader.incr_download methods that allows attackers to overwrite files outside the …
published 2026-08-27 modified 2026-09-01 aliases CVE-2026-81727, GHSA-f794-5jv7-7672 affected introduced 0, fixed 3.10.3 fixed in 3.10.3 summary NLTK versions before 3.10.3 contain a filesystem containment bypass vulnerability in the Downloader.download and Downloader.incr_download methods that allows attackers to overwrite files outside the …
2026-08-27	PYSEC-2026-3740	nltk	3.10.3	NLTK through 3.10.3 contains a path traversal vulnerability in model-artifact APIs that bypass pathsec enforcement by using raw file operations on caller-controlled paths.
published 2026-08-27 modified 2026-09-01 aliases CVE-2026-81726, GHSA-8mgp-746c-j5xp affected introduced 0, fixed 3.10.3 fixed in 3.10.3 summary NLTK through 3.10.3 contains a path traversal vulnerability in model-artifact APIs that bypass pathsec enforcement by using raw file operations on caller-controlled paths.
2026-08-27	PYSEC-2026-3752	nltk	3.10.3	NLTK before 3.10.3 contains a regular expression denial of service vulnerability in Pl196xCorpusReader that allows attackers to cause quadratic CPU consumption by supplying malformed TEI blocks with …
published 2026-08-27 modified 2026-09-02 aliases CVE-2026-81725, GHSA-8mpw-7fpc-4gqj affected introduced 0, fixed 3.10.3 fixed in 3.10.3 summary NLTK before 3.10.3 contains a regular expression denial of service vulnerability in Pl196xCorpusReader that allows attackers to cause quadratic CPU consumption by supplying malformed TEI blocks with …
2026-08-27	PYSEC-2026-3739	nltk	3.10.3	NLTK before 3.10.3 contains an uncontrolled recursion vulnerability in nltk.featstruct.FeatStructReader that allows unauthenticated attackers to cause a denial of service by supplying deeply nested f…
published 2026-08-27 modified 2026-09-01 aliases CVE-2026-81724, GHSA-cw6x-m8jw-qmrh affected introduced 0, fixed 3.10.3 fixed in 3.10.3 summary NLTK before 3.10.3 contains an uncontrolled recursion vulnerability in nltk.featstruct.FeatStructReader that allows unauthenticated attackers to cause a denial of service by supplying deeply nested f…
2026-08-27	PYSEC-2026-3738	nltk	3.10.3	nltk PorterStemmer in versions <= 3.10.2 (fixed in 3.10.3) contains an inefficient-algorithmic-complexity denial of service in PorterStemmer.stem().
published 2026-08-27 modified 2026-09-01 aliases CVE-2026-81722, GHSA-ww6m-cw3f-q94g affected introduced 0, fixed 3.10.3 fixed in 3.10.3 summary nltk PorterStemmer in versions <= 3.10.2 (fixed in 3.10.3) contains an inefficient-algorithmic-complexity denial of service in PorterStemmer.stem().
2026-08-26	PYSEC-2026-3751	nltk	3.10.3	NLTK before 3.10.3 contains a regular expression denial of service (ReDoS) vulnerability in the tgrep module.
published 2026-08-26 modified 2026-09-02 aliases CVE-2026-80206, GHSA-w3v8-gmh9-3wv7 affected introduced 0, fixed 3.10.3 fixed in 3.10.3 summary NLTK before 3.10.3 contains a regular expression denial of service (ReDoS) vulnerability in the tgrep module.
2026-08-26	PYSEC-2026-3750	nltk	3.10.0	NLTK versions before 3.10.0 contain a regular expression denial of service vulnerability in Text.findall() and TokenSearcher.findall() methods that accept user-supplied regular expressions without va…
published 2026-08-26 modified 2026-09-02 aliases CVE-2026-80205, GHSA-rrv8-h7p8-rx55 affected introduced 0, fixed 3.10.0 fixed in 3.10.0 summary NLTK versions before 3.10.0 contain a regular expression denial of service vulnerability in Text.findall() and TokenSearcher.findall() methods that accept user-supplied regular expressions without va…
2026-08-25	PYSEC-2026-3737	nltk	3.10.3	NLTK versions before 3.10.3 contain a path traversal vulnerability in corpus readers that reopen root-derived paths using built-in open() instead of nltk.pathsec.open(), allowing symlinks to escape t…
published 2026-08-25 modified 2026-09-01 aliases CVE-2026-79676, GHSA-p4rw-rvv2-7xwr affected introduced 0, fixed 3.10.3 fixed in 3.10.3 summary NLTK versions before 3.10.3 contain a path traversal vulnerability in corpus readers that reopen root-derived paths using built-in open() instead of nltk.pathsec.open(), allowing symlinks to escape t…
2026-08-25	PYSEC-2026-3749	nltk	3.10.3	NLTK before 3.10.3 fails to validate JVM options passed through the per-call options parameter in the java() function, allowing attackers to inject dangerous JVM flags.
published 2026-08-25 modified 2026-09-02 aliases CVE-2026-79675, GHSA-m4rf-3fr8-xwx3 affected introduced 0, fixed 3.10.3 fixed in 3.10.3 summary NLTK before 3.10.3 fails to validate JVM options passed through the per-call options parameter in the java() function, allowing attackers to inject dangerous JVM flags.
2026-08-25	PYSEC-2026-3736	nltk	3.10.3	NLTK versions before 3.10.3 contain a path sandbox bypass vulnerability in corpus-reader constructors that allows attackers to read files outside the intended data root.
published 2026-08-25 modified 2026-09-01 aliases CVE-2026-79674, GHSA-3gq4-3j92-5w49 affected introduced 0, fixed 3.10.3 fixed in 3.10.3 summary NLTK versions before 3.10.3 contain a path sandbox bypass vulnerability in corpus-reader constructors that allows attackers to read files outside the intended data root.
2026-08-25	PYSEC-2026-3735	nltk	3.10.3	NLTK versions before 3.10.3 contain a remote code execution vulnerability in allowlisted pickle loaders that trust entire module namespaces instead of specific safe callables.
published 2026-08-25 modified 2026-09-01 aliases CVE-2026-79657, GHSA-x99w-6fgc-pmfw affected introduced 0, fixed 3.10.3 fixed in 3.10.3 summary NLTK versions before 3.10.3 contain a remote code execution vulnerability in allowlisted pickle loaders that trust entire module namespaces instead of specific safe callables.
2026-08-25	PYSEC-2026-3734	nltk	3.10.0	NLTK before 3.10.0 (affected versions <=3.9.4) contains an unsafe pickle deserialization vulnerability in the TransitionParser.parse() method (nltk/parse/transitionparser.py).
published 2026-08-25 modified 2026-09-01 aliases CVE-2026-78683, GHSA-rhp5-r9x4-f5g2 affected introduced 0, fixed 3.10.0 fixed in 3.10.0 summary NLTK before 3.10.0 (affected versions <=3.9.4) contains an unsafe pickle deserialization vulnerability in the TransitionParser.parse() method (nltk/parse/transitionparser.py).
2026-08-25	PYSEC-2026-3733	nltk	3.10.3	NLTK before 3.10.3 contains a server-side request forgery vulnerability in nltk.pathsec.urlopen (and callers nltk.data.load, nltk.downloader.Downloader.index/download) when an HTTP proxy is configure…
published 2026-08-25 modified 2026-09-01 aliases CVE-2026-78682, GHSA-6ww7-3frv-cqxh affected introduced 0, fixed 3.10.3 fixed in 3.10.3 summary NLTK before 3.10.3 contains a server-side request forgery vulnerability in nltk.pathsec.urlopen (and callers nltk.data.load, nltk.downloader.Downloader.index/download) when an HTTP proxy is configure…
2026-08-25	PYSEC-2026-3748	nltk	3.10.3	NLTK versions before 3.10.3 use xml.etree.ElementTree to parse XML in multiple modules, which honors entity declarations in document DTDs.
published 2026-08-25 modified 2026-09-02 aliases CVE-2026-78681, GHSA-97qj-x29f-37w7 affected introduced 0, fixed 3.10.3 fixed in 3.10.3 summary NLTK versions before 3.10.3 use xml.etree.ElementTree to parse XML in multiple modules, which honors entity declarations in document DTDs.
2026-08-25	PYSEC-2026-3788	gitpython	3.1.59	GitPython versions before 3.1.59 contain an incomplete denylist in the unsafe_git_revision_options guard that omits --contents and -S options, allowing attackers to read arbitrary files by passing th…
published 2026-08-25 modified 2026-09-03 aliases CVE-2026-78678, GHSA-5xxx-qhh7-9287 affected introduced 0, fixed 3.1.59 fixed in 3.1.59 summary GitPython versions before 3.1.59 contain an incomplete denylist in the unsafe_git_revision_options guard that omits --contents and -S options, allowing attackers to read arbitrary files by passing th…
2026-08-25	PYSEC-2026-3787	gitpython	3.1.59	GitPython before 3.1.59 omits --separate-git-dir from unsafe_git_clone_options, allowing attackers to create arbitrary git directories outside the intended clone destination.
published 2026-08-25 modified 2026-09-03 aliases CVE-2026-78677, GHSA-8mcc-hrx5-hvxc affected introduced 0, fixed 3.1.59 fixed in 3.1.59 summary GitPython before 3.1.59 omits --separate-git-dir from unsafe_git_clone_options, allowing attackers to create arbitrary git directories outside the intended clone destination.
2026-08-25	PYSEC-2026-3786	gitpython	3.1.59	GitPython before 3.1.59 fails to safely re-serialize multi-line git-config values during write operations, corrupting dormant quoted values into injected directives like core.hooksPath.
published 2026-08-25 modified 2026-09-03 aliases CVE-2026-78676, GHSA-284h-m62q-gf8w affected introduced 0, fixed 3.1.59 fixed in 3.1.59 summary GitPython before 3.1.59 fails to safely re-serialize multi-line git-config values during write operations, corrupting dormant quoted values into injected directives like core.hooksPath.
2026-08-25	PYSEC-2026-3785	gitpython	3.1.59	GitPython before 3.1.59 fails to disable merge_includes when parsing .gitmodules, allowing attackers to disclose local file content by including arbitrary file paths via [include] directives.
published 2026-08-25 modified 2026-09-03 aliases CVE-2026-78675, GHSA-7833-fr7j-v32q affected introduced 0, fixed 3.1.59 fixed in 3.1.59 summary GitPython before 3.1.59 fails to disable merge_includes when parsing .gitmodules, allowing attackers to disclose local file content by including arbitrary file paths via [include] directives.
2026-08-22	PYSEC-2026-3732	nltk	3.9.4	NLTK versions before 3.9.4 contain a symlink escape vulnerability in CorpusReader.open() that allows local attackers to read arbitrary files outside the corpus root.
published 2026-08-22 modified 2026-09-01 aliases CVE-2026-70626, GHSA-r6gq-whwq-mvg9 affected introduced 0, fixed 3.9.4 fixed in 3.9.4 summary NLTK versions before 3.9.4 contain a symlink escape vulnerability in CorpusReader.open() that allows local attackers to read arbitrary files outside the corpus root.
2026-08-22	PYSEC-2026-3724	nltk	3.9.4	NLTK versions before 3.9.4 contain an unbounded recursion vulnerability in JSONTaggedDecoder.decode_obj() that allows attackers to cause denial of service by supplying deeply nested JSON structures.
published 2026-08-22 modified 2026-08-27 aliases CVE-2026-66393, GHSA-rf74-v2fm-23pw affected introduced 0, fixed 3.9.4 fixed in 3.9.4 summary NLTK versions before 3.9.4 contain an unbounded recursion vulnerability in JSONTaggedDecoder.decode_obj() that allows attackers to cause denial of service by supplying deeply nested JSON structures.
2026-08-22	PYSEC-2026-3731	nltk	3.10.0	NLTK versions before 3.10.0 contain a logic bug in FileSystemPathPointer.open() where the sandbox validation check compares a normalized path against itself, making the security check permanently ine…
published 2026-08-22 modified 2026-09-01 aliases CVE-2026-65915, GHSA-72r2-7mfr-5xr9 affected introduced 0, fixed 3.10.0 fixed in 3.10.0 summary NLTK versions before 3.10.0 contain a logic bug in FileSystemPathPointer.open() where the sandbox validation check compares a normalized path against itself, making the security check permanently ine…
2026-08-22	PYSEC-2026-3730	nltk	3.10.0	NLTK before 3.10.0 contains an arbitrary local file read vulnerability in StreamBackedCorpusView that bypasses pathsec.ENFORCE by calling builtins.open() directly instead of pathsec.open().
published 2026-08-22 modified 2026-09-01 aliases CVE-2026-63312, GHSA-x5ph-mj9p-rfr8 affected introduced 0, fixed 3.10.0 fixed in 3.10.0 summary NLTK before 3.10.0 contains an arbitrary local file read vulnerability in StreamBackedCorpusView that bypasses pathsec.ENFORCE by calling builtins.open() directly instead of pathsec.open().
2026-08-22	PYSEC-2026-3723	nltk	3.10.0	NLTK before 3.10.0 (affected versions <= 3.9.4) contains a server-side request forgery (SSRF) vulnerability in the validate_network_url() function in nltk/pathsec.py.
published 2026-08-22 modified 2026-08-27 aliases CVE-2026-63311, GHSA-3gqm-fcw5-w839 affected introduced 0, fixed 3.10.0 fixed in 3.10.0 summary NLTK before 3.10.0 (affected versions <= 3.9.4) contains a server-side request forgery (SSRF) vulnerability in the validate_network_url() function in nltk/pathsec.py.
2026-08-22	PYSEC-2026-3729	nltk	3.9.3	NLTK before 3.9.3 fails to verify file integrity after downloading packages and before extraction in the downloader module.
published 2026-08-22 modified 2026-09-10 aliases CVE-2026-63310, GHSA-5wp5-5229-5g6q, GHSA-gf32-cmjh-8m9v affected introduced 0, fixed 3.9.3 fixed in 3.9.3 summary NLTK before 3.9.3 fails to verify file integrity after downloading packages and before extraction in the downloader module.
2026-08-22	PYSEC-2026-3722	nltk	3.10.0	NLTK versions before 3.10.0 default to ENFORCE=False in pathsec.py, causing all security validation functions to emit warnings instead of raising exceptions.
published 2026-08-22 modified 2026-08-27 aliases CVE-2026-62388, GHSA-p3m8-78j2-g5p3 affected introduced 0, fixed 3.10.0 fixed in 3.10.0 summary NLTK versions before 3.10.0 default to ENFORCE=False in pathsec.py, causing all security validation functions to emit warnings instead of raising exceptions.
2026-08-22	PYSEC-2026-3728	nltk	3.10.0	NLTK versions before 3.10.0 contain a path traversal vulnerability in FramenetCorpusReader and NKJPCorpusReader that allows attackers to parse XML files outside the corpus root by supplying unsafe se…
published 2026-08-22 modified 2026-09-01 aliases CVE-2026-62385, GHSA-568f-pv23-39p4 affected introduced 0, fixed 3.10.0 fixed in 3.10.0 summary NLTK versions before 3.10.0 contain a path traversal vulnerability in FramenetCorpusReader and NKJPCorpusReader that allows attackers to parse XML files outside the corpus root by supplying unsafe se…
2026-08-22	PYSEC-2026-3789	nltk	3.10.2	NLTK versions before 3.10.2 contain a symlink-based sandbox bypass in FramenetCorpusReader that allows attackers to read arbitrary XML files outside the corpus root.
published 2026-08-22 modified 2026-09-03 aliases CVE-2026-62384, GHSA-f833-7jw8-xwrv affected introduced 3.10.0, fixed 3.10.2 fixed in 3.10.2 summary NLTK versions before 3.10.2 contain a symlink-based sandbox bypass in FramenetCorpusReader that allows attackers to read arbitrary XML files outside the corpus root.
2026-08-22	PYSEC-2026-3726	nltk	3.10.2	nltk versions before 3.10.2 contain a symlink-based arbitrary file read vulnerability in IPIPANCorpusReader methods that bypass nltk.pathsec validation entirely.
published 2026-08-22 modified 2026-08-28 aliases CVE-2026-62383, GHSA-3hhw-38pf-pxj6 affected introduced 3.10.0, fixed 3.10.2 fixed in 3.10.2 summary nltk versions before 3.10.2 contain a symlink-based arbitrary file read vulnerability in IPIPANCorpusReader methods that bypass nltk.pathsec validation entirely.
2026-08-22	PYSEC-2026-3790	nltk	3.10.3	NLTK 3.9.4 through 3.10.2 contains a path traversal vulnerability in CrubadanCorpusReader.
published 2026-08-22 modified 2026-09-03 aliases CVE-2026-71514, GHSA-cv22-g7mw-8v73 affected introduced 3.9.4, fixed 3.10.3 fixed in 3.10.3 summary NLTK 3.9.4 through 3.10.2 contains a path traversal vulnerability in CrubadanCorpusReader.
2026-08-19	PYSEC-2026-3784	gitpython	3.1.58	GitPython before 3.1.58 fails to validate submodule names from .gitmodules files, allowing attackers to create Git repositories at arbitrary filesystem paths outside the intended clone directory.
published 2026-08-19 modified 2026-09-03 aliases CVE-2026-76222, GHSA-hmq2-w58f-27jc affected introduced 0, fixed 3.1.58 fixed in 3.1.58 summary GitPython before 3.1.58 fails to validate submodule names from .gitmodules files, allowing attackers to create Git repositories at arbitrary filesystem paths outside the intended clone directory.
2026-08-19	PYSEC-2026-3783	gitpython	3.1.58	GitPython before 3.1.58 contains a config-name injection vulnerability in the option-name validator that allows attackers to forge arbitrary git-config directives by injecting equals signs, hash symb…
published 2026-08-19 modified 2026-09-03 aliases CVE-2026-76221, GHSA-jm78-9fvv-mhgr affected introduced 0, fixed 3.1.58 fixed in 3.1.58 summary GitPython before 3.1.58 contains a config-name injection vulnerability in the option-name validator that allows attackers to forge arbitrary git-config directives by injecting equals signs, hash symb…
2026-08-19	PYSEC-2026-3687	mlflow	3.15.0	MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)
published 2026-08-19 modified 2026-08-19 aliases CVE-2026-64849, GHSA-7gwp-5pfp-969j affected introduced 0, fixed 3.15.0 fixed in 3.15.0 summary MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)
2026-08-19	PYSEC-2026-3698	sqlparse	0.6.0	sqlparse: Inefficient Regex Handling of Dollar-Quoted SQL Literals Leads to ReDoS (Denial of Service)
published 2026-08-19 modified 2026-08-19 aliases CVE-2026-59893, GHSA-prg7-hcfm-mfcr affected introduced 0, fixed 0.6.0 fixed in 0.6.0 summary sqlparse: Inefficient Regex Handling of Dollar-Quoted SQL Literals Leads to ReDoS (Denial of Service)
2026-08-19	PYSEC-2026-3699	sqlparse	0.6.0	sqlparse: TokenList.__init__ materializes O(subtree) value per group, causing CPU DoS before depth/token caps trigger
published 2026-08-19 modified 2026-08-19 aliases CVE-2026-54284, GHSA-pwgv-4x5q-6m9f affected introduced 0, fixed 0.6.0 fixed in 0.6.0 summary sqlparse: TokenList.__init__ materializes O(subtree) value per group, causing CPU DoS before depth/token caps trigger
2026-08-19	PYSEC-2026-3697	sqlparse	0.6.0	sqlparse: Quadratic O(n²) DoS in group_comments
published 2026-08-19 modified 2026-08-19 aliases CVE-2026-71491, GHSA-f2ff-p2ww-7p4p affected introduced 0, fixed 0.6.0 fixed in 0.6.0 summary sqlparse: Quadratic O(n²) DoS in group_comments
2026-08-19	PYSEC-2026-3696	sqlparse	0.6.0	sqlparse: Generated Python and PHP snippets allow SQL string breakout through unescaped backslashes
published 2026-08-19 modified 2026-08-19 aliases CVE-2026-59894, GHSA-3496-9g83-7v6x affected introduced 0, fixed 0.6.0 fixed in 0.6.0 summary sqlparse: Generated Python and PHP snippets allow SQL string breakout through unescaped backslashes
2026-08-19	PYSEC-2026-3693	pydantic-ai-slim	2.0.0b6	Pydantic AI: Unvalidated UploadedFile references in UI adapters allow server-side file access using the application's credentials
published 2026-08-19 modified 2026-08-19 aliases CVE-2026-54249, GHSA-h7p7-w5gc-xj3w affected introduced 1.65.0, fixed 1.106.0, introduced 2.0.0b1, fixed 2.0.0b6 fixed in 2.0.0b6 summary Pydantic AI: Unvalidated UploadedFile references in UI adapters allow server-side file access using the application's credentials
2026-08-19	PYSEC-2026-3672	jupyterlab	4.6.2	JupyterLab: Cross-site scripting (XSS) via crafted settings file (`overrides.json`)
published 2026-08-19 modified 2026-08-19 aliases CVE-2026-73417, GHSA-pppj-hq3g-57pj affected introduced 3.3.0, fixed 4.5.10, introduced 4.6.0, fixed 4.6.2 fixed in 4.6.2 summary JupyterLab: Cross-site scripting (XSS) via crafted settings file (`overrides.json`)
2026-08-19	PYSEC-2026-3671	jupyterlab	4.6.2	JupyterLab: Image viewer allows XSS when opening malicious image in new browser tab
published 2026-08-19 modified 2026-08-19 aliases CVE-2026-73415, GHSA-gx64-gj6p-pc4c affected introduced 0, fixed 4.5.10, introduced 4.6.0, fixed 4.6.2 fixed in 4.6.2 summary JupyterLab: Image viewer allows XSS when opening malicious image in new browser tab
2026-08-19	PYSEC-2026-3670	jupyterlab	4.6.2	JupyterLab: PyPI extension blocklist package-name canonicalization bypass
published 2026-08-19 modified 2026-08-19 aliases CVE-2026-73416, GHSA-89vp-jrxv-24w8 affected introduced 4.5.0, fixed 4.5.10, introduced 4.6.0, fixed 4.6.2 fixed in 4.6.2 summary JupyterLab: PyPI extension blocklist package-name canonicalization bypass
2026-08-19	PYSEC-2026-3686	mlflow	3.13.0rc0	MLflow: trace API endpoints lack proper authorization validators
published 2026-08-19 modified 2026-08-19 aliases CVE-2026-8147, GHSA-2cm6-r77w-6g96 affected introduced 2.14.0rc0, fixed 3.13.0rc0 fixed in 3.13.0rc0 summary MLflow: trace API endpoints lack proper authorization validators
2026-08-13	PYSEC-2026-3953	gitpython	3.1.54	GitPython versions before 3.1.54 contain a remote code execution vulnerability in the check_unsafe_options guard that can be bypassed by smuggling git options inside single-character kwarg values.
published 2026-08-13 modified 2026-09-10 aliases CVE-2026-73625, GHSA-r9mr-m37c-5fr3 affected introduced 0, fixed 3.1.54 fixed in 3.1.54 summary GitPython versions before 3.1.54 contain a remote code execution vulnerability in the check_unsafe_options guard that can be bypassed by smuggling git options inside single-character kwarg values.
2026-08-13	PYSEC-2026-3995	gitpython	3.1.54	GitPython versions before 3.1.54 contain an arbitrary file overwrite vulnerability in the Diffable.diff method that fails to validate git options passed through kwargs.
published 2026-08-13 modified 2026-09-29 aliases CVE-2026-73624, GHSA-fjr4-x663-mwxc affected introduced 0, fixed 3.1.54 fixed in 3.1.54 summary GitPython versions before 3.1.54 contain an arbitrary file overwrite vulnerability in the Diffable.diff method that fails to validate git options passed through kwargs.
2026-08-13	PYSEC-2026-3952	gitpython	3.1.54	GitPython before 3.1.54 contains an incomplete denylist in unsafe_git_clone_options that omits --template, allowing attackers to achieve arbitrary command execution during clone operations.
published 2026-08-13 modified 2026-09-10 aliases CVE-2026-73623, GHSA-6p8h-3wgx-97gf affected introduced 0, fixed 3.1.54 fixed in 3.1.54 summary GitPython before 3.1.54 contains an incomplete denylist in unsafe_git_clone_options that omits --template, allowing attackers to achieve arbitrary command execution during clone operations.
2026-08-13	PYSEC-2026-3951	gitpython	3.1.55	GitPython before 3.1.55 fails to disable environment variable expansion in Remote.create() and Submodule.add() URL handling, allowing attackers to exfiltrate secrets by supplying URLs containing vari…
published 2026-08-13 modified 2026-09-10 aliases CVE-2026-73622, GHSA-94p4-4cq8-9g67 affected introduced 0, fixed 3.1.55 fixed in 3.1.55 summary GitPython before 3.1.55 fails to disable environment variable expansion in Remote.create() and Submodule.add() URL handling, allowing attackers to exfiltrate secrets by supplying URLs containing vari…
2026-08-13	PYSEC-2026-3950	gitpython	3.1.56	GitPython before 3.1.56 contains an argument injection vulnerability in the Commit.count() method, which forwards keyword arguments to 'git rev-list' without the check_unsafe_options guard present in…
published 2026-08-13 modified 2026-09-10 aliases CVE-2026-73621, GHSA-p538-c434-8v24 affected introduced 0, fixed 3.1.56 fixed in 3.1.56 summary GitPython before 3.1.56 contains an argument injection vulnerability in the Commit.count() method, which forwards keyword arguments to 'git rev-list' without the check_unsafe_options guard present in…
2026-08-13	PYSEC-2026-3949	gitpython	3.1.57	GitPython before 3.1.57 fails to guard git option forwarding in IndexFile.checkout() and TagReference.create(), allowing attackers to pass unsafe options via kwargs.
published 2026-08-13 modified 2026-09-10 aliases CVE-2026-73620, GHSA-3f7w-8rr8-f37f affected introduced 0, fixed 3.1.57 fixed in 3.1.57 summary GitPython before 3.1.57 fails to guard git option forwarding in IndexFile.checkout() and TagReference.create(), allowing attackers to pass unsafe options via kwargs.
2026-08-13	PYSEC-2026-3948	gitpython	3.1.57	GitPython before 3.1.57 contains an incomplete denylist in the unsafe_git_archive_options guard that omits --add-file and --add-virtual-file options.
published 2026-08-13 modified 2026-09-10 aliases CVE-2026-73619, GHSA-539m-9xh6-q6rr affected introduced 0, fixed 3.1.57 fixed in 3.1.57 summary GitPython before 3.1.57 contains an incomplete denylist in the unsafe_git_archive_options guard that omits --add-file and --add-virtual-file options.
2026-08-10	PYSEC-2026-3655	pypdf	6.15.0	pypdf: Possible large memory usage for large /ToUnicode streams
published 2026-08-10 modified 2026-08-10 aliases CVE-2026-71870, GHSA-fp3f-mc75-235c affected introduced 0, fixed 6.15.0 fixed in 6.15.0 summary pypdf: Possible large memory usage for large /ToUnicode streams
2026-08-10	PYSEC-2026-3656	pypdf	6.15.0	pypdf: Possible long runtimes/large memory usage for large CID font width ranges
published 2026-08-10 modified 2026-08-10 aliases CVE-2026-71852, GHSA-fwg2-594c-jp42 affected introduced 0, fixed 6.15.0 fixed in 6.15.0 summary pypdf: Possible long runtimes/large memory usage for large CID font width ranges
2026-08-10	PYSEC-2026-3654	pymdown-extensions	11.0.1	pymdown-extensions: exponential-backtracking ReDoS in caret, tilde, betterem, and magiclink inline processors
published 2026-08-10 modified 2026-08-10 aliases CVE-2026-67422, GHSA-gm37-52c6-37mw affected introduced 0, fixed 11.0.1 fixed in 11.0.1 summary pymdown-extensions: exponential-backtracking ReDoS in caret, tilde, betterem, and magiclink inline processors
2026-08-10	PYSEC-2026-3628	h2	4.4.1	h2: Duplicate Host header could facilitate request smuggling
published 2026-08-10 modified 2026-08-10 aliases CVE-2026-71554, GHSA-6hr6-w5qg-qmwg affected introduced 0, fixed 4.4.1 fixed in 4.4.1 summary h2: Duplicate Host header could facilitate request smuggling
2026-08-10	PYSEC-2026-3627	awscli	1.45.28	AWS CLI: Disabled SSH host key verification in Amazon AWS CLI EMR helper commands
published 2026-08-10 modified 2026-08-10 aliases CVE-2026-18654, GHSA-hqvf-45jj-mccq affected introduced 0, fixed 1.45.28 fixed in 1.45.28 summary AWS CLI: Disabled SSH host key verification in Amazon AWS CLI EMR helper commands
2026-08-09	PYSEC-2026-3955	nltk		A Server-Side Request Forgery (SSRF) vulnerability exists in nltk/nltk versions 3.9.4 and the current develop branch.
published 2026-08-09 modified 2026-09-10 aliases CVE-2026-12372, GHSA-2jhm-w3mp-jcwr affected introduced 0, last_affected 3.9.4 summary A Server-Side Request Forgery (SSRF) vulnerability exists in nltk/nltk versions 3.9.4 and the current develop branch.
2026-08-07	PYSEC-2026-3954	nltk	3.10.0	A vulnerability in `nltk.downloader` in nltk/nltk versions <= 3.9.4 allows for cross-package resource and model poisoning.
published 2026-08-07 modified 2026-09-10 aliases CVE-2026-12261, GHSA-ffj6-66c4-86gw affected introduced 0, fixed 3.10.0 fixed in 3.10.0 summary A vulnerability in `nltk.downloader` in nltk/nltk versions <= 3.9.4 allows for cross-package resource and model poisoning.
2026-08-04	PYSEC-2026-3717	django	6.0.8	An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8.
published 2026-08-04 modified 2026-08-19 aliases CVE-2026-15830, GHSA-q238-5cxm-5c9h affected introduced 0, fixed 5.2.17, introduced 6.0, fixed 6.0.8 fixed in 6.0.8 summary An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8.
2026-08-04	PYSEC-2026-3554	cryptography	49.0.0	python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees
published 2026-08-04 modified 2026-08-04 aliases CVE-2026-69248, GHSA-m2h6-j472-rp4c affected introduced 0, fixed 49.0.0 fixed in 49.0.0 summary python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees
2026-08-04	PYSEC-2026-3553	cryptography	49.0.0	python-cryptography: Duplicate self-signed intermediates can cause exponential path-building
published 2026-08-04 modified 2026-08-04 aliases CVE-2026-69249, GHSA-jwv3-5hgf-82ww affected introduced 0, fixed 49.0.0 fixed in 49.0.0 summary python-cryptography: Duplicate self-signed intermediates can cause exponential path-building
2026-08-04	PYSEC-2026-3552	cryptography	50.0.0	cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing
published 2026-08-04 modified 2026-08-04 aliases CVE-2026-69247, GHSA-g6cj-pr64-35w5 affected introduced 44.0.0, fixed 50.0.0 fixed in 50.0.0 summary cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing
2026-08-04	PYSEC-2026-3545	aiohttp	3.14.3	AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)
published 2026-08-04 modified 2026-08-04 aliases CVE-2026-69244, GHSA-cq5v-8q36-5273 affected introduced 0, fixed 3.14.3 fixed in 3.14.3 summary AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response)
2026-08-04	PYSEC-2026-3546	aiohttp	3.14.2	AIOHTTP: HTTP request smuggling via WebSocket upgrade
published 2026-08-04 modified 2026-08-04 aliases CVE-2026-69243, GHSA-mfx4-hv73-q22v affected introduced 0, fixed 3.14.2 fixed in 3.14.2 summary AIOHTTP: HTTP request smuggling via WebSocket upgrade
2026-08-04	PYSEC-2026-3547	aiohttp	3.14.2	AIOHTTP: WebSocket client accepts compressed frames without negotiated permessage-deflate
published 2026-08-04 modified 2026-08-04 aliases CVE-2026-59881, GHSA-mq44-7p77-q5h7 affected introduced 0, fixed 3.14.2 fixed in 3.14.2 summary AIOHTTP: WebSocket client accepts compressed frames without negotiated permessage-deflate
2026-08-04	PYSEC-2026-3583	nltk	3.10.0	Natural Language Toolkit (NLTK): DNS-rebinding SSRF filter bypass in nltk.pathsec.urlopen (nltk.download / nltk.data.load) defeats ENFORCE mode
published 2026-08-04 modified 2026-08-04 aliases CVE-2026-12075, GHSA-qvv7-cg9c-w4x3 affected introduced 0, fixed 3.10.0 fixed in 3.10.0 summary Natural Language Toolkit (NLTK): DNS-rebinding SSRF filter bypass in nltk.pathsec.urlopen (nltk.download / nltk.data.load) defeats ENFORCE mode
2026-08-04	PYSEC-2026-3582	nltk	3.10.0	Natural Language Toolkit (NLTK): ReDoS in NLTK ReviewsCorpusReader FEATURES regex
published 2026-08-04 modified 2026-08-04 aliases CVE-2026-12061, GHSA-fg7f-2386-8897 affected introduced 0, fixed 3.10.0 fixed in 3.10.0 summary Natural Language Toolkit (NLTK): ReDoS in NLTK ReviewsCorpusReader FEATURES regex
2026-08-04	PYSEC-2026-3581	nltk	3.10.0	Natural Language Toolkit (NLTK): Path Traversal in NKJPCorpusReader leads to Arbitrary File Read and bypasses the nltk.pathsec sandbox (ENFORCE=True)
published 2026-08-04 modified 2026-08-04 aliases CVE-2026-12072, GHSA-6hm5-jgcp-p838 affected introduced 0, fixed 3.10.0 fixed in 3.10.0 summary Natural Language Toolkit (NLTK): Path Traversal in NKJPCorpusReader leads to Arbitrary File Read and bypasses the nltk.pathsec sandbox (ENFORCE=True)
2026-08-04	PYSEC-2026-3584	nltk	3.10.0	Natural Language Toolkit (NLTK) has path traversal in FramenetCorpusReader.frame() that allows arbitrary XML file read, bypassing the nltk.pathsec sandbox (ENFORCE=True)
published 2026-08-04 modified 2026-08-04 aliases CVE-2026-12074, GHSA-xh95-f55m-82fw affected introduced 0, fixed 3.10.0 fixed in 3.10.0 summary Natural Language Toolkit (NLTK) has path traversal in FramenetCorpusReader.frame() that allows arbitrary XML file read, bypassing the nltk.pathsec sandbox (ENFORCE=True)
2026-08-04	PYSEC-2026-3566	datamodel-code-generator	0.60.2	`datamodel-code-generator` vulnerable to code injection via unescaped carriage return in `--extra-template-data` `comment` field
published 2026-08-04 modified 2026-08-04 aliases CVE-2026-54654, GHSA-wjv6-jcfj-mf9r affected introduced 0.14.1, fixed 0.60.2 fixed in 0.60.2 summary `datamodel-code-generator` vulnerable to code injection via unescaped carriage return in `--extra-template-data` `comment` field
2026-08-04	PYSEC-2026-3558	datamodel-code-generator	0.62.0	datamodel-code-generator vulnerable to arbitrary local file read via JSON-Schema `$ref` (`file://` and `../` traversal), bypassing `--no-allow-remote-refs`
published 2026-08-04 modified 2026-08-04 aliases CVE-2026-55389, GHSA-8359-h9fx-j6v9 affected introduced 0, fixed 0.62.0 fixed in 0.62.0 summary datamodel-code-generator vulnerable to arbitrary local file read via JSON-Schema `$ref` (`file://` and `../` traversal), bypassing `--no-allow-remote-refs`
2026-08-04	PYSEC-2026-3555	datamodel-code-generator	0.60.2	`datamodel-code-generator` vulnerable to code injection in via attacker-controlled `default_factory` schema field
published 2026-08-04 modified 2026-08-04 aliases CVE-2026-54653, GHSA-386q-5hp3-95m9 affected introduced 0.17.0, fixed 0.60.2 fixed in 0.60.2 summary `datamodel-code-generator` vulnerable to code injection in via attacker-controlled `default_factory` schema field
2026-08-04	PYSEC-2026-3565	datamodel-code-generator	0.63.0	datamodel-code-generator vulnerable to SSRF protection bypass via DNS rebinding
published 2026-08-04 modified 2026-08-04 aliases CVE-2026-55391, GHSA-vx7x-vcc2-c44g affected introduced 0, fixed 0.63.0 fixed in 0.63.0 summary datamodel-code-generator vulnerable to SSRF protection bypass via DNS rebinding
2026-08-04	PYSEC-2026-3559	datamodel-code-generator	0.60.2	`datamodel-code-generator` vulnerable to code execution on import via unescaped `validators` entries in --extra-template-data
published 2026-08-04 modified 2026-08-04 aliases CVE-2026-54656, GHSA-8m8r-38jm-f355 affected introduced 0.52.1, fixed 0.60.2 fixed in 0.60.2 summary `datamodel-code-generator` vulnerable to code execution on import via unescaped `validators` entries in --extra-template-data
2026-08-04	PYSEC-2026-3560	datamodel-code-generator	0.61.0	datamodel-code-generator vulnerable to SSRF via JSON-Schema `$ref` to HTTP URL (silent by default)
published 2026-08-04 modified 2026-08-04 aliases CVE-2026-54690, GHSA-954p-556p-r752 affected introduced 0.9.1, fixed 0.61.0 fixed in 0.61.0 summary datamodel-code-generator vulnerable to SSRF via JSON-Schema `$ref` to HTTP URL (silent by default)
2026-08-04	PYSEC-2026-3557	datamodel-code-generator	0.64.0	datamodel-code-generator vulnerable to code injection via `x-python-import` / `customTypePath` in generated import statements
published 2026-08-04 modified 2026-08-04 aliases CVE-2026-55415, GHSA-5578-w22f-pfx9 affected introduced 0.11.6, fixed 0.64.0 fixed in 0.64.0 summary datamodel-code-generator vulnerable to code injection via `x-python-import` / `customTypePath` in generated import statements
2026-08-04	PYSEC-2026-3561	datamodel-code-generator	0.60.1	`datamodel-code-generator` vulnerable to code injection via unescaped carriage return in GraphQL Union description
published 2026-08-04 modified 2026-08-04 aliases CVE-2026-54621, GHSA-j884-q54q-mmx3 affected introduced 0.25.0, fixed 0.60.1 fixed in 0.60.1 summary `datamodel-code-generator` vulnerable to code injection via unescaped carriage return in GraphQL Union description
2026-08-04	PYSEC-2026-3562	datamodel-code-generator	0.60.2	`datamodel-code-generator` vulnerable to code execution on import via `x-python-type` JSON-Schema extension in datamodel-code-generator
published 2026-08-04 modified 2026-08-04 aliases CVE-2026-54655, GHSA-m34r-v34r-rf9q affected introduced 0.51.0, fixed 0.60.2 fixed in 0.60.2 summary `datamodel-code-generator` vulnerable to code execution on import via `x-python-type` JSON-Schema extension in datamodel-code-generator
2026-08-04	PYSEC-2026-3563	datamodel-code-generator	0.63.0	datamodel-code-generator: Authorization / request headers leaked to cross-origin redirect target when fetching remote schemas
published 2026-08-04 modified 2026-08-04 aliases CVE-2026-55403, GHSA-r5vv-ff45-prp2 affected introduced 0, fixed 0.63.0 fixed in 0.63.0 summary datamodel-code-generator: Authorization / request headers leaked to cross-origin redirect target when fetching remote schemas
2026-08-04	PYSEC-2026-3564	datamodel-code-generator	0.61.0	datamodel-code-generator vulnerable to SSRF via --url: no host/IP validation, follows redirects
published 2026-08-04 modified 2026-08-04 aliases CVE-2026-54691, GHSA-rfr2-mq9m-x2qx affected introduced 0.9.1, fixed 0.61.0 fixed in 0.61.0 summary datamodel-code-generator vulnerable to SSRF via --url: no host/IP validation, follows redirects
2026-08-04	PYSEC-2026-3556	datamodel-code-generator	0.62.0	datamodel-code-generator vulnerable to arbitrary local file read via XSD `schemaLocation` (`xs:include`/`xs:import`) path traversal, with no remote-ref gate
published 2026-08-04 modified 2026-08-04 aliases CVE-2026-55390, GHSA-442q-2j6p-642g affected introduced 0.59.0, fixed 0.62.0 fixed in 0.62.0 summary datamodel-code-generator vulnerable to arbitrary local file read via XSD `schemaLocation` (`xs:include`/`xs:import`) path traversal, with no remote-ref gate
2026-08-04	PYSEC-2026-3609	pymdown-extensions	11.0.0	PyMdown Extensions: Path traversal in the b64 extension lets <img src> read files outside base_path
published 2026-08-04 modified 2026-08-04 aliases CVE-2026-61632, GHSA-9xwg-3r6f-jcx2 affected introduced 0, fixed 11.0.0 fixed in 11.0.0 summary PyMdown Extensions: Path traversal in the b64 extension lets <img src> read files outside base_path
2026-08-04	PYSEC-2026-3548	awscli	1.44.78	AWS CLI: Overly permissive File Permissions
published 2026-08-04 modified 2026-08-04 aliases CVE-2026-13769, GHSA-wfp6-f47h-hxc3 affected introduced 0, fixed 1.44.78 fixed in 1.44.78 summary AWS CLI: Overly permissive File Permissions
2026-08-04	PYSEC-2026-3613	pypdf	6.14.2	pypdf: Possible infinite loop for not terminated inline images (ASCII85 and ASCIIHex filter)
published 2026-08-04 modified 2026-08-04 aliases CVE-2026-59935, GHSA-g867-7843-wf8q affected introduced 0, fixed 6.14.2 fixed in 6.14.2 summary pypdf: Possible infinite loop for not terminated inline images (ASCII85 and ASCIIHex filter)
2026-08-04	PYSEC-2026-3612	pypdf	6.14.1	pypdf: Possible infinite loop for not terminated inline images
published 2026-08-04 modified 2026-08-04 aliases CVE-2026-59936, GHSA-5xf7-4p34-54qr affected introduced 0, fixed 6.14.1 fixed in 6.14.1 summary pypdf: Possible infinite loop for not terminated inline images
2026-08-04	PYSEC-2026-3610	pypdf	6.14.0	pypdf: Possible long runtimes for repeated malformed cross-reference entries
published 2026-08-04 modified 2026-08-04 aliases CVE-2026-59937, GHSA-55h5-xmcq-c37v affected introduced 0, fixed 6.14.0 fixed in 6.14.0 summary pypdf: Possible long runtimes for repeated malformed cross-reference entries
2026-08-04	PYSEC-2026-3611	pypdf	6.14.0	pypdf: Possible large memory usage for wrong image dimensions
published 2026-08-04 modified 2026-08-04 aliases CVE-2026-59938, GHSA-5qjq-93h5-hrgp affected introduced 0, fixed 6.14.0 fixed in 6.14.0 summary pypdf: Possible large memory usage for wrong image dimensions
2026-08-03	PYSEC-2026-3981	gitpython	3.1.53	GitPython before 3.1.53 fails to properly escape section names in git config files, allowing attackers to inject arbitrary configuration directives through malicious submodule names.
published 2026-08-03 modified 2026-09-17 aliases CVE-2026-69097, GHSA-3rp5-jjmw-4wv2 affected introduced 0, fixed 3.1.53 fixed in 3.1.53 summary GitPython before 3.1.53 fails to properly escape section names in git config files, allowing attackers to inject arbitrary configuration directives through malicious submodule names.
2026-08-03	PYSEC-2026-4318	nltk		In nltk version 3.9.4, the `nltk.downloader.Downloader._download_package()` function writes downloaded package bytes to disk and may extract them before enforcing SHA-256 or MD5 checksum validation.
published 2026-08-03 modified 2026-10-16 aliases CVE-2026-12259 affected introduced 0, last_affected 3.9.4 summary In nltk version 3.9.4, the `nltk.downloader.Downloader._download_package()` function writes downloaded package bytes to disk and may extract them before enforcing SHA-256 or MD5 checksum validation.
2026-08-01	PYSEC-2026-3980	gitpython	3.1.50	GitPython before 3.1.50 fails to validate newline characters in the section parameter of config_writer(), allowing attackers to inject arbitrary section headers into .git/config.
published 2026-08-01 modified 2026-09-17 aliases CVE-2026-67326, GHSA-mv93-w799-cj2w affected introduced 0, fixed 3.1.50 fixed in 3.1.50 summary GitPython before 3.1.50 fails to validate newline characters in the section parameter of config_writer(), allowing attackers to inject arbitrary section headers into .git/config.
2026-08-01	PYSEC-2026-3947	gitpython	3.1.51	GitPython 3.1.50 fails to recognize joined short-option forms such as -u<value> (the short form of --upload-pack=<value>) when enforcing its default unsafe-option gate.
published 2026-08-01 modified 2026-09-10 aliases CVE-2026-67324, GHSA-v396-v7q4-x2qj affected introduced 3.1.50, fixed 3.1.51 fixed in 3.1.51 summary GitPython 3.1.50 fails to recognize joined short-option forms such as -u<value> (the short form of --upload-pack=<value>) when enforcing its default unsafe-option gate.
2026-07-29	PYSEC-2026-3721	pip	26.2	pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk even when installing wheels.
published 2026-07-29 modified 2026-08-21 aliases CVE-2026-13346, GHSA-qwm4-qh6w-59xr affected introduced 0, fixed 26.2 fixed in 26.2 summary pip would incorrectly handle doubly-encoded package URLs from indexes allowing for files to be installed to arbitrary locations on disk even when installing wheels.
2026-07-24	PYSEC-2026-3657	nltk	3.9.3	NLTK (Natural Language Toolkit) before version 3.9.3 contains an eval injection vulnerability in the nltk.collocations module that allows an attacker who controls command-line arguments to execute ar…
published 2026-07-24 modified 2026-08-11 aliases CVE-2025-71408, GHSA-848c-c2cx-j7qx affected introduced 0, fixed 3.9.3 fixed in 3.9.3 summary NLTK (Natural Language Toolkit) before version 3.9.3 contains an eval injection vulnerability in the nltk.collocations module that allows an attacker who controls command-line arguments to execute ar…
2026-07-24	PYSEC-2026-3716	datasets	5.0.1	Datasets through 5.0.0, fixed in commit f989ef9, contains a path traversal vulnerability in folder-based dataset builders where the file_name metadata field is not properly validated before being joi…
published 2026-07-24 modified 2026-08-19 aliases CVE-2026-66007, GHSA-379c-qx7v-6h59 affected introduced 0, fixed 5.0.1 fixed in 5.0.1 summary Datasets through 5.0.0, fixed in commit f989ef9, contains a path traversal vulnerability in folder-based dataset builders where the file_name metadata field is not properly validated before being joi…
2026-07-23	PYSEC-2026-3478	litellm	1.82.0	LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks
published 2026-07-23 modified 2026-07-23 aliases CVE-2026-59821, GHSA-72m8-9m7m-h278 affected introduced 0, fixed 1.82.0 fixed in 1.82.0 summary LiteLLM: Custom Code Guardrails production endpoints bypass code safety checks
2026-07-23	PYSEC-2026-3479	litellm	1.84.0	LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback
published 2026-07-23 modified 2026-07-23 aliases CVE-2026-59822, GHSA-7488-6r32-c95q affected introduced 0, fixed 1.84.0 fixed in 1.84.0 summary LiteLLM: MCP Authentication Bypass via OAuth2 Passthrough Fallback
2026-07-23	PYSEC-2026-3476	litellm	1.83.10	LiteLLM: Local file read via request-supplied OIDC file references
published 2026-07-23 modified 2026-07-23 aliases CVE-2026-59819, GHSA-4g5m-c9r5-49xf affected introduced 0, fixed 1.83.10 fixed in 1.83.10 summary LiteLLM: Local file read via request-supplied OIDC file references
2026-07-23	PYSEC-2026-3477	litellm	1.83.7	LiteLLM: Arbitrary file write via path traversal in Skills archive extraction
published 2026-07-23 modified 2026-07-23 aliases CVE-2026-59820, GHSA-5jmr-gcrj-2c9q affected introduced 0, fixed 1.83.7 fixed in 1.83.7 summary LiteLLM: Arbitrary file write via path traversal in Skills archive extraction
2026-07-23	PYSEC-2026-3496	pillow	12.3.0	Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service
published 2026-07-23 modified 2026-07-23 aliases CVE-2026-59204, GHSA-vjc4-5qp5-m44j affected introduced 8.2.0, fixed 12.3.0 fixed in 12.3.0 summary Pillow JPEG2000 tiled decode retains a growing scratch buffer and can be used for denial of service
2026-07-23	PYSEC-2026-3495	pillow	12.3.0	Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()
published 2026-07-23 modified 2026-07-23 aliases CVE-2026-59200, GHSA-jjj6-mw9f-p565 affected introduced 5.1.0, fixed 12.3.0 fixed in 12.3.0 summary Pillow: Decompression Bomb DoS via PdfParser.PdfStream.decode()
2026-07-23	PYSEC-2026-3494	pillow	12.3.0	Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images
published 2026-07-23 modified 2026-07-23 aliases CVE-2026-59198, GHSA-fj7v-r99m-22gq affected introduced 5.2.0, fixed 12.3.0 fixed in 12.3.0 summary Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images
2026-07-23	PYSEC-2026-3493	pillow	12.3.0	Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)
published 2026-07-23 modified 2026-07-23 aliases CVE-2026-54058, GHSA-62p4-gmf7-7g93 affected introduced 0, fixed 12.3.0 fixed in 12.3.0 summary Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)
2026-07-23	PYSEC-2026-3483	mcp	1.28.1	MCP Python SDK: WebSocket server transport does not support Host/Origin validation
published 2026-07-23 modified 2026-07-23 aliases CVE-2026-59950, GHSA-vj7q-gjh5-988w affected introduced 0, fixed 1.28.1 fixed in 1.28.1 summary MCP Python SDK: WebSocket server transport does not support Host/Origin validation
2026-07-23	PYSEC-2026-3482	mcp	1.27.2	MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal
published 2026-07-23 modified 2026-07-23 aliases CVE-2026-52869, GHSA-jpw9-pfvf-9f58 affected introduced 0, fixed 1.27.2 fixed in 1.27.2 summary MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal
2026-07-23	PYSEC-2026-3481	mcp	1.27.2	MCP Python SDK: Experimental task handlers allow any client to access and cancel other clients' tasks
published 2026-07-23 modified 2026-07-23 aliases CVE-2026-52870, GHSA-hvrp-rf83-w775 affected introduced 1.23.0, fixed 1.27.2 fixed in 1.27.2 summary MCP Python SDK: Experimental task handlers allow any client to access and cancel other clients' tasks
2026-07-23	PYSEC-2026-3461	ddtrace	4.8.2	dd-trace-py: Improper parsing of W3C baggage headers may lead to DoS
published 2026-07-23 modified 2026-07-23 aliases CVE-2026-50271, GHSA-mw54-j2v2-42hr affected introduced 0, fixed 4.8.2 fixed in 4.8.2 summary dd-trace-py: Improper parsing of W3C baggage headers may lead to DoS
2026-07-23	PYSEC-2026-3472	jupyter-server		jupyter-server is vulnerable to CORS origin validation bypass when the `allow_origin_pat` configuration is used
published 2026-07-23 modified 2026-07-23 aliases CVE-2026-6657, GHSA-v42x-x7jp-845h affected introduced 1.12.0, last_affected 2.17.0 summary jupyter-server is vulnerable to CORS origin validation bypass when the `allow_origin_pat` configuration is used
2026-07-14	PYSEC-2026-3457	pyasn1	0.6.4	pyasn1 is a generic ASN.1 library for Python.
published 2026-07-14 modified 2026-07-22 aliases CVE-2026-59886, GHSA-hm4w-wwcw-mr6r affected introduced 0, fixed 0.6.4 fixed in 0.6.4 summary pyasn1 is a generic ASN.1 library for Python.
2026-07-14	PYSEC-2026-3456	pyasn1	0.6.4	pyasn1 is a generic ASN.1 library for Python.
published 2026-07-14 modified 2026-07-22 aliases CVE-2026-59885, GHSA-8ppf-4f7h-5ppj affected introduced 0, fixed 0.6.4 fixed in 0.6.4 summary pyasn1 is a generic ASN.1 library for Python.
2026-07-14	PYSEC-2026-3455	pyasn1	0.6.4	pyasn1 is a generic ASN.1 library for Python.
published 2026-07-14 modified 2026-07-22 aliases CVE-2026-59884, GHSA-m4p7-r5rc-7g4j affected introduced 0, fixed 0.6.4 fixed in 0.6.4 summary pyasn1 is a generic ASN.1 library for Python.
2026-07-14	PYSEC-2026-3454	pillow	12.3.0	Pillow is a Python imaging library.
published 2026-07-14 modified 2026-07-22 aliases CVE-2026-59197, GHSA-xj96-63gp-2gmr affected introduced 0, fixed 12.3.0 fixed in 12.3.0 summary Pillow is a Python imaging library.
2026-07-14	PYSEC-2026-3453	pillow	12.3.0	Pillow is a Python imaging library.
published 2026-07-14 modified 2026-07-15 aliases CVE-2026-59205, GHSA-9hw9-ch79-4vh6 affected introduced 0, fixed 12.3.0 fixed in 12.3.0 summary Pillow is a Python imaging library.
2026-07-14	PYSEC-2026-3452	pillow	12.3.0	Pillow is a Python imaging library.
published 2026-07-14 modified 2026-07-15 aliases CVE-2026-59203, GHSA-pg7v-jwj7-p798 affected introduced 12.0.0, fixed 12.3.0 fixed in 12.3.0 summary Pillow is a Python imaging library.
2026-07-14	PYSEC-2026-3451	pillow	12.3.0	Pillow is a Python imaging library.
published 2026-07-14 modified 2026-07-15 aliases CVE-2026-59199, GHSA-6r8x-57c9-28j4 affected introduced 0, fixed 12.3.0 fixed in 12.3.0 summary Pillow is a Python imaging library.
2026-07-13	PYSEC-2026-2652	mistune	3.3.0	Mistune: Potential DoS via quadratic-time parsing in parse_link_text
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-49851, GHSA-qcq2-496w-v96p affected introduced 0, fixed 3.3.0 fixed in 3.3.0 summary Mistune: Potential DoS via quadratic-time parsing in parse_link_text
2026-07-13	PYSEC-2026-3018	pypdf	6.13.1	pypdf: Possible infinite loop when processing threads/articles in writer
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-54651, GHSA-g9xf-7f8q-9mcj affected introduced 0, fixed 6.13.1 fixed in 6.13.1 summary pypdf: Possible infinite loop when processing threads/articles in writer
2026-07-13	PYSEC-2026-3072	soupsieve	2.8.4	Soup Sieve: Regular Expression Denial of Service (ReDoS) via Selector Parser
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-49477, GHSA-836r-79rf-4m37 affected introduced 0, fixed 2.8.4 fixed in 2.8.4 summary Soup Sieve: Regular Expression Denial of Service (ReDoS) via Selector Parser
2026-07-13	PYSEC-2026-3071	soupsieve	2.8.4	Soup Sieve has Memory Exhaustion via Large Comma-Separated Selector Lists
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-49476, GHSA-2wc2-fm75-p42x affected introduced 0, fixed 2.8.4 fixed in 2.8.4 summary Soup Sieve has Memory Exhaustion via Large Comma-Separated Selector Lists
2026-07-13	PYSEC-2026-2614	lxml-html-clean	0.4.5	`lxml_html_clean.Cleaner` does not strip `javascript:` URLs from namespaced URL attributes
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-49825, GHSA-4jhm-jv67-739f affected introduced 0, fixed 0.4.5 fixed in 0.4.5 summary `lxml_html_clean.Cleaner` does not strip `javascript:` URLs from namespaced URL attributes
2026-07-13	PYSEC-2026-3412	weasyprint		WeasyPrint has CSS Injection via Presentational Hints
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-49452, GHSA-jhhc-3hcp-qhm5 affected introduced 0, last_affected 68.1 summary WeasyPrint has CSS Injection via Presentational Hints
2026-07-13	PYSEC-2026-2528	joserfc	1.6.8	joserfc: HS256/HS384/HS512 verify accepts empty/nil HMAC key (cross-language sibling of CVE-2026-45363)
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-49852, GHSA-gg9x-qcx2-xmrh affected introduced 0, fixed 1.6.8 fixed in 1.6.8 summary joserfc: HS256/HS384/HS512 verify accepts empty/nil HMAC key (cross-language sibling of CVE-2026-45363)
2026-07-13	PYSEC-2026-2465	dulwich	1.2.5	Dulwich's submodule path traversal in porcelain.submodule_update / porcelain.clone(recurse_submodules=True) yields RCE via attacker-dropped .git/hooks payload
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-52726, GHSA-gfhv-vqv2-4544 affected introduced 0.23.2, fixed 1.2.5 fixed in 1.2.5 summary Dulwich's submodule path traversal in porcelain.submodule_update / porcelain.clone(recurse_submodules=True) yields RCE via attacker-dropped .git/hooks payload
2026-07-13	PYSEC-2026-2530	joserfc	1.6.7	joserfc: b64=false RFC7797 JWS payloads bypass JWSRegistry payload-size limits during deserialization
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-48990, GHSA-wphv-vfrh-23q5 affected introduced 1.3.4, fixed 1.6.7 fixed in 1.6.7 summary joserfc: b64=false RFC7797 JWS payloads bypass JWSRegistry payload-size limits during deserialization
2026-07-13	PYSEC-2026-3042	python-socketio	5.16.2	python-socketio: Binary attachment accumulation can cause denial of service
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-48804, GHSA-5w7q-77mv-v69f affected introduced 0, fixed 5.16.2 fixed in 5.16.2 summary python-socketio: Binary attachment accumulation can cause denial of service
2026-07-13	PYSEC-2026-3032	python-engineio	4.13.2	python-engineio has unbound thread allocation that can cause denial of service
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-48802, GHSA-cgwc-pv48-fhj5 affected introduced 0, fixed 4.13.2 fixed in 4.13.2 summary python-engineio has unbound thread allocation that can cause denial of service
2026-07-13	PYSEC-2026-3033	python-engineio	4.13.2	python-engineio has possible denial of service due to maximum payload size sometimes not being enforced
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-48809, GHSA-m9gh-vj53-gvh9 affected introduced 0, fixed 4.13.2 fixed in 4.13.2 summary python-engineio has possible denial of service due to maximum payload size sometimes not being enforced
2026-07-13	PYSEC-2026-2981	pydantic-ai-slim	2.0.0b3	pydantic-ai: SSRF blocklist bypass via IPv4-compatible, SIIT/IVI, and local NAT64 IPv6 addresses (incomplete fix of CVE-2026-46678)
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-48782, GHSA-cg7w-rg45-pc59 affected introduced 1.56.0, fixed 1.102.0, introduced 2.0.0b1, fixed 2.0.0b3 fixed in 2.0.0b3 summary pydantic-ai: SSRF blocklist bypass via IPv4-compatible, SIIT/IVI, and local NAT64 IPv6 addresses (incomplete fix of CVE-2026-46678)
2026-07-13	PYSEC-2026-2575	langgraph-sdk	0.3.15	LangGraph SDK has unsafe URL path construction
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-48776, GHSA-w39p-vh2g-g8g5 affected introduced 0, fixed 0.3.15 fixed in 0.3.15 summary LangGraph SDK has unsafe URL path construction
2026-07-13	PYSEC-2026-2573	langgraph-checkpoint	4.1.1	LangGraph Checkpoint: Unsafe JSON deserialization in checkpoint loading
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-48775, GHSA-fjqc-hq36-qh5p affected introduced 0, fixed 4.1.1 fixed in 4.1.1 summary LangGraph Checkpoint: Unsafe JSON deserialization in checkpoint loading
2026-07-13	PYSEC-2026-2556	langchain-anthropic	1.4.6	LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loaders
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-55443, GHSA-gr75-jv2w-4656 affected introduced 0, fixed 1.4.6 fixed in 1.4.6 summary LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loaders
2026-07-13	PYSEC-2026-3022	pypdf	6.13.0	pypdf: Possible infinite loop when processing outlines/bookmarks in writer
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-54531, GHSA-m2v9-299j-rv96 affected introduced 0, fixed 6.13.0 fixed in 6.13.0 summary pypdf: Possible infinite loop when processing outlines/bookmarks in writer
2026-07-13	PYSEC-2026-3009	pypdf	6.13.0	pypdf: Possible infinite loop when retrieving fonts for layout-mode text extraction
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-54530, GHSA-52x6-gq3r-vpf4 affected introduced 0, fixed 6.13.0 fixed in 6.13.0 summary pypdf: Possible infinite loop when retrieving fonts for layout-mode text extraction
2026-07-13	PYSEC-2026-3020	pypdf	6.12.2	pypdf: Possible large memory usage for form XObjects during text extraction
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-49461, GHSA-j543-4vmf-qm7v affected introduced 0, fixed 6.12.2 fixed in 6.12.2 summary pypdf: Possible large memory usage for form XObjects during text extraction
2026-07-13	PYSEC-2026-3010	pypdf	6.12.2	pypdf: Inefficient decoding of FlateDecode PNG predictor streams
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-49460, GHSA-5hgr-hg42-57jg affected introduced 0, fixed 6.12.2 fixed in 6.12.2 summary pypdf: Inefficient decoding of FlateDecode PNG predictor streams
2026-07-13	PYSEC-2026-3025	pypdf	6.12.1	pypdf: Manipulated XMP metadata streams can exhaust RAM
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-48735, GHSA-wjqc-6w8f-h24c affected introduced 0, fixed 6.12.1 fixed in 6.12.1 summary pypdf: Manipulated XMP metadata streams can exhaust RAM
2026-07-13	PYSEC-2026-3036	python-multipart	0.0.30	python-multipart: Quadratic-time querystring parsing with semicolon separators causes CPU denial of service
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-53539, GHSA-5rvq-cxj2-64vf affected introduced 0, fixed 0.0.30 fixed in 0.0.30 summary python-multipart: Quadratic-time querystring parsing with semicolon separators causes CPU denial of service
2026-07-13	PYSEC-2026-3040	python-multipart	0.0.31	python-multipart: Negative Content-Length in parse_form buffers the entire body in memory
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-53540, GHSA-v9pg-7xvm-68hf affected introduced 0, fixed 0.0.31 fixed in 0.0.31 summary python-multipart: Negative Content-Length in parse_form buffers the entire body in memory
2026-07-13	PYSEC-2026-3037	python-multipart	0.0.30	python-multipart: Semicolon treated as querystring field separator enables parameter smuggling
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-53538, GHSA-6jv3-5f52-599m affected introduced 0, fixed 0.0.30 fixed in 0.0.30 summary python-multipart: Semicolon treated as querystring field separator enables parameter smuggling
2026-07-13	PYSEC-2026-3041	python-multipart	0.0.30	python-multipart: Content-Disposition parameter smuggling via RFC 2231/5987 extended parameters
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-53537, GHSA-vffw-93wf-4j4q affected introduced 0, fixed 0.0.30 fixed in 0.0.30 summary python-multipart: Content-Disposition parameter smuggling via RFC 2231/5987 extended parameters
2026-07-13	PYSEC-2026-3387	tornado	6.5.6	Tornado: Authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-49853, GHSA-3x9g-8vmp-wqvf affected introduced 0, fixed 6.5.6 fixed in 6.5.6 summary Tornado: Authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient
2026-07-13	PYSEC-2026-3389	tornado	6.5.6	tornado AsyncHTTPClient accumulates decompressed chunks without size limit (gzip bomb)
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-49855, GHSA-mgf9-4vpg-hj56 affected introduced 0, fixed 6.5.6 fixed in 6.5.6 summary tornado AsyncHTTPClient accumulates decompressed chunks without size limit (gzip bomb)
2026-07-13	PYSEC-2026-3388	tornado	6.5.6	Tornado has out-of-bounds memory access via C extension
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-49854, GHSA-cx3h-4qpv-8hc9 affected introduced 0, fixed 6.5.6 fixed in 6.5.6 summary Tornado has out-of-bounds memory access via C extension
2026-07-13	PYSEC-2026-3004	pypdf	6.12.0	pypdf: Possible long runtimes for zero-only width values in cross-reference streamsuntimes for zero-only width values in cross-reference streams
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-48156, GHSA-248m-82v9-q6g6 affected introduced 0, fixed 6.12.0 fixed in 6.12.0 summary pypdf: Possible long runtimes for zero-only width values in cross-reference streamsuntimes for zero-only width values in cross-reference streams
2026-07-13	PYSEC-2026-3016	pypdf	6.12.0	pypdf: Possible large memory usage for large offsets for layout mode text
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-48155, GHSA-cj93-chg6-vgv8 affected introduced 0, fixed 6.12.0 fixed in 6.12.0 summary pypdf: Possible large memory usage for large offsets for layout mode text
2026-07-13	PYSEC-2026-2466	dulwich	1.2.5	Dulwich has unbounded memory allocation in receive-pack from crafted thin packs
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-47734, GHSA-xrvj-v92f-53gj affected introduced 0.1.0, fixed 1.2.5 fixed in 1.2.5 summary Dulwich has unbounded memory allocation in receive-pack from crafted thin packs
2026-07-13	PYSEC-2026-2462	dulwich	1.2.5	Dulwich doesn't sanitize commit subjects in `porcelain.format_patch`
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-47712, GHSA-555p-6grf-mh7f affected introduced 0.24.0, fixed 1.2.5 fixed in 1.2.5 summary Dulwich doesn't sanitize commit subjects in `porcelain.format_patch`
2026-07-13	PYSEC-2026-2532	jupyter-server	2.18.2	Jupyter Server vulnerable to Path Traversal via incorrect root directory boundary check in _get_os_path()
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-5422, GHSA-gf7q-q4j7-hp7c affected introduced 0, fixed 2.18.2 fixed in 2.18.2 summary Jupyter Server vulnerable to Path Traversal via incorrect root directory boundary check in _get_os_path()
2026-07-13	PYSEC-2026-2659	mlflow	3.11.0rc0	MLflow: Any authenticated user can enumerate all gateway secrets, endpoints, and model definitions
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-3198, GHSA-r5m9-wm49-959f affected introduced 0, fixed 3.11.0rc0 fixed in 3.11.0rc0 summary MLflow: Any authenticated user can enumerate all gateway secrets, endpoints, and model definitions
2026-07-13	PYSEC-2026-2464	dulwich	1.2.5	Dulwich Vulnerable to Command Injection via Merge Driver Path
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-42563, GHSA-9277-mp7x-85jf affected introduced 0.24.0, fixed 1.2.5 fixed in 1.2.5 summary Dulwich Vulnerable to Command Injection via Merge Driver Path
2026-07-13	PYSEC-2026-2463	dulwich	1.2.5	Dulwich has an arbitrary file write via NTFS-hostile tree entries on Windows
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-42305, GHSA-897w-fcg9-f6xj affected introduced 0.10.0, fixed 1.2.5 fixed in 1.2.5 summary Dulwich has an arbitrary file write via NTFS-hostile tree entries on Windows
2026-07-13	PYSEC-2026-2982	pydantic-ai-slim	1.99.0	Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv4-mapped IPv6 (Incomplete fix of CVE-2026-25580)
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-46678, GHSA-cqp8-fcvh-x7r3 affected introduced 1.56.0, fixed 1.99.0 fixed in 1.99.0 summary Pydantic AI: SSRF cloud-metadata blocklist bypass via IPv4-mapped IPv6 (Incomplete fix of CVE-2026-25580)
2026-07-13	PYSEC-2026-2600	litellm	1.83.10	LiteLLM allows a user to modify their own user_role via the /user/update endpoint
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-47102, GHSA-wpfp-gwwc-vwq6 affected introduced 0, fixed 1.83.10 fixed in 1.83.10 summary LiteLLM allows a user to modify their own user_role via the /user/update endpoint
2026-07-13	PYSEC-2026-2598	litellm	1.83.14	LiteLLM allows an authenticated internal_user to create API keys with access to routes that their role does not permit
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-47101, GHSA-qrc4-49gv-mv9m affected introduced 0, fixed 1.83.14 fixed in 1.83.14 summary LiteLLM allows an authenticated internal_user to create API keys with access to routes that their role does not permit
2026-07-13	PYSEC-2026-3060	sagemaker	3.8.0	Amazon SageMaker Python SDK is missing integrity verification in its Triton inference handler
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-8597, GHSA-rq6v-x3j8-7qgf affected introduced 2.199.0, fixed 2.257.2, introduced 3.0.0, fixed 3.8.0 fixed in 3.8.0 summary Amazon SageMaker Python SDK is missing integrity verification in its Triton inference handler
2026-07-13	PYSEC-2026-3059	sagemaker	3.8.0	Cleartext storage of HMAC signing key in Amazon SageMaker Python SDK ModelBuilder/Serve path
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-8596, GHSA-7hh5-prp2-mfh5 affected introduced 2.199.0, fixed 2.257.2, introduced 3.0.0, fixed 3.8.0 fixed in 3.8.0 summary Cleartext storage of HMAC signing key in Amazon SageMaker Python SDK ModelBuilder/Serve path
2026-07-13	PYSEC-2026-2660	mlflow	3.10.0	MLflow authenticated users can enumerate any registered model versions due to lack of per-model permissions checks
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-2734, GHSA-w5xq-c4pf-ghq7 affected introduced 0, fixed 3.10.0 fixed in 3.10.0 summary MLflow authenticated users can enumerate any registered model versions due to lack of per-model permissions checks
2026-07-13	PYSEC-2026-2999	pymdown-extensions	10.21.3	Regression in pymdownx.snippets reintroduces sibling-prefix path traversal bypass despite restrict_base_path
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-46338, GHSA-62q4-447f-wv8h affected introduced 10.0.1, fixed 10.21.3 fixed in 10.21.3 summary Regression in pymdownx.snippets reintroduces sibling-prefix path traversal bypass despite restrict_base_path
2026-07-13	PYSEC-2026-2655	mlflow	3.11.0	MLFlow Creates a Temporary File With Insecure Permissions
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-4137, GHSA-f2m9-wcf4-cwwx affected introduced 0, fixed 3.11.0 fixed in 3.11.0 summary MLFlow Creates a Temporary File With Insecure Permissions
2026-07-13	PYSEC-2026-2560	langchain-classic	1.0.7	LangSmith SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-45134, GHSA-3644-q5cj-c5c7 affected introduced 0, fixed 1.0.7 fixed in 1.0.7 summary LangSmith SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning
2026-07-13	PYSEC-2026-2654	mlflow	3.10.0	MLflow allows an unauthenticated remote attacker to read arbitrary files from the server's filesystem
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-2614, GHSA-42h5-h8qh-vv9v affected introduced 0, fixed 3.10.0 fixed in 3.10.0 summary MLflow allows an unauthenticated remote attacker to read arbitrary files from the server's filesystem
2026-07-13	PYSEC-2026-2601	litellm	1.83.10	LiteLLM has a sandbox escape in custom-code guardrail
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-40217, GHSA-wxxx-gvqv-xp7p affected introduced 1.81.8, fixed 1.83.10 fixed in 1.83.10 summary LiteLLM has a sandbox escape in custom-code guardrail
2026-07-13	PYSEC-2026-2564	langchain-core	1.3.3	LangChain vulnerable to unsafe deserialization of attacker-controlled objects through overly broad `load()` allowlists
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-44843, GHSA-pjwx-r37v-7724 affected introduced 0, fixed 0.3.85, introduced 1.0.0, fixed 1.3.3 fixed in 1.3.3 summary LangChain vulnerable to unsafe deserialization of attacker-controlled objects through overly broad `load()` allowlists
2026-07-13	PYSEC-2026-3039	python-multipart	0.0.27	python-multipart has Denial of Service via unbounded multipart part headers
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-42561, GHSA-pp6c-gr5w-3c5g affected introduced 0, fixed 0.0.27 fixed in 0.0.27 summary python-multipart has Denial of Service via unbounded multipart part headers
2026-07-13	PYSEC-2026-2617	mako	1.3.12	Mako vulnerable to path traversal via backslash URI on Windows in TemplateLookup
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-44307, GHSA-2h4p-vjrc-8xpq affected introduced 0, fixed 1.3.12 fixed in 1.3.12 summary Mako vulnerable to path traversal via backslash URI on Windows in TemplateLookup
2026-07-13	PYSEC-2026-2537	jupyterlab	4.5.7	JupyterLab's command linker attributes in HTML enable one-click command execution from untrusted content
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-42557, GHSA-mqcg-5x36-vfcg affected introduced 0, fixed 4.5.7 fixed in 4.5.7 summary JupyterLab's command linker attributes in HTML enable one-click command execution from untrusted content
2026-07-13	PYSEC-2026-2651	mistune	3.2.1	Mistune has a ReDoS in LINK_TITLE_RE that allows denial of service via crafted Markdown input
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-33079, GHSA-8mp2-v27r-99xp affected introduced 3.0.0a1, fixed 3.2.1 fixed in 3.2.1 summary Mistune has a ReDoS in LINK_TITLE_RE that allows denial of service via crafted Markdown input
2026-07-13	PYSEC-2026-2858	paramiko		Paramiko rsakey.py allows the SHA-1 algorithm
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-44405, GHSA-r374-rxx8-8654 affected introduced 0, last_affected 4.0.0 summary Paramiko rsakey.py allows the SHA-1 algorithm
2026-07-13	PYSEC-2026-2874	pillow	12.2.0	Pillow has a PDF Parsing Trailer Infinite Loop (DoS)
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-42310, GHSA-r73j-pqj5-w3x7 affected introduced 4.2.0, fixed 12.2.0 fixed in 12.2.0 summary Pillow has a PDF Parsing Trailer Infinite Loop (DoS)
2026-07-13	PYSEC-2026-2538	jupyterlab	4.5.7	Jupyter Notebook Vulnerable to Authentication Token Theft via CommandLinker XSS
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-40171, GHSA-rch3-82jr-f9w9 affected introduced 0, fixed 4.5.7 fixed in 4.5.7 summary Jupyter Notebook Vulnerable to Authentication Token Theft via CommandLinker XSS
2026-07-13	PYSEC-2026-2876	pip	26.1	pip Vulnerable to Inclusion of Functionality from Untrusted Control Sphere
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-6357, GHSA-jp4c-xjxw-mgf9 affected introduced 0, fixed 26.1 fixed in 26.1 summary pip Vulnerable to Inclusion of Functionality from Untrusted Control Sphere
2026-07-13	PYSEC-2026-2599	litellm	1.83.7	LiteLLM: Authenticated command execution via MCP stdio test endpoints
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-42271, GHSA-v4p8-mg3p-g94g affected introduced 1.74.2, fixed 1.83.7 fixed in 1.83.7 summary LiteLLM: Authenticated command execution via MCP stdio test endpoints
2026-07-13	PYSEC-2026-2602	litellm	1.83.7	LiteLLM: Server-Side Template Injection in /prompts/test endpoint
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-42203, GHSA-xqmj-j6mv-4862 affected introduced 1.80.5, fixed 1.83.7 fixed in 1.83.7 summary LiteLLM: Server-Side Template Injection in /prompts/test endpoint
2026-07-13	PYSEC-2026-2890	poetry	2.3.4	Poetry has Path Traversal in tar extraction on Python 3.10.0 - 3.10.12 and 3.11.0 - 3.11.4
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-41140, GHSA-73h3-mf4w-8647 affected introduced 0, fixed 2.3.4 fixed in 2.3.4 summary Poetry has Path Traversal in tar extraction on Python 3.10.0 - 3.10.12 and 3.11.0 - 3.11.4
2026-07-13	PYSEC-2026-2875	pip	26.1	pip has an interpretation conflict due to handling both concatenated tar and ZIP files as ZIP files
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-3219, GHSA-58qw-9mgm-455v affected introduced 0, fixed 26.1 fixed in 26.1 summary pip has an interpretation conflict due to handling both concatenated tar and ZIP files as ZIP files
2026-07-13	PYSEC-2026-3026	pypdf	6.10.2	pypdf: Manipulated FlateDecode image dimensions can exhaust RAM
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-41314, GHSA-x284-j5p8-9c5p affected introduced 0, fixed 6.10.2 fixed in 6.10.2 summary pypdf: Manipulated FlateDecode image dimensions can exhaust RAM
2026-07-13	PYSEC-2026-3007	pypdf	6.10.2	pypdf: Possible long runtimes for wrong size values in incremental mode
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-41313, GHSA-4pxv-j86v-mhcw affected introduced 0, fixed 6.10.2 fixed in 6.10.2 summary pypdf: Possible long runtimes for wrong size values in incremental mode
2026-07-13	PYSEC-2026-3011	pypdf	6.10.2	pypdf: Manipulated FlateDecode predictor parameters can exhaust RAM
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-41312, GHSA-7gw9-cf7v-778f affected introduced 0, fixed 6.10.2 fixed in 6.10.2 summary pypdf: Manipulated FlateDecode predictor parameters can exhaust RAM
2026-07-13	PYSEC-2026-2583	langsmith	0.7.31	LangSmith SDK: Streaming token events bypass output redaction
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-41182, GHSA-rr7j-v2q5-chgv affected introduced 0, fixed 0.7.31 fixed in 0.7.31 summary LangSmith SDK: Streaming token events bypass output redaction
2026-07-13	PYSEC-2026-3038	python-multipart	0.0.26	python-multipart affected by Denial of Service via large multipart preamble or epilogue data
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-40347, GHSA-mj87-hwqh-73pj affected introduced 0, fixed 0.0.26 fixed in 0.0.26 summary python-multipart affected by Denial of Service via large multipart preamble or epilogue data
2026-07-13	PYSEC-2026-3021	pypdf	6.10.1	pypdf has long runtimes for wrong size values in cross-reference and object streams
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-41168, GHSA-jj6c-8h6c-hppx affected introduced 0, fixed 6.10.1 fixed in 6.10.1 summary pypdf has long runtimes for wrong size values in cross-reference and object streams
2026-07-13	PYSEC-2026-3006	pypdf	6.10.0	pypdf: Manipulated XMP metadata entity declarations can exhaust RAM
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-40260, GHSA-3crg-w4f6-42mx affected introduced 0, fixed 6.10.0 fixed in 6.10.0 summary pypdf: Manipulated XMP metadata entity declarations can exhaust RAM
2026-07-13	PYSEC-2026-2563	langchain-core	1.2.28	LangChain has incomplete f-string validation in prompt templates
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-40087, GHSA-926x-3r5x-gfhw affected introduced 0, fixed 0.3.84, introduced 1.0.0a1, fixed 1.2.28 fixed in 1.2.28 summary LangChain has incomplete f-string validation in prompt templates
2026-07-13	PYSEC-2026-2613	lupa		Lupa has a Sandbox escape and RCE due to incomplete attribute_filter enforcement in getattr / setattr
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-34444, GHSA-69v7-xpr6-6gjm affected introduced 0, last_affected 2.6 summary Lupa has a Sandbox escape and RCE due to incomplete attribute_filter enforcement in getattr / setattr
2026-07-13	PYSEC-2026-2597	litellm	1.83.0	LiteLLM: Privilege escalation via unrestricted proxy configuration endpoint
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-35029, GHSA-53mr-6c8q-9789 affected introduced 0, fixed 1.83.0 fixed in 1.83.0 summary LiteLLM: Privilege escalation via unrestricted proxy configuration endpoint
2026-07-13	PYSEC-2026-2431	curl-cffi	0.15.0	curl_cffi: Redirect-based SSRF leads to internal network access in curl_cffi (with TLS impersonation bypass)
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-33752, GHSA-qw2m-4pqf-rmpp affected introduced 0, fixed 0.15.0 fixed in 0.15.0 summary curl_cffi: Redirect-based SSRF leads to internal network access in curl_cffi (with TLS impersonation bypass)
2026-07-13	PYSEC-2026-2476	fastmcp	3.2.0	FastMCP: Missing Consent Verification in OAuth Proxy Callback Facilitates Confused Deputy Vulnerabilities
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-27124, GHSA-rww4-4w9c-7733 affected introduced 0, fixed 3.2.0 fixed in 3.2.0 summary FastMCP: Missing Consent Verification in OAuth Proxy Callback Facilitates Confused Deputy Vulnerabilities
2026-07-13	PYSEC-2026-2475	fastmcp	3.2.0	FastMCP has a Command Injection vulnerability - Gemini CLI
published 2026-07-13 modified 2026-07-13 aliases CVE-2025-64340, GHSA-m8x7-r2rg-vh5g affected introduced 0, fixed 3.2.0 fixed in 3.2.0 summary FastMCP has a Command Injection vulnerability - Gemini CLI
2026-07-13	PYSEC-2026-2657	mlflow		MLFlow allows Tracing + Assessments Access
published 2026-07-13 modified 2026-07-13 aliases CVE-2025-15381, GHSA-g6pg-52vf-843h affected introduced 0, last_affected 3.8.1 summary MLFlow allows Tracing + Assessments Access
2026-07-13	PYSEC-2026-2467	ecdsa	0.19.2	python-ecdsa: Denial of Service via improper DER length validation in crafted private keys
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-33936, GHSA-9f5j-8jwj-x28g affected introduced 0, fixed 0.19.2 fixed in 0.19.2 summary python-ecdsa: Denial of Service via improper DER length validation in crafted private keys
2026-07-13	PYSEC-2026-3012	pypdf	6.9.2	pypdf: Possible infinite loop during recovery attempts in DictionaryObject.read_from_stream
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-33699, GHSA-87mj-5ggw-8qc3 affected introduced 0, fixed 6.9.2 fixed in 6.9.2 summary pypdf: Possible infinite loop during recovery attempts in DictionaryObject.read_from_stream
2026-07-13	PYSEC-2026-2987	pygments	2.20.0	Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-4539, GHSA-5239-wwwm-4pmq affected introduced 0, fixed 2.20.0 fixed in 2.20.0 summary Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching
2026-07-13	PYSEC-2026-3001	pymupdf	1.26.7	PyMuPDF has a path traversal in _main_.py
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-3029, GHSA-cxqh-p2w9-fmr7 affected introduced 1.26.5, fixed 1.26.7 fixed in 1.26.7 summary PyMuPDF has a path traversal in _main_.py
2026-07-13	PYSEC-2026-2656	mlflow	3.9.0rc0	Arbitrary file write via tar traversal in mlflow
published 2026-07-13 modified 2026-07-13 aliases CVE-2025-15031, GHSA-fhff-qmm8-h2fp affected introduced 0, fixed 3.9.0rc0 fixed in 3.9.0rc0 summary Arbitrary file write via tar traversal in mlflow
2026-07-13	PYSEC-2026-2445	deepdiff	8.6.2	DeepDiff has Memory Exhaustion DoS through SAFE_TO_IMPORT
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-33155, GHSA-54jj-px8x-5w5q affected introduced 5.0.0, fixed 8.6.2 fixed in 8.6.2 summary DeepDiff has Memory Exhaustion DoS through SAFE_TO_IMPORT
2026-07-13	PYSEC-2026-3023	pypdf	6.9.1	pypdf has inefficient decoding of array-based streams
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-33123, GHSA-qpxp-75px-xjcp affected introduced 0, fixed 6.9.1 fixed in 6.9.1 summary pypdf has inefficient decoding of array-based streams
2026-07-13	PYSEC-2026-2661	mlflow	3.8.0rc0	MLflow has a command injection in mlflow/sagemaker/__init__.py
published 2026-07-13 modified 2026-07-13 aliases CVE-2025-14287, GHSA-xch3-2f9x-wh9f affected introduced 0, fixed 3.8.0rc0 fixed in 3.8.0rc0 summary MLflow has a command injection in mlflow/sagemaker/__init__.py
2026-07-13	PYSEC-2026-2474	fastmcp	2.14.2	FastMCP OAuth Proxy token reuse across MCP servers
published 2026-07-13 modified 2026-07-13 aliases CVE-2025-69196, GHSA-5h2m-4q8j-pqpj affected introduced 0, fixed 2.14.2 fixed in 2.14.2 summary FastMCP OAuth Proxy token reuse across MCP servers
2026-07-13	PYSEC-2026-3019	pypdf	6.8.0	pypdf: manipulated stream length values can exhaust RAM
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-31826, GHSA-hqmh-ppp3-xvm7 affected introduced 0, fixed 6.8.0 fixed in 6.8.0 summary pypdf: manipulated stream length values can exhaust RAM
2026-07-13	PYSEC-2026-2440	dbt-common	1.37.3	dbt-common's commonprefix() doesn't protect against path traversal
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-29790, GHSA-w75w-9qv4-j5xj affected introduced 0, fixed 1.34.2, introduced 1.35.0, fixed 1.37.3 fixed in 1.37.3 summary dbt-common's commonprefix() doesn't protect against path traversal
2026-07-13	PYSEC-2026-2449	django	6.0.3	Django has a Race Condition vulnerability
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-25674, GHSA-mjgh-79qc-68w3 affected introduced 4.2, fixed 4.2.29, introduced 5.2, fixed 5.2.12, introduced 6.0, fixed 6.0.3 fixed in 6.0.3 summary Django has a Race Condition vulnerability
2026-07-13	PYSEC-2026-2448	django	6.0.3	Django vulnerable to Uncontrolled Resource Consumption
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-25673, GHSA-8p8v-wh79-9r56 affected introduced 4.2, fixed 4.2.29, introduced 5.2, fixed 5.2.12, introduced 6.0, fixed 6.0.3 fixed in 6.0.3 summary Django vulnerable to Uncontrolled Resource Consumption
2026-07-13	PYSEC-2026-3014	pypdf	6.7.5	pypdf vulnerable to inefficient decoding of ASCIIHexDecode streams
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-28804, GHSA-9m86-7pmv-2852 affected introduced 0, fixed 6.7.5 fixed in 6.7.5 summary pypdf vulnerable to inefficient decoding of ASCIIHexDecode streams
2026-07-13	PYSEC-2026-2529	joserfc	1.6.3	joserfc's PBES2 p2c Unbounded Iteration Count enables Denial of Service (DoS)
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-27932, GHSA-w5r5-m38g-f9f9 affected introduced 0, fixed 1.6.3 fixed in 1.6.3 summary joserfc's PBES2 p2c Unbounded Iteration Count enables Denial of Service (DoS)
2026-07-13	PYSEC-2026-3017	pypdf	6.7.4	pypdf: Manipulated RunLengthDecode streams can exhaust RAM
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-28351, GHSA-f2v5-7jq9-h8cg affected introduced 0, fixed 6.7.4 fixed in 6.7.4 summary pypdf: Manipulated RunLengthDecode streams can exhaust RAM
2026-07-13	PYSEC-2026-3027	pypdf	6.7.3	pypdf: Manipulated FlateDecode XFA streams can exhaust RAM
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-27888, GHSA-x7hp-r3qg-r3cj affected introduced 0, fixed 6.7.3 fixed in 6.7.3 summary pypdf: Manipulated FlateDecode XFA streams can exhaust RAM
2026-07-13	PYSEC-2026-2574	langgraph-checkpoint	4.0.0	LangGraph: BaseCache Deserialization of Untrusted Data may lead to Remote Code Execution
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-27794, GHSA-mhr3-j7m5-c7c9 affected introduced 0, fixed 4.0.0 fixed in 4.0.0 summary LangGraph: BaseCache Deserialization of Untrusted Data may lead to Remote Code Execution
2026-07-13	PYSEC-2026-3005	pypdf	6.7.2	pypdf has a possible infinite loop when loading circular /Prev entries in cross-reference streams
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-27628, GHSA-2rw7-x74f-jg35 affected introduced 0, fixed 6.7.2 fixed in 6.7.2 summary pypdf has a possible infinite loop when loading circular /Prev entries in cross-reference streams
2026-07-13	PYSEC-2026-2658	mlflow	3.8.0rc0	MLflow Tracking Server Artifact Handler Directory Traversal Remote Code Execution Vulnerability
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-2033, GHSA-q2r8-vmq7-fpx2 affected introduced 0, fixed 3.8.0rc0 fixed in 3.8.0rc0 summary MLflow Tracking Server Artifact Handler Directory Traversal Remote Code Execution Vulnerability
2026-07-13	PYSEC-2026-2500	google-cloud-aiplatform	1.133.0	Google Cloud Vertex AI has a a vulnerability involving predictable bucket naming
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-2473, GHSA-wh2j-26j7-9728 affected introduced 1.21.0, fixed 1.133.0 fixed in 1.133.0 summary Google Cloud Vertex AI has a a vulnerability involving predictable bucket naming
2026-07-13	PYSEC-2026-2499	google-cloud-aiplatform	1.131.0	Google Cloud Vertex AI SDK affected by Stored Cross-Site Scripting (XSS)
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-2472, GHSA-qv8j-hgpc-vrq8 affected introduced 1.98.0, fixed 1.131.0 fixed in 1.131.0 summary Google Cloud Vertex AI SDK affected by Stored Cross-Site Scripting (XSS)
2026-07-13	PYSEC-2026-3015	pypdf	6.7.1	pypdf possibly has long runtimes for malformed FlateDecode streams
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-27026, GHSA-9mvc-8737-8j8h affected introduced 0, fixed 6.7.1 fixed in 6.7.1 summary pypdf possibly has long runtimes for malformed FlateDecode streams
2026-07-13	PYSEC-2026-3024	pypdf	6.7.1	pypdf has possible long runtimes/large memory usage for large /ToUnicode streams
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-27025, GHSA-wgvp-vg3v-2xq3 affected introduced 0, fixed 6.7.1 fixed in 6.7.1 summary pypdf has possible long runtimes/large memory usage for large /ToUnicode streams
2026-07-13	PYSEC-2026-3013	pypdf	6.7.1	pypdf has a possible infinite loop when processing TreeObject
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-27024, GHSA-996q-pr4m-cvgq affected introduced 0, fixed 6.7.1 fixed in 6.7.1 summary pypdf has a possible infinite loop when processing TreeObject
2026-07-13	PYSEC-2026-2447	diskcache		DiskCache has unsafe pickle deserialization
published 2026-07-13 modified 2026-07-13 aliases CVE-2025-69872, GHSA-w8v5-vhqr-4h9v affected introduced 0, last_affected 5.6.3 summary DiskCache has unsafe pickle deserialization
2026-07-13	PYSEC-2026-2562	langchain-core	1.2.11	LangChain affected by SSRF via image_url token counting in ChatOpenAI.get_num_tokens_from_messages
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-26013, GHSA-2g6r-c272-w58r affected introduced 0, fixed 1.2.11 fixed in 1.2.11 summary LangChain affected by SSRF via image_url token counting in ChatOpenAI.get_num_tokens_from_messages
2026-07-13	PYSEC-2026-2584	langsmith	0.6.3	LangSmith Client SDK Affected by Server-Side Request Forgery via Tracing Header Injection
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-25528, GHSA-v34v-rq6j-cj6p affected introduced 0.4.10, fixed 0.6.3 fixed in 0.6.3 summary LangSmith Client SDK Affected by Server-Side Request Forgery via Tracing Header Injection
2026-07-13	PYSEC-2026-2983	pydantic-ai-slim	1.51.0	Pydantic AI has Stored XSS via Path Traversal in Web UI CDN URL
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-25640, GHSA-wjp5-868j-wqv7 affected introduced 1.34.0, fixed 1.51.0 fixed in 1.51.0 summary Pydantic AI has Stored XSS via Path Traversal in Web UI CDN URL
2026-07-13	PYSEC-2026-2980	pydantic-ai-slim	1.56.0	Pydantic AI has Server-Side Request Forgery (SSRF) in URL Download Handling
published 2026-07-13 modified 2026-07-13 aliases CVE-2026-25580, GHSA-2jrp-274c-jhv3 affected introduced 0.0.26, fixed 1.56.0 fixed in 1.56.0 summary Pydantic AI has Server-Side Request Forgery (SSRF) in URL Download Handling
2026-07-13	PYSEC-2026-3002	pynacl	1.6.2	libsodium has Incomplete List of Disallowed Inputs
published 2026-07-13 modified 2026-07-13 aliases CVE-2025-69277, GHSA-mrfv-m5wm-5w6w affected introduced 0, fixed 1.6.2 fixed in 1.6.2 summary libsodium has Incomplete List of Disallowed Inputs
2026-07-13	PYSEC-2026-2401	brotli	1.2.0	Scrapy is vulnerable to a denial of service (DoS) attack due to flaws in brotli decompression implementation
published 2026-07-13 modified 2026-07-13 aliases CVE-2025-6176, GHSA-2qfp-q593-8484 affected introduced 0, fixed 1.2.0 fixed in 1.2.0 summary Scrapy is vulnerable to a denial of service (DoS) attack due to flaws in brotli decompression implementation
2026-07-13	PYSEC-2026-3417	werkzeug	3.0.6	Werkzeug possible resource exhaustion when parsing file data in forms
published 2026-07-13 modified 2026-07-13 aliases CVE-2024-49767, GHSA-q34m-jh98-gwm2 affected introduced 2.0.0rc1, fixed 3.0.6 fixed in 3.0.6 summary Werkzeug possible resource exhaustion when parsing file data in forms
2026-07-13	PYSEC-2026-2536	jupyterlab	4.2.5	HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering
published 2026-07-13 modified 2026-07-13 aliases CVE-2024-43805, GHSA-9q39-rmj3-p4r2 affected introduced 0, fixed 3.6.8, introduced 4.0.0, fixed 4.2.5 fixed in 4.2.5 summary HTML injection in Jupyter Notebook and JupyterLab leading to DOM Clobbering
2026-07-13	PYSEC-2026-2561	langchain-community	0.2.5	Denial of service in langchain-community
published 2026-07-13 modified 2026-07-13 aliases CVE-2024-2965, GHSA-3hjh-jh2h-vrg6 affected introduced 0, fixed 0.2.5 fixed in 0.2.5 summary Denial of service in langchain-community
2026-07-13	PYSEC-2026-2534	jupyterlab	4.0.11	JupyterLab vulnerable to potential authentication and CSRF tokens leak
published 2026-07-13 modified 2026-07-13 aliases CVE-2024-22421, GHSA-44cc-43rp-5947 affected introduced 0, fixed 3.6.7, introduced 4.0.0, fixed 4.0.11 fixed in 4.0.11 summary JupyterLab vulnerable to potential authentication and CSRF tokens leak
2026-07-13	PYSEC-2026-2535	jupyterlab	4.0.11	JupyterLab vulnerable to SXSS in Markdown Preview
published 2026-07-13 modified 2026-07-13 aliases CVE-2024-22420, GHSA-4m77-cmpx-vjc4 affected introduced 4.0.0, fixed 4.0.11 fixed in 4.0.11 summary JupyterLab vulnerable to SXSS in Markdown Preview
2026-07-13	PYSEC-2026-3008	pypdf	3.9.0	pypdf and PyPDF2 possible Infinite Loop when a comment isn't followed by a character
published 2026-07-13 modified 2026-07-13 aliases CVE-2023-36464, GHSA-4vvm-4w3v-6mr8 affected introduced 3.1.0, fixed 3.9.0 fixed in 3.9.0 summary pypdf and PyPDF2 possible Infinite Loop when a comment isn't followed by a character
2026-07-09	PYSEC-2026-2814	opencv-python	3.4.1.15	Out-of-bounds Write in OpenCV.
published 2026-07-09 modified 2026-07-13 aliases CVE-2018-5268, GHSA-9g8h-pjm4-q92p affected introduced 0, fixed 3.4.1.15 fixed in 3.4.1.15 summary Out-of-bounds Write in OpenCV.
2026-07-09	PYSEC-2026-2841	opencv-python-headless	4.2.0.32	Out-of-bounds Write in OpenCV
published 2026-07-09 modified 2026-07-13 aliases CVE-2019-5064, GHSA-q799-q27x-vp7w affected introduced 0, fixed 4.2.0.32 fixed in 4.2.0.32 summary Out-of-bounds Write in OpenCV
2026-07-09	PYSEC-2026-2840	opencv-python-headless		Out-of-bounds Write in OpenCV
published 2026-07-09 modified 2026-07-13 aliases CVE-2019-5063, GHSA-m6vm-8g8v-xfjh affected introduced 0, last_affected 4.1.0.25 summary Out-of-bounds Write in OpenCV
2026-07-09	PYSEC-2026-2839	opencv-python-headless	4.1.0.25	Out-of-bounds Read in OpenCV
published 2026-07-09 modified 2026-07-13 aliases CVE-2019-19624, GHSA-jggw-2q6g-c3m6 affected introduced 0, fixed 4.1.0.25 fixed in 4.1.0.25 summary Out-of-bounds Read in OpenCV
2026-07-09	PYSEC-2026-2835	opencv-python-headless		Out-of-bounds Write in OpenCV
published 2026-07-09 modified 2026-07-13 aliases CVE-2019-9423, GHSA-8849-5h85-98qw affected introduced 0, last_affected 4.1.1.26 summary Out-of-bounds Write in OpenCV
2026-07-09	PYSEC-2026-2842	opencv-python-headless	4.1.2.30	Out-of-bounds Read in OpenCV
published 2026-07-09 modified 2026-07-13 aliases CVE-2019-16249, GHSA-x3rm-644h-67m8 affected introduced 0, fixed 4.1.2.30 fixed in 4.1.2.30 summary Out-of-bounds Read in OpenCV
2026-07-09	PYSEC-2026-2838	opencv-python-headless	4.1.1.26	Divide By Zero in OpenCV.
published 2026-07-09 modified 2026-07-13 aliases CVE-2019-15939, GHSA-hxfw-jm98-v4mq affected introduced 0, fixed 4.1.1.26 fixed in 4.1.1.26 summary Divide By Zero in OpenCV.
2026-07-09	PYSEC-2026-2834	opencv-python-headless	4.1.1.26	NULL Pointer Dereference in OpenCV.
published 2026-07-09 modified 2026-07-13 aliases CVE-2019-14493, GHSA-3448-vrgh-85xr affected introduced 0, fixed 4.1.1.26 fixed in 4.1.1.26 summary NULL Pointer Dereference in OpenCV.
2026-07-09	PYSEC-2026-2837	opencv-python-headless	4.1.1.26	Out-of-bounds Read and Out-of-bounds Write in OpenCV
published 2026-07-09 modified 2026-07-13 aliases CVE-2019-14492, GHSA-fw99-f933-rgh8 affected introduced 0, fixed 3.4.7.28, introduced 4.0.0.21, fixed 4.1.1.26 fixed in 4.1.1.26 summary Out-of-bounds Read and Out-of-bounds Write in OpenCV
2026-07-09	PYSEC-2026-2836	opencv-python-headless	4.1.1.26	Out-of-bounds Read in OpenCV
published 2026-07-09 modified 2026-07-13 aliases CVE-2019-14491, GHSA-fm39-cw8h-3p63 affected introduced 0, fixed 3.4.7.28, introduced 4.0.0.21, fixed 4.1.1.26 fixed in 4.1.1.26 summary Out-of-bounds Read in OpenCV
2026-07-09	PYSEC-2026-2812	opencv-python	3.4.1.15	Reachable Assertion in OpenCV.
published 2026-07-09 modified 2026-07-13 aliases CVE-2018-5269, GHSA-89rj-5ggj-3p9p affected introduced 0, fixed 3.4.1.15 fixed in 3.4.1.15 summary Reachable Assertion in OpenCV.
2026-07-09	PYSEC-2026-2825	opencv-python	3.3.1.11	Integer Overflow or Wraparound in OpenCV.
published 2026-07-09 modified 2026-07-09 aliases CVE-2017-1000450, GHSA-m43c-649m-pm48 affected introduced 0, fixed 3.3.1.11 fixed in 3.3.1.11 summary Integer Overflow or Wraparound in OpenCV.
2026-07-09	PYSEC-2026-2810	opencv-python	3.4.1.15	Out-of-bounds Read in OpenCV
published 2026-07-09 modified 2026-07-13 aliases CVE-2017-18009, GHSA-83rh-hx5x-q9p5 affected introduced 0, fixed 3.4.1.15 fixed in 3.4.1.15 summary Out-of-bounds Read in OpenCV
2026-07-09	PYSEC-2026-2823	opencv-python	3.4.0.12	Improper Restriction of Operations within the Bounds of a Memory Buffer in OpenCV
published 2026-07-09 modified 2026-07-09 aliases CVE-2017-17760, GHSA-jcxv-2j3h-mg59 affected introduced 0, fixed 3.4.0.12 fixed in 3.4.0.12 summary Improper Restriction of Operations within the Bounds of a Memory Buffer in OpenCV
2026-07-09	PYSEC-2026-2808	opencv-python	3.3.1.11	Out-of-bounds Write in OpenCV
published 2026-07-09 modified 2026-07-09 aliases CVE-2017-14136, GHSA-634c-v2xv-ffpg affected introduced 0, fixed 3.3.1.11 fixed in 3.3.1.11 summary Out-of-bounds Write in OpenCV
2026-07-09	PYSEC-2026-2804	opencv-python	3.3.1.11	Integer Overflow or Wraparound in OpenCV
published 2026-07-09 modified 2026-07-09 aliases CVE-2017-12864, GHSA-267x-w5hx-8hjr affected introduced 0, fixed 3.3.1.11 fixed in 3.3.1.11 summary Integer Overflow or Wraparound in OpenCV
2026-07-09	PYSEC-2026-2832	opencv-python	3.3.1.11	Integer Overflow or Wraparound in OpenCV
published 2026-07-09 modified 2026-07-09 aliases CVE-2017-12863, GHSA-wq8f-wvqp-xvvm affected introduced 0, fixed 3.3.1.11 fixed in 3.3.1.11 summary Integer Overflow or Wraparound in OpenCV
2026-07-09	PYSEC-2026-2807	opencv-python	3.3.1.11	Improper Restriction of Operations within the Bounds of a Memory Buffer in OpenCV
published 2026-07-09 modified 2026-07-09 aliases CVE-2017-12862, GHSA-5rpc-gwh9-q9fg affected introduced 0, fixed 3.3.1.11 fixed in 3.3.1.11 summary Improper Restriction of Operations within the Bounds of a Memory Buffer in OpenCV
2026-07-09	PYSEC-2026-2830	opencv-python	3.3.1.11	Out-of-bounds Write in OpenCV
published 2026-07-09 modified 2026-07-09 aliases CVE-2017-12606, GHSA-vc29-rj92-gc7j affected introduced 0, fixed 3.3.1.11 fixed in 3.3.1.11 summary Out-of-bounds Write in OpenCV
2026-07-09	PYSEC-2026-2829	opencv-python	3.3.1.11	Out-of-bounds Write in OpenCV
published 2026-07-09 modified 2026-07-09 aliases CVE-2017-12605, GHSA-rqxg-xvcq-3v2f affected introduced 0, fixed 3.3.1.11 fixed in 3.3.1.11 summary Out-of-bounds Write in OpenCV
2026-07-09	PYSEC-2026-2815	opencv-python	3.3.1.11	Out-of-bounds Write in OpenCV
published 2026-07-09 modified 2026-07-09 aliases CVE-2017-12604, GHSA-c7gp-2pch-qh2v affected introduced 0, fixed 3.3.1.11 fixed in 3.3.1.11 summary Out-of-bounds Write in OpenCV
2026-07-09	PYSEC-2026-2809	opencv-python	3.3.1.11	Out-of-bounds Write in OpenCV
published 2026-07-09 modified 2026-07-09 aliases CVE-2017-12603, GHSA-6v6p-p97v-g2p7 affected introduced 0, fixed 3.3.1.11 fixed in 3.3.1.11 summary Out-of-bounds Write in OpenCV
2026-07-09	PYSEC-2026-2827	opencv-python	3.3.1.11	Denial of Service in OpenCV
published 2026-07-09 modified 2026-07-09 aliases CVE-2017-12602, GHSA-pqjj-6f5q-gqph affected introduced 0, fixed 3.3.1.11 fixed in 3.3.1.11 summary Denial of Service in OpenCV
2026-07-09	PYSEC-2026-2831	opencv-python	3.3.1.11	Improper Restriction of Operations within the Bounds of a Memory Buffer in OpenCV
published 2026-07-09 modified 2026-07-09 aliases CVE-2017-12601, GHSA-w96g-3p64-63wr affected introduced 0, fixed 3.3.1.11 fixed in 3.3.1.11 summary Improper Restriction of Operations within the Bounds of a Memory Buffer in OpenCV
2026-07-09	PYSEC-2026-2819	opencv-python	3.3.1.11	Denial of Service in OpenCV
published 2026-07-09 modified 2026-07-09 aliases CVE-2017-12600, GHSA-fr58-2xhv-qp3w affected introduced 0, fixed 3.3.1.11 fixed in 3.3.1.11 summary Denial of Service in OpenCV
2026-07-09	PYSEC-2026-2820	opencv-python	3.3.1.11	Out-of-bounds Read in OpenCV
published 2026-07-09 modified 2026-07-09 aliases CVE-2017-12599, GHSA-fvq6-392h-6mjj affected introduced 0, fixed 3.3.1.11 fixed in 3.3.1.11 summary Out-of-bounds Read in OpenCV
2026-07-09	PYSEC-2026-2805	opencv-python	3.3.1.11	Out-of-bounds Read in OpenCV
published 2026-07-09 modified 2026-07-09 aliases CVE-2017-12598, GHSA-33h2-69j3-r336 affected introduced 0, fixed 3.3.1.11 fixed in 3.3.1.11 summary Out-of-bounds Read in OpenCV
2026-07-09	PYSEC-2026-2813	opencv-python	3.3.1.11	Out-of-bounds Write in OpenCV
published 2026-07-09 modified 2026-07-09 aliases CVE-2017-12597, GHSA-8w3x-457r-wg53 affected introduced 0, fixed 3.3.1.11 fixed in 3.3.1.11 summary Out-of-bounds Write in OpenCV
2026-07-09	PYSEC-2026-2817	opencv-python	3.3.1.11	Improper Input Validation in OpenCV
published 2026-07-09 modified 2026-07-09 aliases CVE-2016-1517, GHSA-fffj-9qwg-qmh5 affected introduced 0, fixed 3.3.1.11 fixed in 3.3.1.11 summary Improper Input Validation in OpenCV
2026-07-09	PYSEC-2026-2816	opencv-python	3.3.1.11	Double Free in OpenCV
published 2026-07-09 modified 2026-07-09 aliases CVE-2016-1516, GHSA-cvhw-2593-5j2q affected introduced 0, fixed 3.3.1.11 fixed in 3.3.1.11 summary Double Free in OpenCV
2026-07-09	PYSEC-2026-2683	notebook	5.7.8	Open Redirect vulnerability in jupyterhub and notebook
published 2026-07-09 modified 2026-07-13 aliases CVE-2019-10255, GHSA-rv62-4pmj-xw6h affected introduced 0, fixed 5.7.8 fixed in 5.7.8 summary Open Redirect vulnerability in jupyterhub and notebook
2026-07-08	PYSEC-2026-3444	httplib2	0.32.0	httplib2 is a comprehensive HTTP client library for Python.
published 2026-07-08 modified 2026-07-14 aliases CVE-2026-59939, GHSA-j5g9-f88f-gfj3 affected introduced 0, fixed 0.32.0 fixed in 0.32.0 summary httplib2 is a comprehensive HTTP client library for Python.
2026-07-08	PYSEC-2026-2323	zeep	4.3.3	Zeep is a Python SOAP client.
published 2026-07-08 modified 2026-07-13 aliases CVE-2026-58501, GHSA-4cc2-g9w2-fhf6 affected introduced 4.0.0, fixed 4.3.3 fixed in 4.3.3 summary Zeep is a Python SOAP client.
2026-07-08	PYSEC-2026-2218	mistune	3.3.0	Mistune is a Python Markdown parser with renderers and plugins.
published 2026-07-08 modified 2026-07-13 aliases CVE-2026-59930, GHSA-2hm2-hc3v-44h9 affected introduced 0, fixed 3.3.0 fixed in 3.3.0 summary Mistune is a Python Markdown parser with renderers and plugins.
2026-07-08	PYSEC-2026-2217	mistune	3.3.0	Mistune is a Python Markdown parser with renderers and plugins.
published 2026-07-08 modified 2026-07-13 aliases CVE-2026-59929, GHSA-qfrw-5rxm-mhh2 affected introduced 0, fixed 3.3.0 fixed in 3.3.0 summary Mistune is a Python Markdown parser with renderers and plugins.
2026-07-08	PYSEC-2026-2216	mistune	3.3.0	Mistune is a Python Markdown parser with renderers and plugins.
published 2026-07-08 modified 2026-07-13 aliases CVE-2026-59928, GHSA-ffq3-xpv3-j92q affected introduced 0, fixed 3.3.0 fixed in 3.3.0 summary Mistune is a Python Markdown parser with renderers and plugins.
2026-07-08	PYSEC-2026-2215	mistune	3.3.0	Mistune is a Python Markdown parser with renderers and plugins.
published 2026-07-08 modified 2026-07-13 aliases CVE-2026-59927, GHSA-8mpj-m6qm-5qr8 affected introduced 0, fixed 3.3.0 fixed in 3.3.0 summary Mistune is a Python Markdown parser with renderers and plugins.
2026-07-08	PYSEC-2026-2214	mistune	3.3.0	Mistune is a Python Markdown parser with renderers and plugins.
published 2026-07-08 modified 2026-07-13 aliases CVE-2026-59926, GHSA-g97x-gvcm-x72h affected introduced 0, fixed 3.3.0 fixed in 3.3.0 summary Mistune is a Python Markdown parser with renderers and plugins.
2026-07-08	PYSEC-2026-2213	mistune	3.3.0	Mistune is a Python Markdown parser with renderers and plugins.
published 2026-07-08 modified 2026-07-13 aliases CVE-2026-59925, GHSA-4j32-57v6-6g45 affected introduced 0, fixed 3.3.0 fixed in 3.3.0 summary Mistune is a Python Markdown parser with renderers and plugins.
2026-07-08	PYSEC-2026-2212	mistune	3.3.0	Mistune is a Python Markdown parser with renderers and plugins.
published 2026-07-08 modified 2026-07-13 aliases CVE-2026-59924, GHSA-r4rv-85jg-w4mf affected introduced 0, fixed 3.3.0 fixed in 3.3.0 summary Mistune is a Python Markdown parser with renderers and plugins.
2026-07-08	PYSEC-2026-2211	mistune	3.3.0	Mistune is a Python Markdown parser with renderers and plugins.
published 2026-07-08 modified 2026-07-13 aliases CVE-2026-59923, GHSA-8c25-4j27-2rv3 affected introduced 0, fixed 3.3.0 fixed in 3.3.0 summary Mistune is a Python Markdown parser with renderers and plugins.
2026-07-08	PYSEC-2026-2210	mistune	3.3.0	Mistune is a Python Markdown parser with renderers and plugins.
published 2026-07-08 modified 2026-07-13 aliases CVE-2026-59922, GHSA-c8j7-8cv4-2xmq affected introduced 0, fixed 3.3.0 fixed in 3.3.0 summary Mistune is a Python Markdown parser with renderers and plugins.
2026-07-08	PYSEC-2026-3447	setuptools	83.0.0	setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages.
published 2026-07-08 modified 2026-07-14 aliases CVE-2026-59890, GHSA-h35f-9h28-mq5c affected introduced 0, fixed 83.0.0 fixed in 83.0.0 summary setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages.
2026-07-07	PYSEC-2026-1888	sagemaker	3.2.0	SageMaker Python SDK has Exposed HMAC
published 2026-07-07 modified 2026-07-07 aliases CVE-2026-1777, GHSA-rjrp-m2jw-pv9c affected introduced 0, fixed 2.256.0, introduced 3.0, fixed 3.2.0 fixed in 3.2.0 summary SageMaker Python SDK has Exposed HMAC
2026-07-07	PYSEC-2026-1886	sagemaker	3.1.1	SageMaker Python SDK has Insecure TLS Configuration
published 2026-07-07 modified 2026-07-07 aliases CVE-2026-1778, GHSA-62rc-f4v9-h543 affected introduced 0, fixed 2.256.0, introduced 3.0, fixed 3.1.1 fixed in 3.1.1 summary SageMaker Python SDK has Insecure TLS Configuration
2026-07-07	PYSEC-2026-1796	pip	26.0	pip Path Traversal vulnerability
published 2026-07-07 modified 2026-07-07 aliases CVE-2026-1703, GHSA-6vgw-5pg2-w6jp affected introduced 0, fixed 26.0 fixed in 26.0 summary pip Path Traversal vulnerability
2026-07-07	PYSEC-2026-1639	mlflow	3.4.0rc0	mlflow Creates of Temporary File in Directory with Insecure Permissions
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-10279, GHSA-4x5p-f36r-mxxr affected introduced 0, fixed 3.4.0rc0 fixed in 3.4.0rc0 summary mlflow Creates of Temporary File in Directory with Insecure Permissions
2026-07-07	PYSEC-2026-1827	pypdf	6.6.2	pypdf has possible Infinite Loop when processing outlines/bookmarks
published 2026-07-07 modified 2026-07-07 aliases CVE-2026-24688, GHSA-2q4j-m29v-hq73 affected introduced 0, fixed 6.6.2 fixed in 6.6.2 summary pypdf has possible Infinite Loop when processing outlines/bookmarks
2026-07-07	PYSEC-2026-1852	python-multipart	0.0.22	Python-Multipart has Arbitrary File Write via Non-Default Configuration
published 2026-07-07 modified 2026-07-07 aliases CVE-2026-24486, GHSA-wp53-j4wj-2cfg affected introduced 0, fixed 0.0.22 fixed in 0.0.22 summary Python-Multipart has Arbitrary File Write via Non-Default Configuration
2026-07-07	PYSEC-2026-1805	protobuf	6.33.5	protobuf affected by a JSON recursion depth bypass
published 2026-07-07 modified 2026-07-07 aliases CVE-2026-0994, GHSA-7gcm-g887-7qv7 affected introduced 0, fixed 5.29.6, introduced 6.30.0rc1, fixed 6.33.5 fixed in 6.33.5 summary protobuf affected by a JSON recursion depth bypass
2026-07-07	PYSEC-2026-1909	sentencepiece	0.2.1	Sentencepiece has a a heap overflow issue
published 2026-07-07 modified 2026-07-07 aliases CVE-2026-1260, GHSA-38vq-g6vr-w8wf affected introduced 0, fixed 0.2.1 fixed in 0.2.1 summary Sentencepiece has a a heap overflow issue
2026-07-07	PYSEC-2026-2047	wheel	0.46.2	Wheel Affected by Arbitrary File Permission Modification via Path Traversal in wheel unpack
published 2026-07-07 modified 2026-07-07 aliases CVE-2026-24049, GHSA-8rrh-rw8j-w5fx affected introduced 0.40.0, fixed 0.46.2 fixed in 0.46.2 summary Wheel Affected by Arbitrary File Permission Modification via Path Traversal in wheel unpack
2026-07-07	PYSEC-2026-1845	pytest	9.0.3	pytest has vulnerable tmpdir handling
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-71176, GHSA-6w46-j5rx-g56g affected introduced 0, fixed 9.0.3 fixed in 9.0.3 summary pytest has vulnerable tmpdir handling
2026-07-07	PYSEC-2026-2034	weasyprint	68.0	WeasyPrint has a Server-Side Request Forgery (SSRF) Protection Bypass via HTTP Redirect
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-68616, GHSA-983w-rhvv-gwmv affected introduced 0, fixed 68.0 fixed in 68.0 summary WeasyPrint has a Server-Side Request Forgery (SSRF) Protection Bypass via HTTP Redirect
2026-07-07	PYSEC-2026-1810	pyasn1	0.6.2	pyasn1 has a DoS vulnerability in decoder
published 2026-07-07 modified 2026-07-07 aliases CVE-2026-23490, GHSA-63vm-454h-vhhq affected introduced 0.6.1, fixed 0.6.2 fixed in 0.6.2 summary pyasn1 has a DoS vulnerability in decoder
2026-07-07	PYSEC-2026-1469	jaraco-context	6.1.0	jaraco.context Has a Path Traversal Vulnerability
published 2026-07-07 modified 2026-07-07 aliases CVE-2026-23949, GHSA-58pv-8j8x-9vj2 affected introduced 5.2.0, fixed 6.1.0 fixed in 6.1.0 summary jaraco.context Has a Path Traversal Vulnerability
2026-07-07	PYSEC-2026-1208	azure-core	1.38.0	Azure Core is vulnerable to deserialization of untrusted data
published 2026-07-07 modified 2026-07-07 aliases CVE-2026-21226, GHSA-jm66-cg57-jjv5 affected introduced 0, fixed 1.38.0 fixed in 1.38.0 summary Azure Core is vulnerable to deserialization of untrusted data
2026-07-07	PYSEC-2026-2009	virtualenv	20.36.1	virtualenv Has TOCTOU Vulnerabilities in Directory Creation
published 2026-07-07 modified 2026-07-07 aliases CVE-2026-22702, GHSA-597g-3phw-6986 affected introduced 0, fixed 20.36.1 fixed in 20.36.1 summary virtualenv Has TOCTOU Vulnerabilities in Directory Creation
2026-07-07	PYSEC-2026-1374	filelock	3.20.3	filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock
published 2026-07-07 modified 2026-07-07 aliases CVE-2026-22701, GHSA-qmgc-5h2g-mvrw affected introduced 0, fixed 3.20.3 fixed in 3.20.3 summary filelock Time-of-Check-Time-of-Use (TOCTOU) Symlink Vulnerability in SoftFileLock
2026-07-07	PYSEC-2026-1656	mlflow	3.5.0	MLFlow is vulnerable to DNS rebinding attacks due to a lack of Origin header validation
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-14279, GHSA-pgqp-8h46-6x4j affected introduced 0, fixed 3.5.0 fixed in 3.5.0 summary MLFlow is vulnerable to DNS rebinding attacks due to a lack of Origin header validation
2026-07-07	PYSEC-2026-1828	pypdf	6.6.0	pypdf has possible long runtimes for malformed startxref
published 2026-07-07 modified 2026-07-07 aliases CVE-2026-22691, GHSA-4f6g-68pf-7vhv affected introduced 0, fixed 6.6.0 fixed in 6.6.0 summary pypdf has possible long runtimes for malformed startxref
2026-07-07	PYSEC-2026-1829	pypdf	6.6.0	pypdf has possible long runtimes for missing /Root object with large /Size values
published 2026-07-07 modified 2026-07-07 aliases CVE-2026-22690, GHSA-4xc4-762w-m6cg affected introduced 0, fixed 6.6.0 fixed in 6.6.0 summary pypdf has possible long runtimes for missing /Root object with large /Size values
2026-07-07	PYSEC-2026-1201	authlib	1.6.6	Authlib has 1-click Account Takeover vulnerability
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-68158, GHSA-fg6f-75jq-6523 affected introduced 1.0.0, fixed 1.6.6 fixed in 1.6.6 summary Authlib has 1-click Account Takeover vulnerability
2026-07-07	PYSEC-2026-2044	werkzeug	3.1.5	Werkzeug safe_join() allows Windows special device names with compound extensions
published 2026-07-07 modified 2026-07-07 aliases CVE-2026-21860, GHSA-87hc-h4r5-73f7 affected introduced 0, fixed 3.1.5 fixed in 3.1.5 summary Werkzeug safe_join() allows Windows special device names with compound extensions
2026-07-07	PYSEC-2026-1996	urllib3	2.6.3	Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)
published 2026-07-07 modified 2026-07-07 aliases CVE-2026-21441, GHSA-38jv-5279-wg99 affected introduced 1.22, fixed 2.6.3 fixed in 2.6.3 summary Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)
2026-07-07	PYSEC-2026-1105	aiohttp	3.13.3	AIOHTTP Vulnerable to Cookie Parser Warning Storm
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-69230, GHSA-fh55-r93g-j68g affected introduced 0, fixed 3.13.3 fixed in 3.13.3 summary AIOHTTP Vulnerable to Cookie Parser Warning Storm
2026-07-07	PYSEC-2026-1106	aiohttp	3.13.3	AIOHTTP vulnerable to DoS through chunked messages
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-69229, GHSA-g84x-mcqj-x9qq affected introduced 0, fixed 3.13.3 fixed in 3.13.3 summary AIOHTTP vulnerable to DoS through chunked messages
2026-07-07	PYSEC-2026-1100	aiohttp	3.13.3	AIOHTTP vulnerable to denial of service through large payloads
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-69228, GHSA-6jhg-hg63-jvvf affected introduced 0, fixed 3.13.3 fixed in 3.13.3 summary AIOHTTP vulnerable to denial of service through large payloads
2026-07-07	PYSEC-2026-1107	aiohttp	3.13.3	AIOHTTP vulnerable to DoS when bypassing asserts
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-69227, GHSA-jj3x-wxrx-4x23 affected introduced 0, fixed 3.13.3 fixed in 3.13.3 summary AIOHTTP vulnerable to DoS when bypassing asserts
2026-07-07	PYSEC-2026-1097	aiohttp	3.13.3	AIOHTTP vulnerable to brute-force leak of internal static ﬁle path components
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-69226, GHSA-54jq-c3m8-4m76 affected introduced 0, fixed 3.13.3 fixed in 3.13.3 summary AIOHTTP vulnerable to brute-force leak of internal static ﬁle path components
2026-07-07	PYSEC-2026-1109	aiohttp	3.13.3	AIOHTTP has unicode match groups in regexes for ASCII protocol elements
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-69225, GHSA-mqqc-3gqh-h2x8 affected introduced 0, fixed 3.13.3 fixed in 3.13.3 summary AIOHTTP has unicode match groups in regexes for ASCII protocol elements
2026-07-07	PYSEC-2026-1099	aiohttp	3.13.3	AIOHTTP's unicode processing of header values could cause parsing discrepancies
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-69224, GHSA-69f9-5gxw-wvc2 affected introduced 0, fixed 3.13.3 fixed in 3.13.3 summary AIOHTTP's unicode processing of header values could cause parsing discrepancies
2026-07-07	PYSEC-2026-1101	aiohttp	3.13.3	AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-69223, GHSA-6mq8-rvhq-8wgg affected introduced 0, fixed 3.13.3 fixed in 3.13.3 summary AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb
2026-07-07	PYSEC-2026-1605	marshmallow	4.1.2	Marshmallow has DoS in Schema.load(many)
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-68480, GHSA-428g-f7cq-pgp5 affected introduced 3.0.0rc1, fixed 3.26.2, introduced 4.0.0, fixed 4.1.2 fixed in 4.1.2 summary Marshmallow has DoS in Schema.load(many)
2026-07-07	PYSEC-2026-1691	nbconvert	7.17.0	nbconvert has an uncontrolled search path that leads to unauthorized code execution on Windows
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-53000, GHSA-xm59-rqc7-hhvf affected introduced 0, fixed 7.17.0 fixed in 7.17.0 summary nbconvert has an uncontrolled search path that leads to unauthorized code execution on Windows
2026-07-07	PYSEC-2026-1375	filelock	3.20.1	filelock has a TOCTOU race condition which allows symlink attacks during lock file creation
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-68146, GHSA-w853-jp5j-5j7f affected introduced 0, fixed 3.20.1 fixed in 3.20.1 summary filelock has a TOCTOU race condition which allows symlink attacks during lock file creation
2026-07-07	PYSEC-2026-1825	pymdown-extensions	10.16.1	PyMdown Extensions has a ReDOS bug in its Figure Capture extension
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-68142, GHSA-r6h4-mm7h-8pmq affected introduced 0, fixed 10.16.1 fixed in 10.16.1 summary PyMdown Extensions has a ReDOS bug in its Figure Capture extension
2026-07-07	PYSEC-2026-1994	urllib3	2.6.0	urllib3 streaming API improperly handles highly compressed data
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-66471, GHSA-2xpw-w6gg-jr37 affected introduced 1.0, fixed 2.6.0 fixed in 2.6.0 summary urllib3 streaming API improperly handles highly compressed data
2026-07-07	PYSEC-2026-1998	urllib3	2.6.0	urllib3 allows an unbounded number of links in the decompression chain
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-66418, GHSA-gm62-xv2j-4w53 affected introduced 1.24, fixed 2.6.0 fixed in 2.6.0 summary urllib3 allows an unbounded number of links in the decompression chain
2026-07-07	PYSEC-2026-1617	mcp	1.23.0	Model Context Protocol (MCP) Python SDK does not enable DNS rebinding protection by default
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-66416, GHSA-9h52-p55h-vw2f affected introduced 0, fixed 1.23.0 fixed in 1.23.0 summary Model Context Protocol (MCP) Python SDK does not enable DNS rebinding protection by default
2026-07-07	PYSEC-2026-2046	werkzeug	3.1.4	Werkzeug safe_join() allows Windows special device names
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-66221, GHSA-hgf8-39gv-g3f2 affected introduced 0, fixed 3.1.4 fixed in 3.1.4 summary Werkzeug safe_join() allows Windows special device names
2026-07-07	PYSEC-2026-1389	fonttools	4.60.2	fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-66034, GHSA-768j-98cg-p3fv affected introduced 4.33.0, fixed 4.60.2 fixed in 4.60.2 summary fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib
2026-07-07	PYSEC-2026-1832	pypdf	6.4.0	pypdf's LZWDecode streams be manipulated to exhaust RAM
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-66019, GHSA-m449-cwjh-6pw7 affected introduced 0, fixed 6.4.0 fixed in 6.4.0 summary pypdf's LZWDecode streams be manipulated to exhaust RAM
2026-07-07	PYSEC-2026-1518	langchain-core	1.0.7	LangChain Vulnerable to Template Injection via Attribute Access in Prompt Templates
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-65106, GHSA-6qv9-48xg-fc7f affected introduced 0, fixed 0.3.80, introduced 1.0.0, fixed 1.0.7 fixed in 1.0.7 summary LangChain Vulnerable to Template Injection via Attribute Access in Prompt Templates
2026-07-07	PYSEC-2026-1761	pdfminer-six	20251230	Insecure Deserialization (pickle) in pdfminer.six CMap Loader — Local Privesc
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-70559, GHSA-f83h-ghpp-7wcc affected introduced 0, fixed 20251230 fixed in 20251230 summary Insecure Deserialization (pickle) in pdfminer.six CMap Loader — Local Privesc
2026-07-07	PYSEC-2026-1762	pdfminer-six	20251107	Arbitrary Code Execution in pdfminer.six via Crafted PDF Input
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-64512, GHSA-wf5f-4jwr-ppcp affected introduced 0, fixed 20251107 fixed in 20251107 summary Arbitrary Code Execution in pdfminer.six via Crafted PDF Input
2026-07-07	PYSEC-2026-1527	langgraph-checkpoint	3.0.0	LangGraph Checkpoint affected by RCE in "json" mode of JsonPlusSerializer
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-64439, GHSA-wwqv-p2pp-99h5 affected introduced 0, fixed 3.0.0 fixed in 3.0.0 summary LangGraph Checkpoint affected by RCE in "json" mode of JsonPlusSerializer
2026-07-07	PYSEC-2026-1640	mlflow	3.0.0	MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-11201, GHSA-5cvj-7rg6-jggj affected introduced 0, fixed 2.22.4, introduced 3.0.0rc0, fixed 3.0.0 fixed in 3.0.0 summary MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability
2026-07-07	PYSEC-2026-1642	mlflow	2.22.0rc0	MLflow Weak Password Requirements Authentication Bypass Vulnerability
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-11200, GHSA-6xj8-rrqx-r4cv affected introduced 0, fixed 2.22.0rc0 fixed in 2.22.0rc0 summary MLflow Weak Password Requirements Authentication Bypass Vulnerability
2026-07-07	PYSEC-2026-1365	fastmcp	2.13.0	FastMCP vulnerable to windows command injection in FastMCP Cursor installer via server_name
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-62801, GHSA-rj5c-58rq-j5g5 affected introduced 0, fixed 2.13.0 fixed in 2.13.0 summary FastMCP vulnerable to windows command injection in FastMCP Cursor installer via server_name
2026-07-07	PYSEC-2026-1364	fastmcp	2.13.0	FastMCP vulnerable to reflected XSS in client's callback page
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-62800, GHSA-mxxr-jv3v-6pgc affected introduced 0, fixed 2.13.0 fixed in 2.13.0 summary FastMCP vulnerable to reflected XSS in client's callback page
2026-07-07	PYSEC-2026-1942	starlette	0.49.1	Starlette vulnerable to O(n^2) DoS via Range header merging in ``starlette.responses.FileResponse``
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-62727, GHSA-7f5h-v6xp-fcq8 affected introduced 0.39.0, fixed 0.49.1 fixed in 0.49.1 summary Starlette vulnerable to O(n^2) DoS via Range header merging in ``starlette.responses.FileResponse``
2026-07-07	PYSEC-2026-1766	pg8000	1.31.5	pg8000 SQL injection vulnerability via a specially crafted Python list input
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-61385, GHSA-wq2g-r956-j8cc affected introduced 0, fixed 1.31.5 fixed in 1.31.5 summary pg8000 SQL injection vulnerability via a specially crafted Python list input
2026-07-07	PYSEC-2026-1831	pypdf	6.1.3	pypdf can exhaust RAM via manipulated LZWDecode streams
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-62708, GHSA-jfx9-29x2-rv3j affected introduced 0, fixed 6.1.3 fixed in 6.1.3 summary pypdf can exhaust RAM via manipulated LZWDecode streams
2026-07-07	PYSEC-2026-1833	pypdf	6.1.3	pypdf possibly loops infinitely when reading DCT inline images without EOF marker
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-62707, GHSA-vr63-x8vc-m265 affected introduced 0, fixed 6.1.3 fixed in 6.1.3 summary pypdf possibly loops infinitely when reading DCT inline images without EOF marker
2026-07-07	PYSEC-2026-1603	mammoth	1.11.0	Mammoth is vulnerable to Directory Traversal
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-11849, GHSA-rmjr-87wv-gf87 affected introduced 0.3.25, fixed 1.11.0 fixed in 1.11.0 summary Mammoth is vulnerable to Directory Traversal
2026-07-07	PYSEC-2026-1202	authlib	1.6.5	Authlib : JWE zip=DEF decompression bomb enables DoS
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-62706, GHSA-g7f3-828f-7h7m affected introduced 0, fixed 1.6.5 fixed in 1.6.5 summary Authlib : JWE zip=DEF decompression bomb enables DoS
2026-07-07	PYSEC-2026-1203	authlib	1.6.5	Authlib is vulnerable to Denial of Service via Oversized JOSE Segments
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-61920, GHSA-pq5p-34cr-23v9 affected introduced 0, fixed 1.6.5 fixed in 1.6.5 summary Authlib is vulnerable to Denial of Service via Oversized JOSE Segments
2026-07-07	PYSEC-2026-1854	python-socketio	5.14.0	python-socketio vulnerable to arbitrary Python code execution (RCE) through malicious pickle deserialization in certain multi-server deployments
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-61765, GHSA-g8c6-8fjj-2r4m affected introduced 0.8.0, fixed 5.14.0 fixed in 5.14.0 summary python-socketio vulnerable to arbitrary Python code execution (RCE) through malicious pickle deserialization in certain multi-server deployments
2026-07-07	PYSEC-2026-1520	langchain-text-splitters	0.3.9	LangChain Text Splitters is vulnerable to XML External Entity (XXE) attacks due to unsafe XSLT parsing
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-6985, GHSA-m42m-m8cr-8m58 affected introduced 0, fixed 0.3.9 fixed in 0.3.9 summary LangChain Text Splitters is vulnerable to XML External Entity (XXE) attacks due to unsafe XSLT parsing
2026-07-07	PYSEC-2026-1296	django	5.2.7	Django vulnerable to partial directory traversal via archives
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-59682, GHSA-q95w-c7qg-hrff affected introduced 4.2, fixed 4.2.25, introduced 5.1, fixed 5.1.13, introduced 5.2, fixed 5.2.7 fixed in 5.2.7 summary Django vulnerable to partial directory traversal via archives
2026-07-07	PYSEC-2026-1482	jupyterlab	4.4.8	JupyterLab LaTeX typesetter links did not enforce `noopener` attribute
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-59842, GHSA-vvfj-2jqx-52jm affected introduced 0, fixed 4.4.8 fixed in 4.4.8 summary JupyterLab LaTeX typesetter links did not enforce `noopener` attribute
2026-07-07	PYSEC-2026-1795	pip	25.3	pip's fallback tar extraction doesn't check symbolic links point to extraction directory
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-8869, GHSA-4xh5-x5gv-qwph affected introduced 0, fixed 25.3 fixed in 25.3 summary pip's fallback tar extraction doesn't check symbolic links point to extraction directory
2026-07-07	PYSEC-2026-1980	transformers	4.53.0	Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-6921, GHSA-4w7r-h757-3r74 affected introduced 0, fixed 4.53.0 fixed in 4.53.0 summary Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer
2026-07-07	PYSEC-2026-1200	authlib	1.6.4	Authlib: JWS/JWT accepts unknown crit headers (RFC violation → possible authz bypass)
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-59420, GHSA-9ggr-2464-2j32 affected introduced 0, fixed 1.6.4 fixed in 1.6.4 summary Authlib: JWS/JWT accepts unknown crit headers (RFC violation → possible authz bypass)
2026-07-07	PYSEC-2026-1988	transformers	4.53.0	Hugging Face Transformers library has Regular Expression Denial of Service
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-6051, GHSA-rcv9-qm8p-9p6j affected introduced 0, fixed 4.53.0 fixed in 4.53.0 summary Hugging Face Transformers library has Regular Expression Denial of Service
2026-07-07	PYSEC-2026-1981	transformers	4.53.0	Hugging Face Transformers is vulnerable to ReDoS through its MarianTokenizer
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-6638, GHSA-59p9-h35m-wg4g affected introduced 0, fixed 4.53.0 fixed in 4.53.0 summary Hugging Face Transformers is vulnerable to ReDoS through its MarianTokenizer
2026-07-07	PYSEC-2026-1515	langchain-community	0.3.27	Langchain Community Vulnerable to XML External Entity (XXE) Attacks
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-6984, GHSA-pc6w-59fv-rh23 affected introduced 0, fixed 0.3.27 fixed in 0.3.27 summary Langchain Community Vulnerable to XML External Entity (XXE) Attacks
2026-07-07	PYSEC-2026-1435	h2	4.3.0	h2 allows HTTP Request Smuggling due to illegal characters in headers
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-57804, GHSA-847f-9342-265h affected introduced 0, fixed 4.3.0 fixed in 4.3.0 summary h2 allows HTTP Request Smuggling due to illegal characters in headers
2026-07-07	PYSEC-2026-1830	pypdf	6.0.0	PyPDF's Manipulated FlateDecode streams can exhaust RAM
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-55197, GHSA-7hfw-26vp-jp8m affected introduced 0, fixed 6.0.0 fixed in 6.0.0 summary PyPDF's Manipulated FlateDecode streams can exhaust RAM
2026-07-07	PYSEC-2026-2001	uv	0.8.6	uv allows ZIP payload obfuscation through parsing differentials
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-54368, GHSA-8qf3-x8v5-2pj8 affected introduced 0, fixed 0.8.6 fixed in 0.8.6 summary uv allows ZIP payload obfuscation through parsing differentials
2026-07-07	PYSEC-2026-1925	skops	0.13.0	SKOPS Card.get_model happily allows arbitrary code execution
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-54886, GHSA-378x-6p4f-8jgm affected introduced 0, fixed 0.13.0 fixed in 0.13.0 summary SKOPS Card.get_model happily allows arbitrary code execution
2026-07-07	PYSEC-2026-1983	transformers	4.53.0	Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-5197, GHSA-9356-575x-2w9m affected introduced 0, fixed 4.53.0 fixed in 4.53.0 summary Hugging Face Transformers Regular Expression Denial of Service (ReDoS) vulnerability
2026-07-07	PYSEC-2026-1926	skops	0.12.0	Skops may allow MethodNode to access unexpected object fields through dot notation, leading to arbitrary code execution at load time
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-54413, GHSA-4v6w-xpmh-gfgp affected introduced 0, fixed 0.12.0 fixed in 0.12.0 summary Skops may allow MethodNode to access unexpected object fields through dot notation, leading to arbitrary code execution at load time
2026-07-07	PYSEC-2026-1927	skops	0.12.0	Skops has Inconsistent Trusted Type Validation that Enables Hidden `operator` Methods Execution
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-54412, GHSA-m7f4-hrc6-fwg3 affected introduced 0, fixed 0.12.0 fixed in 0.12.0 summary Skops has Inconsistent Trusted Type Validation that Enables Hidden `operator` Methods Execution
2026-07-07	PYSEC-2026-1941	starlette	0.47.2	Starlette has possible denial-of-service vector when parsing large files in multipart forms
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-54121, GHSA-2c2j-9gv5-cj73 affected introduced 0, fixed 0.47.2 fixed in 0.47.2 summary Starlette has possible denial-of-service vector when parsing large files in multipart forms
2026-07-07	PYSEC-2026-1104	aiohttp	3.12.14	AIOHTTP is vulnerable to HTTP Request/Response Smuggling through incorrect parsing of chunked trailer sections
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-53643, GHSA-9548-qrrj-x5pj affected introduced 0, fixed 3.12.14 fixed in 3.12.14 summary AIOHTTP is vulnerable to HTTP Request/Response Smuggling through incorrect parsing of chunked trailer sections
2026-07-07	PYSEC-2026-1977	transformers	4.52.1	Transformers is vulnerable to ReDoS attack through its DonutProcessor class
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-3933, GHSA-37mw-44qp-f5jm affected introduced 0, fixed 4.52.1 fixed in 4.52.1 summary Transformers is vulnerable to ReDoS attack through its DonutProcessor class
2026-07-07	PYSEC-2026-1987	transformers	4.51.0	Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-3263, GHSA-q2wp-rjmx-x6x9 affected introduced 0, fixed 4.51.0 fixed in 4.51.0 summary Transformers's ReDoS vulnerability in get_configuration_file can lead to catastrophic backtracking
2026-07-07	PYSEC-2026-1979	transformers	4.51.0	Transformers vulnerable to ReDoS attack through its SETTING_RE variable
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-3262, GHSA-489j-g2vx-39wf affected introduced 4.49.0, fixed 4.51.0 fixed in 4.51.0 summary Transformers vulnerable to ReDoS attack through its SETTING_RE variable
2026-07-07	PYSEC-2026-1986	transformers	4.52.1	Transformers's Improper Input Validation vulnerability can be exploited through username injection
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-3777, GHSA-phhr-52qp-3mj4 affected introduced 0, fixed 4.52.1 fixed in 4.52.1 summary Transformers's Improper Input Validation vulnerability can be exploited through username injection
2026-07-07	PYSEC-2026-1985	transformers	4.51.0	Transformers vulnerable to ReDoS attack through its get_imports() function
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-3264, GHSA-jjph-296x-mrcr affected introduced 0, fixed 4.51.0 fixed in 4.51.0 summary Transformers vulnerable to ReDoS attack through its get_imports() function
2026-07-07	PYSEC-2026-1616	mcp	1.9.4	MCP Python SDK vulnerability in the FastMCP Server causes validation error, leading to DoS
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-53366, GHSA-3qhf-m339-9g5v affected introduced 0, fixed 1.9.4 fixed in 1.9.4 summary MCP Python SDK vulnerability in the FastMCP Server causes validation error, leading to DoS
2026-07-07	PYSEC-2026-1618	mcp	1.10.0	MCP Python SDK has Unhandled Exception in Streamable HTTP Transport, Leading to Denial of Service
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-53365, GHSA-j975-95f5-7wqh affected introduced 0, fixed 1.10.0 fixed in 1.10.0 summary MCP Python SDK has Unhandled Exception in Streamable HTTP Transport, Leading to Denial of Service
2026-07-07	PYSEC-2026-1997	urllib3	2.5.0	urllib3 does not control redirects in browsers and Node.js
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-50182, GHSA-48p4-8xcf-vxj5 affected introduced 2.2.0, fixed 2.5.0 fixed in 2.5.0 summary urllib3 does not control redirects in browsers and Node.js
2026-07-07	PYSEC-2026-1999	urllib3	2.5.0	urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-50181, GHSA-pq67-6m6q-mj2v affected introduced 0, fixed 2.5.0 fixed in 2.5.0 summary urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation
2026-07-07	PYSEC-2026-1806	protobuf	6.31.1	protobuf-python has a potential Denial of Service issue
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-4565, GHSA-8qvm-5x2c-j2w7 affected introduced 0, fixed 4.25.8, introduced 5.26.0rc1, fixed 5.29.5, introduced 6.30.0rc1, fixed 6.31.1 fixed in 6.31.1 summary protobuf-python has a potential Denial of Service issue
2026-07-07	PYSEC-2026-1872	requests	2.32.4	Requests vulnerable to .netrc credentials leak via malicious URLs
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-47081, GHSA-9hjg-9r4m-mvj7 affected introduced 0, fixed 2.32.4 fixed in 2.32.4 summary Requests vulnerable to .netrc credentials leak via malicious URLs
2026-07-07	PYSEC-2026-1477	jupyter-core	5.8.1	Jupyter Core on Windows Has Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-30167, GHSA-33p9-3p43-82vq affected introduced 0, fixed 5.8.1 fixed in 5.8.1 summary Jupyter Core on Windows Has Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
2026-07-07	PYSEC-2026-1867	redshift-connector	2.1.7	Issue with Amazon Redshift Python Connector and the BrowserAzureOAuth2CredentialsProvider plugin
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-5279, GHSA-r244-wg5g-6w2r affected introduced 2.0.872, fixed 2.1.7 fixed in 2.1.7 summary Issue with Amazon Redshift Python Connector and the BrowserAzureOAuth2CredentialsProvider plugin
2026-07-07	PYSEC-2026-1974	tornado	6.5	Tornado vulnerable to excessive logging caused by malformed multipart form data
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-47287, GHSA-7cx3-6m66-7c5m affected introduced 0, fixed 6.5 fixed in 6.5 summary Tornado vulnerable to excessive logging caused by malformed multipart form data
2026-07-07	PYSEC-2026-1377	flask	3.1.1	Flask uses fallback key instead of current signing key
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-47278, GHSA-4grg-w6v8-c28g affected introduced 3.1.0, fixed 3.1.1 fixed in 3.1.1 summary Flask uses fallback key instead of current signing key
2026-07-07	PYSEC-2026-1984	transformers	4.50.0	Transformers Regular Expression Denial of Service (ReDoS) vulnerability
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-1194, GHSA-fpwr-67px-3qhx affected introduced 0, fixed 4.50.0 fixed in 4.50.0 summary Transformers Regular Expression Denial of Service (ReDoS) vulnerability
2026-07-07	PYSEC-2026-1604	markdownify	0.14.1	markdownify allows large headline prefixes such as <h9999999>, which causes memory consumption
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-46656, GHSA-7mpr-5m44-h73r affected introduced 0, fixed 0.14.1 fixed in 0.14.1 summary markdownify allows large headline prefixes such as <h9999999>, which causes memory consumption
2026-07-07	PYSEC-2026-1970	torch	2.8.0	PyTorch Improper Resource Shutdown or Release vulnerability
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-3730, GHSA-887c-mr87-cxwp affected introduced 0, fixed 2.8.0 fixed in 2.8.0 summary PyTorch Improper Resource Shutdown or Release vulnerability
2026-07-07	PYSEC-2026-1145	apache-airflow-providers-common-sql	1.24.1	Apache Airflow Common SQL Provider Vulnerable to SQL Injection
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-30473, GHSA-5r62-mjf5-xwhj affected introduced 0, fixed 1.24.1 fixed in 1.24.1 summary Apache Airflow Common SQL Provider Vulnerable to SQL Injection
2026-07-07	PYSEC-2026-2092	django	6.0.7	An issue was discovered in Django 6.0 before 6.0.7 and 5.2 before 5.2.16.
published 2026-07-07 modified 2026-07-10 aliases CVE-2026-53878, GHSA-8qcx-xf44-272x affected introduced 5.2, fixed 5.2.16, introduced 6.0, fixed 6.0.7 fixed in 6.0.7 summary An issue was discovered in Django 6.0 before 6.0.7 and 5.2 before 5.2.16.
2026-07-07	PYSEC-2026-2091	django	6.0.7	An issue was discovered in Django 6.0 before 6.0.7 and 5.2 before 5.2.16.
published 2026-07-07 modified 2026-07-10 aliases CVE-2026-53877, GHSA-crhf-3pfg-w68w affected introduced 5.2, fixed 5.2.16, introduced 6.0, fixed 6.0.7 fixed in 6.0.7 summary An issue was discovered in Django 6.0 before 6.0.7 and 5.2 before 5.2.16.
2026-07-07	PYSEC-2026-2090	django	6.0.7	An issue was discovered in Django 6.0 before 6.0.7 and 5.2 before 5.2.16.
published 2026-07-07 modified 2026-07-10 aliases CVE-2026-48588, GHSA-3h9f-r86x-qvjx affected introduced 5.2, fixed 5.2.16, introduced 6.0, fixed 6.0.7 fixed in 6.0.7 summary An issue was discovered in Django 6.0 before 6.0.7 and 5.2 before 5.2.16.
2026-07-07	PYSEC-2026-1646	mlflow	2.20.3	MLflow Cross-Site Request Forgery (CSRF) vulnerability
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-1473, GHSA-969w-gqqr-g6j3 affected introduced 2.17.0, fixed 2.20.3 fixed in 2.20.3 summary MLflow Cross-Site Request Forgery (CSRF) vulnerability
2026-07-07	PYSEC-2026-1543	litellm		LiteLLM Has a Leakage of Langfuse API Keys
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-0330, GHSA-879v-fggm-vxw2 affected introduced 0, last_affected 1.52.1 summary LiteLLM Has a Leakage of Langfuse API Keys
2026-07-07	PYSEC-2026-1546	litellm	1.61.15	LiteLLM Has an Improper Authorization Vulnerability
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-0628, GHSA-fjcf-3j3r-78rp affected introduced 0, fixed 1.61.15 fixed in 1.61.15 summary LiteLLM Has an Improper Authorization Vulnerability
2026-07-07	PYSEC-2026-1637	mlflow		MLflow Uncontrolled Resource Consumption vulnerability
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-0453, GHSA-49m6-vrr9-2cqm affected introduced 0, last_affected 2.17.2 summary MLflow Uncontrolled Resource Consumption vulnerability
2026-07-07	PYSEC-2026-1885	sagemaker	2.237.3	SageMaker Workflow component allows possibility of MD5 hash collisions
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-0508, GHSA-32g6-mg92-ghm2 affected introduced 0, fixed 2.237.3 fixed in 2.237.3 summary SageMaker Workflow component allows possibility of MD5 hash collisions
2026-07-07	PYSEC-2026-1548	litellm	1.44.12	LiteLLM Reveals Portion of API Key via a Logging File
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-9606, GHSA-g5pg-73fc-hjwq affected introduced 0, fixed 1.44.12 fixed in 1.44.12 summary LiteLLM Reveals Portion of API Key via a Logging File
2026-07-07	PYSEC-2026-1638	mlflow	2.17.0rc0	MLflow has a Local File Read/Path Traversal in dbfs
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-8859, GHSA-4rqf-8pfm-p36r affected introduced 0, fixed 2.17.0rc0 fixed in 2.17.0rc0 summary MLflow has a Local File Read/Path Traversal in dbfs
2026-07-07	PYSEC-2026-1545	litellm	1.56.2	LiteLLM Vulnerable to Denial of Service (DoS) via Crafted HTTP Request
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-8984, GHSA-fh2c-86xm-pm2x affected introduced 0, fixed 1.56.2 fixed in 1.56.2 summary LiteLLM Vulnerable to Denial of Service (DoS) via Crafted HTTP Request
2026-07-07	PYSEC-2026-1433	gunicorn	22.0.0	Gunicorn HTTP Request/Response Smuggling vulnerability
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-6827, GHSA-hc5x-x2vx-497g affected introduced 0, fixed 22.0.0 fixed in 22.0.0 summary Gunicorn HTTP Request/Response Smuggling vulnerability
2026-07-07	PYSEC-2026-1541	litellm		LiteLLM Vulnerable to Remote Code Execution (RCE)
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-6825, GHSA-53gh-p8jc-7rg8 affected introduced 1.40.3.dev2, last_affected 1.40.12 summary LiteLLM Vulnerable to Remote Code Execution (RCE)
2026-07-07	PYSEC-2026-1385	flask-cors	6.0.0	Flask-CORS allows for inconsistent CORS matching
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-6844, GHSA-8vgw-p6qm-5gr7 affected introduced 0, fixed 6.0.0 fixed in 6.0.0 summary Flask-CORS allows for inconsistent CORS matching
2026-07-07	PYSEC-2026-1384	flask-cors	6.0.0	Flask-CORS improper regex path matching vulnerability
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-6839, GHSA-7rxf-gvfg-47g4 affected introduced 0, fixed 6.0.0 fixed in 6.0.0 summary Flask-CORS improper regex path matching vulnerability
2026-07-07	PYSEC-2026-1383	flask-cors	6.0.0	Flask-CORS vulnerable to Improper Handling of Case Sensitivity
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-6866, GHSA-43qf-4rqw-9q2g affected introduced 0, fixed 6.0.0 fixed in 6.0.0 summary Flask-CORS vulnerable to Improper Handling of Case Sensitivity
2026-07-07	PYSEC-2026-1658	mlflow		MLflow Uncontrolled Resource Consumption vulnerability
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-6838, GHSA-q3gw-8236-5jw4 affected introduced 0, last_affected 2.13.2 summary MLflow Uncontrolled Resource Consumption vulnerability
2026-07-07	PYSEC-2026-1982	transformers	4.48.0	Transformers Regular Expression Denial of Service (ReDoS) vulnerability
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-12720, GHSA-6rvg-6v2m-4j46 affected introduced 0, fixed 4.48.0 fixed in 4.48.0 summary Transformers Regular Expression Denial of Service (ReDoS) vulnerability
2026-07-07	PYSEC-2026-1517	langchain-core	0.3.15	langchain-core allows unauthorized users to read arbitrary files from the host file system
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-10940, GHSA-5chr-fjjv-38qv affected introduced 0.1.17, fixed 0.1.53, introduced 0.2.0, fixed 0.2.43, introduced 0.3.0, fixed 0.3.15 fixed in 0.3.15 summary langchain-core allows unauthorized users to read arbitrary files from the host file system
2026-07-07	PYSEC-2026-1549	litellm	1.53.1.dev1	LiteLLM Vulnerable to Denial of Service (DoS)
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-10188, GHSA-gw2q-qw9j-rgv7 affected introduced 0, fixed 1.53.1.dev1 fixed in 1.53.1.dev1 summary LiteLLM Vulnerable to Denial of Service (DoS)
2026-07-07	PYSEC-2026-1471	jinja2	3.1.6	Jinja2 vulnerable to sandbox breakout through attr filter selecting format method
published 2026-07-07 modified 2026-07-07 aliases CVE-2025-27516, GHSA-cpwx-vrp4-4pq7 affected introduced 0, fixed 3.1.6 fixed in 3.1.6 summary Jinja2 vulnerable to sandbox breakout through attr filter selecting format method
2026-07-07	PYSEC-2026-1284	cryptography	44.0.1	Vulnerable OpenSSL included in cryptography wheels
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-12797, GHSA-79v4-65xg-pq4g affected introduced 42.0.0, fixed 44.0.1 fixed in 44.0.1 summary Vulnerable OpenSSL included in cryptography wheels
2026-07-07	PYSEC-2026-1866	redshift-connector	2.1.5	Amazon Redshift Python Connector vulnerable to SQL Injection
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-12745, GHSA-8gc2-vq6m-rwjw affected introduced 2.1.4, fixed 2.1.5 fixed in 2.1.5 summary Amazon Redshift Python Connector vulnerable to SQL Injection
2026-07-07	PYSEC-2026-1475	jinja2	3.1.5	Jinja has a sandbox breakout through indirect reference to format method
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-56326, GHSA-q2x7-8rv6-6q7h affected introduced 0, fixed 3.1.5 fixed in 3.1.5 summary Jinja has a sandbox breakout through indirect reference to format method
2026-07-07	PYSEC-2026-1472	jinja2	3.1.5	Jinja has a sandbox breakout through malicious filenames
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-56201, GHSA-gmj6-6f8f-6699 affected introduced 3.0.0, fixed 3.1.5 fixed in 3.1.5 summary Jinja has a sandbox breakout through malicious filenames
2026-07-07	PYSEC-2026-1851	python-multipart	0.0.18	Denial of service (DoS) via deformation `multipart/form-data` boundary
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-53981, GHSA-59g5-xgcq-4qw3 affected introduced 0, fixed 0.0.18 fixed in 0.0.18 summary Denial of service (DoS) via deformation `multipart/form-data` boundary
2026-07-07	PYSEC-2026-1814	pyjwt	2.10.1	PyJWT Issuer field partial matches allowed
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-53861, GHSA-75c5-xw7c-p5pm affected introduced 2.10.0, fixed 2.10.1 fixed in 2.10.1 summary PyJWT Issuer field partial matches allowed
2026-07-07	PYSEC-2026-1975	tornado	6.4.2	Tornado has an HTTP cookie parsing DoS vulnerability
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-52804, GHSA-8w49-h785-mj3c affected introduced 0, fixed 6.4.2 fixed in 6.4.2 summary Tornado has an HTTP cookie parsing DoS vulnerability
2026-07-07	PYSEC-2026-1103	aiohttp	3.10.11	aiohttp allows request smuggling due to incorrect parsing of chunk extensions
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-52304, GHSA-8495-4g3g-x7pr affected introduced 0, fixed 3.10.11 fixed in 3.10.11 summary aiohttp allows request smuggling due to incorrect parsing of chunk extensions
2026-07-07	PYSEC-2026-1096	aiohttp	3.10.11	aiohttp has a memory leak when middleware is enabled when requesting a resource with a non-allowed method
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-52303, GHSA-27mf-ghqm-j3j8 affected introduced 3.10.6, fixed 3.10.11 fixed in 3.10.11 summary aiohttp has a memory leak when middleware is enabled when requesting a resource with a non-allowed method
2026-07-07	PYSEC-2026-2045	werkzeug	3.0.6	Werkzeug safe_join not safe on Windows
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-49766, GHSA-f9vj-2wh5-fj8j affected introduced 0, fixed 3.0.6 fixed in 3.0.6 summary Werkzeug safe_join not safe on Windows
2026-07-07	PYSEC-2026-1685	mysql-connector-python	9.1.0	MySQL Connector/Python connector takeover vulnerability
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-21272, GHSA-hgjp-83m4-h4fj affected introduced 0, fixed 9.1.0 fixed in 9.1.0 summary MySQL Connector/Python connector takeover vulnerability
2026-07-07	PYSEC-2026-1943	starlette	0.40.0	Starlette Denial of service (DoS) via multipart/form-data
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-47874, GHSA-f96h-pmfr-66vw affected introduced 0, fixed 0.40.0 fixed in 0.40.0 summary Starlette Denial of service (DoS) via multipart/form-data
2026-07-07	PYSEC-2026-1297	django	5.1.1	Django allows enumeration of user e-mail addresses
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-45231, GHSA-rrqc-c2jx-6jgv affected introduced 0, fixed 4.2.16, introduced 5.0, fixed 5.0.9, introduced 5.1, fixed 5.1.1 fixed in 5.1.1 summary Django allows enumeration of user e-mail addresses
2026-07-07	PYSEC-2026-1514	langchain-community	0.2.4	LangChain pickle deserialization of untrusted data
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-5998, GHSA-f2jm-rw3h-6phg affected introduced 0, fixed 0.2.4 fixed in 0.2.4 summary LangChain pickle deserialization of untrusted data
2026-07-07	PYSEC-2026-1547	litellm	1.44.8	LiteLLM Server-Side Request Forgery (SSRF) vulnerability
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-6587, GHSA-g26j-5385-hhw3 affected introduced 0, fixed 1.44.8 fixed in 1.44.8 summary LiteLLM Server-Side Request Forgery (SSRF) vulnerability
2026-07-07	PYSEC-2026-1108	aiohttp	3.10.2	In aiohttp, compressed files as symlinks are not protected from path traversal
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-42367, GHSA-jwhx-xcg6-8xhj affected introduced 3.10.0b1, fixed 3.10.2 fixed in 3.10.2 summary In aiohttp, compressed files as symlinks are not protected from path traversal
2026-07-07	PYSEC-2026-1992	twisted	24.7.0rc1	twisted.web has disordered HTTP pipeline response
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-41671, GHSA-c8m8-j448-xjx7 affected introduced 0, fixed 24.7.0rc1 fixed in 24.7.0rc1 summary twisted.web has disordered HTTP pipeline response
2026-07-07	PYSEC-2026-1917	sentry-sdk	2.8.0	Sentry's Python SDK unintentionally exposes environment variables to subprocesses
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-40647, GHSA-g92j-qhmh-64v2 affected introduced 0, fixed 1.45.1, introduced 2.0.0a1, fixed 2.8.0 fixed in 2.8.0 summary Sentry's Python SDK unintentionally exposes environment variables to subprocesses
2026-07-07	PYSEC-2026-1918	setuptools	70.0.0	setuptools vulnerable to Command Injection via package URL
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-6345, GHSA-cx63-2mw6-8hw5 affected introduced 0, fixed 70.0.0 fixed in 70.0.0 summary setuptools vulnerable to Command Injection via package URL
2026-07-07	PYSEC-2026-2074	zipp	3.19.1	zipp Denial of Service vulnerability
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-5569, GHSA-jfmj-5v4g-7637 affected introduced 0, fixed 3.19.1 fixed in 3.19.1 summary zipp Denial of Service vulnerability
2026-07-07	PYSEC-2026-1551	litellm	1.40.15	litellm vulnerable to improper access control in team management
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-5710, GHSA-qqcv-vg9f-5rr3 affected introduced 0, fixed 1.40.15 fixed in 1.40.15 summary litellm vulnerable to improper access control in team management
2026-07-07	PYSEC-2026-1304	djangorestframework	3.15.2	Cross-site Scripting in djangorestframework
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-21520, GHSA-gw84-84pc-xp82 affected introduced 0, fixed 3.15.2 fixed in 3.15.2 summary Cross-site Scripting in djangorestframework
2026-07-07	PYSEC-2026-1995	urllib3	2.2.2	urllib3's Proxy-Authorization request header isn't stripped during cross-origin redirects
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-37891, GHSA-34jh-p97f-mpxf affected introduced 0, fixed 1.26.19, introduced 2.0.0, fixed 2.2.2 fixed in 2.2.2 summary urllib3's Proxy-Authorization request header isn't stripped during cross-origin redirects
2026-07-07	PYSEC-2026-1209	azure-identity	1.16.1	Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-35255, GHSA-m5vv-6r4h-3vj9 affected introduced 0, fixed 1.16.1 fixed in 1.16.1 summary Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability
2026-07-07	PYSEC-2026-1550	litellm	1.40.0	SQL injection in litellm
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-5225, GHSA-h6m6-jj8v-94jj affected introduced 0, fixed 1.40.0 fixed in 1.40.0 summary SQL injection in litellm
2026-07-07	PYSEC-2026-1544	litellm		SQL injection in litellm
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-4890, GHSA-8j42-pcfm-3467 affected introduced 0, last_affected 1.27.14 summary SQL injection in litellm
2026-07-07	PYSEC-2026-1540	litellm	1.35.36	Arbitrary file deletion in litellm
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-4888, GHSA-3xr8-qfvj-9p9j affected introduced 0, fixed 1.35.36 fixed in 1.35.36 summary Arbitrary file deletion in litellm
2026-07-07	PYSEC-2026-1645	mlflow	2.11.3	Undefined Behavior in mlflow
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-3099, GHSA-8f8q-q2j7-7j2m affected introduced 0, fixed 2.11.3 fixed in 2.11.3 summary Undefined Behavior in mlflow
2026-07-07	PYSEC-2026-1516	langchain-community	0.2.9	Server-Side Request Forgery in langchain-community.retrievers.web_research.WebResearchRetriever
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-3095, GHSA-q25c-c977-4cmh affected introduced 0, fixed 0.2.9 fixed in 0.2.9 summary Server-Side Request Forgery in langchain-community.retrievers.web_research.WebResearchRetriever
2026-07-07	PYSEC-2026-1826	pymongo	4.6.3	PyMongo Out-of-bounds Read in the bson module
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-5629, GHSA-m87m-mmvp-v9qm affected introduced 0, fixed 4.6.3 fixed in 4.6.3 summary PyMongo Out-of-bounds Read in the bson module
2026-07-07	PYSEC-2026-1928	skops		Skops unsafe deserialization
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-37065, GHSA-q49c-6v6g-wgq3 affected introduced 0.6, last_affected 0.9 summary Skops unsafe deserialization
2026-07-07	PYSEC-2026-1657	mlflow		MLFlow improper input validation
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-37061, GHSA-pqcv-qw2r-r859 affected introduced 1.11.0, last_affected 2.13.1 summary MLFlow improper input validation
2026-07-07	PYSEC-2026-1647	mlflow		MLFlow unsafe deserialization
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-37060, GHSA-cv6c-7963-wxcg affected introduced 1.27.0, last_affected 2.14.1 summary MLFlow unsafe deserialization
2026-07-07	PYSEC-2026-1660	mlflow		MLFlow unsafe deserialization
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-37059, GHSA-wf7f-8fxf-xfxc affected introduced 0.5.0, last_affected 3.4.0 summary MLFlow unsafe deserialization
2026-07-07	PYSEC-2026-1654	mlflow		MLFlow unsafe deserialization
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-37057, GHSA-j8mg-pqc5-x9gj affected introduced 2.0.0rc0, last_affected 2.14.1 summary MLFlow unsafe deserialization
2026-07-07	PYSEC-2026-1648	mlflow		MLFlow unsafe deserialization
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-37058, GHSA-cwgg-w6mp-w9hg affected introduced 2.5.0, last_affected 2.14.1 summary MLFlow unsafe deserialization
2026-07-07	PYSEC-2026-1643	mlflow		MLFlow unsafe deserialization
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-37052, GHSA-76cg-cfhx-373f affected introduced 1.1.0, last_affected 2.14.1 summary MLFlow unsafe deserialization
2026-07-07	PYSEC-2026-1663	mlflow		MLFlow unsafe deserialization
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-37055, GHSA-x38x-g6gr-jqff affected introduced 1.24.0, last_affected 2.14.1 summary MLFlow unsafe deserialization
2026-07-07	PYSEC-2026-1651	mlflow		MLFlow unsafe deserialization
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-37054, GHSA-ghv6-9r9j-wh4j affected introduced 0.9.0, last_affected 2.14.1 summary MLFlow unsafe deserialization
2026-07-07	PYSEC-2026-1636	mlflow		MLFlow unsafe deserialization
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-37053, GHSA-43c4-9qgj-x742 affected introduced 1.1.0, last_affected 2.14.1 summary MLFlow unsafe deserialization
2026-07-07	PYSEC-2026-1644	mlflow		MLFlow unsafe deserialization
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-37056, GHSA-7p8j-qv6x-f4g4 affected introduced 1.23.0, last_affected 2.14.1 summary MLFlow unsafe deserialization
2026-07-07	PYSEC-2026-1292	dbt-core	1.8.1	dbt allows Binding to an Unrestricted IP Address via socketsocket
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-36105, GHSA-pmrx-695r-4349 affected introduced 0, fixed 1.6.15, introduced 1.7.0, fixed 1.7.15, introduced 1.8.0, fixed 1.8.1 fixed in 1.8.1 summary dbt allows Binding to an Unrestricted IP Address via socketsocket
2026-07-07	PYSEC-2026-1873	requests	2.32.0	Requests `Session` object does not verify requests after making first request with verify=False
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-35195, GHSA-9wx4-h78v-vm56 affected introduced 0, fixed 2.32.0 fixed in 2.32.0 summary Requests `Session` object does not verify requests after making first request with verify=False
2026-07-07	PYSEC-2026-1542	litellm		litellm passes untrusted data to `eval` function without sanitization
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-4264, GHSA-7ggm-4rjg-594w affected introduced 0, last_affected 1.28.11 summary litellm passes untrusted data to `eval` function without sanitization
2026-07-07	PYSEC-2026-2043	werkzeug	3.0.3	Werkzeug debugger vulnerable to remote execution when interacting with attacker controlled domain
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-34069, GHSA-2g68-c3qc-8985 affected introduced 0, fixed 3.0.3 fixed in 3.0.3 summary Werkzeug debugger vulnerable to remote execution when interacting with attacker controlled domain
2026-07-07	PYSEC-2026-1474	jinja2	3.1.4	Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-34064, GHSA-h75v-3vvj-5mfj affected introduced 0, fixed 3.1.4 fixed in 3.1.4 summary Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter
2026-07-07	PYSEC-2026-1887	sagemaker	2.214.3	sagemaker-python-sdk Command Injection vulnerability
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-34073, GHSA-7pc3-pr3q-58vg affected introduced 0, fixed 2.214.3 fixed in 2.214.3 summary sagemaker-python-sdk Command Injection vulnerability
2026-07-07	PYSEC-2026-1889	sagemaker	2.218.0	sagemaker-python-sdk vulnerable to Deserialization of Untrusted Data
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-34072, GHSA-wjvx-jhpj-r54r affected introduced 0, fixed 2.218.0 fixed in 2.218.0 summary sagemaker-python-sdk vulnerable to Deserialization of Untrusted Data
2026-07-07	PYSEC-2026-1976	tqdm	4.66.3	tqdm CLI arguments injection attack
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-34062, GHSA-g7vv-2v7x-gj9p affected introduced 4.4.0, fixed 4.66.3 fixed in 4.66.3 summary tqdm CLI arguments injection attack
2026-07-07	PYSEC-2026-1098	aiohttp	3.9.4	aiohttp vulnerable to Denial of Service when trying to parse malformed POST requests
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-30251, GHSA-5m98-qgg9-wh84 affected introduced 0, fixed 3.9.4 fixed in 3.9.4 summary aiohttp vulnerable to Denial of Service when trying to parse malformed POST requests
2026-07-07	PYSEC-2026-1102	aiohttp	3.9.4	aiohttp Cross-site Scripting vulnerability on index pages for static file handling
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-27306, GHSA-7gpw-8wmc-pm8g affected introduced 0, fixed 3.9.4 fixed in 3.9.4 summary aiohttp Cross-site Scripting vulnerability on index pages for static file handling
2026-07-07	PYSEC-2026-1510	langchain	0.0.353	langchain vulnerable to path traversal
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-3571, GHSA-rgp8-pm28-3759 affected introduced 0, fixed 0.0.353 fixed in 0.0.353 summary langchain vulnerable to path traversal
2026-07-07	PYSEC-2026-1641	mlflow		mlflow vulnerable to Path Traversal
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-1560, GHSA-5mvj-wmgj-7q8c affected introduced 0, last_affected 2.9.2 summary mlflow vulnerable to Path Traversal
2026-07-07	PYSEC-2026-1649	mlflow		mlflow vulnerable to Path Traversal
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-1593, GHSA-f42m-mvfv-cgw5 affected introduced 0, last_affected 2.9.2 summary mlflow vulnerable to Path Traversal
2026-07-07	PYSEC-2026-1653	mlflow	2.12.1	mlflow vulnerable to Path Traversal
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-1558, GHSA-j62r-wxqq-f3gf affected introduced 0, fixed 2.12.1 fixed in 2.12.1 summary mlflow vulnerable to Path Traversal
2026-07-07	PYSEC-2026-1655	mlflow		mlflow vulnerable to Path Traversal
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-1594, GHSA-m49c-5c52-6696 affected introduced 0, last_affected 2.9.2 summary mlflow vulnerable to Path Traversal
2026-07-07	PYSEC-2026-1650	mlflow	2.12.1	mlflow Path Traversal vulnerability
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-1483, GHSA-f82r-jj5r-6g97 affected introduced 0, fixed 2.12.1 fixed in 2.12.1 summary mlflow Path Traversal vulnerability
2026-07-07	PYSEC-2026-1434	gunicorn	22.0.0	Request smuggling leading to endpoint restriction bypass in Gunicorn
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-1135, GHSA-w3h3-4rj7-4ph4 affected introduced 0, fixed 22.0.0 fixed in 22.0.0 summary Request smuggling leading to endpoint restriction bypass in Gunicorn
2026-07-07	PYSEC-2026-1940	sqlparse	0.5.0	sqlparse parsing heavily nested list leads to Denial of Service
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-4340, GHSA-2m57-hf25-phgg affected introduced 0, fixed 0.5.0 fixed in 0.5.0 summary sqlparse parsing heavily nested list leads to Denial of Service
2026-07-07	PYSEC-2026-1812	pydantic	2.4.0	Pydantic regular expression denial of service
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-3772, GHSA-mr82-8j83-vxmv affected introduced 0, fixed 1.10.13, introduced 2.0.0, fixed 2.4.0 fixed in 2.4.0 summary Pydantic regular expression denial of service
2026-07-07	PYSEC-2026-1307	dnspython	2.6.1	Potential DoS via the Tudoor mechanism in eventlet and dnspython
published 2026-07-07 modified 2026-07-07 aliases CVE-2023-29483, GHSA-3rq5-2g8h-59hc affected introduced 0, fixed 2.6.1 fixed in 2.6.1 summary Potential DoS via the Tudoor mechanism in eventlet and dnspython
2026-07-07	PYSEC-2026-1978	transformers	4.38.0	Transformers Deserialization of Untrusted Data vulnerability
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-3568, GHSA-37q5-v5qm-c9v8 affected introduced 0, fixed 4.38.0 fixed in 4.38.0 summary Transformers Deserialization of Untrusted Data vulnerability
2026-07-07	PYSEC-2026-1793	pillow	10.3.0	Pillow buffer overflow vulnerability
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-28219, GHSA-44wm-f244-xhp3 affected introduced 0, fixed 10.3.0 fixed in 10.3.0 summary Pillow buffer overflow vulnerability
2026-07-07	PYSEC-2026-1519	langchain-core	0.1.35	LangChain's XMLOutputParser vulnerable to XML Entity Expansion
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-1455, GHSA-q84m-rmw3-4382 affected introduced 0, fixed 0.1.35 fixed in 0.1.35 summary LangChain's XMLOutputParser vulnerable to XML Entity Expansion
2026-07-07	PYSEC-2026-2033	weasyprint	61.2	WeasyPrint allows the attachment of arbitrary files and URLs to a PDF
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-28184, GHSA-35jj-wx47-4w8r affected introduced 61.0, fixed 61.2 fixed in 61.2 summary WeasyPrint allows the attachment of arbitrary files and URLs to a PDF
2026-07-07	PYSEC-2026-1484	jwcrypto	1.5.6	JWCrypto vulnerable to JWT bomb Attack in `deserialize` function
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-28102, GHSA-j857-7rvv-vj97 affected introduced 0, fixed 1.5.6 fixed in 1.5.6 summary JWCrypto vulnerable to JWT bomb Attack in `deserialize` function
2026-07-07	PYSEC-2026-1509	langchain	0.1.0	langchain Server-Side Request Forgery vulnerability
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-0243, GHSA-h9j7-5xvc-qhg5 affected introduced 0, fixed 0.1.0 fixed in 0.1.0 summary langchain Server-Side Request Forgery vulnerability
2026-07-07	PYSEC-2026-1283	cryptography	42.0.0	Python Cryptography package vulnerable to Bleichenbacher timing oracle attack
published 2026-07-07 modified 2026-07-07 aliases CVE-2023-50782, GHSA-3ww4-gg4f-jr7f affected introduced 0, fixed 42.0.0 fixed in 42.0.0 summary Python Cryptography package vulnerable to Bleichenbacher timing oracle attack
2026-07-07	PYSEC-2026-1285	cryptography	42.0.2	Null pointer dereference in PKCS12 parsing
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-0727, GHSA-9v9h-cgj8-h64p affected introduced 0, fixed 42.0.2 fixed in 42.0.2 summary Null pointer dereference in PKCS12 parsing
2026-07-07	PYSEC-2026-1325	ecdsa		Minerva timing attack on P-256 in python-ecdsa
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-23342, GHSA-wj6h-64fc-37mp affected introduced 0 summary Minerva timing attack on P-256 in python-ecdsa
2026-07-07	PYSEC-2026-1478	jupyter-lsp	2.2.2	Unsecured endpoints in the jupyter-lsp server extension
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-22415, GHSA-4qhp-652w-c22x affected introduced 0, fixed 2.2.2 fixed in 2.2.2 summary Unsecured endpoints in the jupyter-lsp server extension
2026-07-07	PYSEC-2026-1473	jinja2	3.1.3	Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter
published 2026-07-07 modified 2026-07-07 aliases CVE-2024-22195, GHSA-h5c8-rqwp-cp95 affected introduced 0, fixed 3.1.3 fixed in 3.1.3 summary Jinja vulnerable to HTML attribute injection when passing user input as keys to xmlattr filter
2026-07-07	PYSEC-2026-1388	fonttools	4.43.0	fonttools XML External Entity Injection (XXE) Vulnerability
published 2026-07-07 modified 2026-07-07 aliases CVE-2023-45139, GHSA-6673-4983-2vx5 affected introduced 4.28.2, fixed 4.43.0 fixed in 4.43.0 summary fonttools XML External Entity Injection (XXE) Vulnerability
2026-07-07	PYSEC-2026-1811	pycryptodome	3.19.1	PyCryptodome and pycryptodomex side-channel leakage for OAEP decryption
published 2026-07-07 modified 2026-07-07 aliases CVE-2023-52323, GHSA-j225-cvw7-qrx7 affected introduced 0, fixed 3.19.1 fixed in 3.19.1 summary PyCryptodome and pycryptodomex side-channel leakage for OAEP decryption
2026-07-07	PYSEC-2026-1662	mlflow	2.9.2	MLflow Path Traversal Vulnerability
published 2026-07-07 modified 2026-07-07 aliases CVE-2023-6976, GHSA-wv8q-4f85-2p8p affected introduced 0, fixed 2.9.2 fixed in 2.9.2 summary MLflow Path Traversal Vulnerability
2026-07-07	PYSEC-2026-1659	mlflow	2.9.2	MLflow Local File Disclosure Vulnerability
published 2026-07-07 modified 2026-07-07 aliases CVE-2023-6977, GHSA-qg8p-32gr-gh6x affected introduced 0, fixed 2.9.2 fixed in 2.9.2 summary MLflow Local File Disclosure Vulnerability
2026-07-07	PYSEC-2026-1652	mlflow	2.9.2	mlflow Command Injection vulnerability
published 2026-07-07 modified 2026-07-07 aliases CVE-2023-6940, GHSA-hvc6-42vf-jhf8 affected introduced 0, fixed 2.9.2 fixed in 2.9.2 summary mlflow Command Injection vulnerability
2026-07-07	PYSEC-2026-1758	paramiko	3.4.0	Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin
published 2026-07-07 modified 2026-07-07 aliases CVE-2023-48795, GHSA-45x7-px36-x8w8 affected introduced 2.5.0, fixed 3.4.0 fixed in 3.4.0 summary Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin
2026-07-07	PYSEC-2026-1661	mlflow	2.9.0	Information exposure in MLflow
published 2026-07-07 modified 2026-07-07 aliases CVE-2023-43472, GHSA-wqxf-447m-6f5f affected introduced 0, fixed 2.9.0 fixed in 2.9.0 summary Information exposure in MLflow
2026-07-07	PYSEC-2026-1834	pypdf	3.17.0	Possible Infinite Loop when PdfWriter(clone_from) is used with a PDF
published 2026-07-07 modified 2026-07-07 aliases CVE-2023-46250, GHSA-wjcc-cq79-p63f affected introduced 3.7.0, fixed 3.17.0 fixed in 3.17.0 summary Possible Infinite Loop when PdfWriter(clone_from) is used with a PDF
2026-07-07	PYSEC-2026-1508	langchain	0.0.329	Langchain Server-Side Request Forgery vulnerability
published 2026-07-07 modified 2026-07-07 aliases CVE-2023-32786, GHSA-6h8p-4hx9-w66c affected introduced 0, fixed 0.0.329 fixed in 0.0.329 summary Langchain Server-Side Request Forgery vulnerability
2026-07-07	PYSEC-2026-1752	opentelemetry-instrumentation	0.41b0	opentelemetry-instrumentation Denial of Service vulnerability due to unbound cardinality metrics
published 2026-07-07 modified 2026-07-07 aliases CVE-2023-43810, GHSA-5rv5-6h4r-h22v affected introduced 0, fixed 0.41b0 fixed in 0.41b0 summary opentelemetry-instrumentation Denial of Service vulnerability due to unbound cardinality metrics
2026-07-07	PYSEC-2026-1428	grpcio	1.55.3	Denial of Service Vulnerability in gRPC TCP Server (Posix-compatible platforms)
published 2026-07-07 modified 2026-07-07 aliases CVE-2023-4785, GHSA-p25m-jpj4-qcrr affected introduced 1.55.0, fixed 1.55.3, introduced 1.54.0, fixed 1.54.3, introduced 1.53.0, fixed 1.53.2 fixed in 1.55.3 summary Denial of Service Vulnerability in gRPC TCP Server (Posix-compatible platforms)
2026-07-07	PYSEC-2026-1794	pillow	10.0.1	libwebp: OOB write in BuildHuffmanTable
published 2026-07-07 modified 2026-07-07 aliases CVE-2023-4863, GHSA-j7hp-h8jx-5ppr affected introduced 0, fixed 10.0.1 fixed in 10.0.1 summary libwebp: OOB write in BuildHuffmanTable
2026-07-07	PYSEC-2026-1424	grpcio	1.56.2	Excessive Iteration in gRPC
published 2026-07-07 modified 2026-07-07 aliases CVE-2023-33953, GHSA-496j-2rq6-j6cc affected introduced 0, fixed 1.53.2, introduced 1.54.0, fixed 1.54.3, introduced 1.55.0, fixed 1.55.2, introduced 1.56.0, fixed 1.56.2 fixed in 1.56.2 summary Excessive Iteration in gRPC
2026-07-07	PYSEC-2026-1426	grpcio	1.54.2	gRPC connection termination issue
published 2026-07-07 modified 2026-07-07 aliases CVE-2023-32732, GHSA-9hxf-ppjv-w6rq affected introduced 1.53.0, fixed 1.53.1, introduced 1.54.0, fixed 1.54.2 fixed in 1.54.2 summary gRPC connection termination issue
2026-07-07	PYSEC-2026-1425	grpcio	1.53.0	gRPC Reachable Assertion issue
published 2026-07-07 modified 2026-07-07 aliases CVE-2023-1428, GHSA-6628-q6j9-w8vg affected introduced 1.51.0, fixed 1.53.0 fixed in 1.53.0 summary gRPC Reachable Assertion issue
2026-07-07	PYSEC-2026-1427	grpcio	1.54.2	Connection confusion in gRPC
published 2026-07-07 modified 2026-07-07 aliases CVE-2023-32731, GHSA-cfgp-2977-2fmm affected introduced 1.53.0, fixed 1.53.1, introduced 1.54.0, fixed 1.54.2 fixed in 1.54.2 summary Connection confusion in gRPC
2026-07-07	PYSEC-2026-1836	pypdf2	2.10.6	PyPDF2 vulnerable to possible Infinite Loop when reading malformed objects
published 2026-07-07 modified 2026-07-07 aliases CVE-2023-36807, GHSA-hm9v-vj3r-r55m affected introduced 2.10.5, fixed 2.10.6 fixed in 2.10.6 summary PyPDF2 vulnerable to possible Infinite Loop when reading malformed objects
2026-07-07	PYSEC-2026-1837	pypdf2	1.27.9	PyPDF2 quadratic runtime with malformed PDF missing xref marker
published 2026-07-07 modified 2026-07-07 aliases CVE-2023-36810, GHSA-jrm6-h9cq-8gqw affected introduced 0, fixed 1.27.9 fixed in 1.27.9 summary PyPDF2 quadratic runtime with malformed PDF missing xref marker
2026-07-07	PYSEC-2026-1871	reportlab	3.6.13	Reportlab vulnerable to remote code execution
published 2026-07-07 modified 2026-07-07 aliases CVE-2023-33733, GHSA-9q9m-c65c-37pq affected introduced 0, fixed 3.6.13 fixed in 3.6.13 summary Reportlab vulnerable to remote code execution
2026-07-07	PYSEC-2026-1824	pymdown-extensions	10.0	Any file can be included with the pymdown-snippets extension
published 2026-07-07 modified 2026-07-07 aliases CVE-2023-32309, GHSA-jh85-wwv9-24hv affected introduced 1.5, fixed 10.0 fixed in 10.0 summary Any file can be included with the pymdown-snippets extension
2026-07-07	PYSEC-2026-920	sentry-sdk	1.14.0	Sentry SDK leaks sensitive session information when `sendDefaultPII` is set to `True`
published 2026-07-07 modified 2026-07-07 aliases CVE-2023-28117, GHSA-29pr-6jr8-q5jm affected introduced 0, fixed 1.14.0 fixed in 1.14.0 summary Sentry SDK leaks sensitive session information when `sendDefaultPII` is set to `True`
2026-07-07	PYSEC-2026-800	cryptography	39.0.1	Vulnerable OpenSSL included in cryptography wheels
published 2026-07-07 modified 2026-07-07 aliases CVE-2023-0286, GHSA-x4qr-2fvf-3mr5 affected introduced 0.8.1, fixed 39.0.1 fixed in 39.0.1 summary Vulnerable OpenSSL included in cryptography wheels
2026-07-07	PYSEC-2026-922	snowflake-connector-python	2.8.2	snowflake-connector-python is vulnerable to Regular Expression Denial of Service (ReDoS)
published 2026-07-07 modified 2026-07-07 aliases CVE-2022-42965, GHSA-4r6j-fwcx-94cf affected introduced 0, fixed 2.8.2 fixed in 2.8.2 summary snowflake-connector-python is vulnerable to Regular Expression Denial of Service (ReDoS)
2026-07-07	PYSEC-2026-1055	twisted	22.10.0rc1	Twisted vulnerable to NameVirtualHost Host header injection
published 2026-07-07 modified 2026-07-07 aliases CVE-2022-39348, GHSA-vg46-2rrj-3647 affected introduced 0.9.4, fixed 22.10.0rc1 fixed in 22.10.0rc1 summary Twisted vulnerable to NameVirtualHost Host header injection
2026-07-07	PYSEC-2026-899	protobuf	4.21.6	protobuf-cpp and protobuf-python have potential Denial of Service issue
published 2026-07-07 modified 2026-07-07 aliases CVE-2022-1941, GHSA-8gq9-2x98-w8hf affected introduced 0, fixed 3.18.3, introduced 3.19.0, fixed 3.19.5, introduced 3.20.0, fixed 3.20.2, introduced 4.0.0, fixed 4.21.6 fixed in 4.21.6 summary protobuf-cpp and protobuf-python have potential Denial of Service issue
2026-07-07	PYSEC-2026-827	jwcrypto	1.4	jwcrypto token substitution can lead to authentication bypass
published 2026-07-07 modified 2026-07-07 aliases CVE-2022-3102, GHSA-gwp4-mcv4-w95j affected introduced 0, fixed 1.4 fixed in 1.4 summary jwcrypto token substitution can lead to authentication bypass
2026-07-06	PYSEC-2026-2257	pillow	12.3.0	Pillow is a Python imaging library.
published 2026-07-06 modified 2026-07-13 aliases CVE-2026-55798, GHSA-4x4j-2g7c-83w6 affected introduced 0, fixed 12.3.0 fixed in 12.3.0 summary Pillow is a Python imaging library.
2026-07-06	PYSEC-2026-2256	pillow	12.3.0	Pillow is a Python imaging library.
published 2026-07-06 modified 2026-07-13 aliases CVE-2026-55380, GHSA-phj9-mv4w-65pm affected introduced 0, fixed 12.3.0 fixed in 12.3.0 summary Pillow is a Python imaging library.
2026-07-06	PYSEC-2026-2255	pillow	12.3.0	Pillow is a Python imaging library.
published 2026-07-06 modified 2026-07-13 aliases CVE-2026-55379, GHSA-45hq-cxwh-f6vc affected introduced 0, fixed 12.3.0 fixed in 12.3.0 summary Pillow is a Python imaging library.
2026-07-06	PYSEC-2026-2254	pillow	12.3.0	Pillow is a Python imaging library.
published 2026-07-06 modified 2026-07-13 aliases CVE-2026-54060, GHSA-5x94-69rx-g8h2 affected introduced 0, fixed 12.3.0 fixed in 12.3.0 summary Pillow is a Python imaging library.
2026-07-06	PYSEC-2026-2253	pillow	12.3.0	Pillow is a Python imaging library.
published 2026-07-06 modified 2026-07-13 aliases CVE-2026-54059, GHSA-8v84-f9pq-wr9x affected introduced 0, fixed 12.3.0 fixed in 12.3.0 summary Pillow is a Python imaging library.
2026-07-06	PYSEC-2026-784	azure-storage-blob	12.13.0	Microsoft: CBC Padding Oracle in Azure Blob Storage Encryption Library
published 2026-07-06 modified 2026-07-07 aliases CVE-2022-30187, GHSA-64x4-9hc6-r2h6 affected introduced 0, fixed 12.13.0 fixed in 12.13.0 summary Microsoft: CBC Padding Oracle in Azure Blob Storage Encryption Library
2026-07-06	PYSEC-2026-1057	ujson	5.4.0	Incorrect handling of invalid surrogate pair characters
published 2026-07-06 modified 2026-07-07 aliases CVE-2022-31116, GHSA-wpqr-jcpx-745r affected introduced 0, fixed 5.4.0 fixed in 5.4.0 summary Incorrect handling of invalid surrogate pair characters
2026-07-06	PYSEC-2026-1056	ujson	5.4.0	Potential double free of buffer during string decoding
published 2026-07-06 modified 2026-07-07 aliases CVE-2022-31117, GHSA-fm67-cv37-96ff affected introduced 0, fixed 5.4.0 fixed in 5.4.0 summary Potential double free of buffer during string decoding
2026-07-06	PYSEC-2026-1065	werkzeug	0.15.5	Pallets Werkzeug vulnerable to Path Traversal
published 2026-07-06 modified 2026-07-07 aliases CVE-2019-14322, GHSA-j544-7q9p-6xp8 affected introduced 0, fixed 0.15.5 fixed in 0.15.5 summary Pallets Werkzeug vulnerable to Path Traversal
2026-07-06	PYSEC-2026-801	django	1.4.4	XML Entity Expansion (XEE) in Django
published 2026-07-06 modified 2026-07-07 aliases CVE-2013-1664, GHSA-qrh7-x6fp-c2mp affected introduced 1.3.0, fixed 1.3.6, introduced 1.4.0, fixed 1.4.4 fixed in 1.4.4 summary XML Entity Expansion (XEE) in Django
2026-07-06	PYSEC-2026-802	django	1.4.4	XML External Entity (XXE) in Django
published 2026-07-06 modified 2026-07-07 aliases CVE-2013-1665, GHSA-x64m-686f-fmm3 affected introduced 1.3.0, fixed 1.3.6, introduced 1.4.0, fixed 1.4.4 fixed in 1.4.4 summary XML External Entity (XXE) in Django
2026-07-06	PYSEC-2026-921	simplejson	2.6.1	simplejson before 2.6.1 vulnerable to array index error
published 2026-07-06 modified 2026-07-07 aliases CVE-2014-4616, GHSA-9772-cwx9-r4cj affected introduced 0, fixed 2.6.1 fixed in 2.6.1 summary simplejson before 2.6.1 vulnerable to array index error
2026-07-04	PYSEC-2026-2085	nltk	3.9.4	In nltk/nltk versions 3.9.3 and earlier, five Stanford interface classes (StanfordPOSTagger, StanfordNERTagger, StanfordParser, StanfordDependencyParser, and StanfordNeuralDependencyParser) are vulne…
published 2026-07-04 modified 2026-07-09 aliases CVE-2026-12252, GHSA-9r6g-266r-89x4 affected introduced 0, fixed 3.9.4 fixed in 3.9.4 summary In nltk/nltk versions 3.9.3 and earlier, five Stanford interface classes (StanfordPOSTagger, StanfordNERTagger, StanfordParser, StanfordDependencyParser, and StanfordNeuralDependencyParser) are vulne…
2026-07-02	PYSEC-2026-682	mysql-connector-python		MySQL Connectors Privilege Escalation
published 2026-07-02 modified 2026-07-02 aliases CVE-2017-3590, GHSA-2cf3-g243-hhfx affected introduced 0, last_affected 2.1.5 summary MySQL Connectors Privilege Escalation
2026-07-02	PYSEC-2026-683	mysql-connector-python	8.0.19	Improper Access Control in MySQL Connector Python
published 2026-07-02 modified 2026-07-06 aliases CVE-2019-2435, GHSA-v5rq-w2xm-7g5f affected introduced 2.1.0, fixed 8.0.19 fixed in 8.0.19 summary Improper Access Control in MySQL Connector Python
2026-07-02	PYSEC-2026-630	django	1.0	Django Arbitrary Code Execution
published 2026-07-02 modified 2026-07-02 aliases CVE-2007-0404, GHSA-qc99-g3wm-hgxr affected introduced 0.95, fixed 1.0 fixed in 1.0 summary Django Arbitrary Code Execution
2026-07-02	PYSEC-2026-629	django	1.0	Django Improper Access Control
published 2026-07-02 modified 2026-07-02 aliases CVE-2007-0405, GHSA-mwv2-398h-v489 affected introduced 0.95, fixed 1.0 fixed in 1.0 summary Django Improper Access Control
2026-07-02	PYSEC-2026-628	django	2.2.2	XSS in jQuery as used in Drupal, Backdrop CMS, and other products
published 2026-07-02 modified 2026-07-06 aliases CVE-2019-11358, GHSA-6c3j-c64m-qhgq affected introduced 2.0a1, fixed 2.1.9, introduced 2.2a1, fixed 2.2.2 fixed in 2.2.2 summary XSS in jQuery as used in Drupal, Backdrop CMS, and other products
2026-06-30	PYSEC-2026-3625	msgpack	1.2.1	MessagePack is the serializer implementation for Python msgpack.org.
published 2026-06-30 modified 2026-08-07 aliases CVE-2026-57585, GHSA-6v7p-g79w-8964 affected introduced 0, fixed 1.2.1 fixed in 1.2.1 summary MessagePack is the serializer implementation for Python msgpack.org.
2026-06-30	PYSEC-2026-597	nltk		NLTK version 3.9.4 is vulnerable to a path traversal attack due to an incomplete fix for GitHub Issue #3504.
published 2026-06-30 modified 2026-07-01 aliases CVE-2026-12243, GHSA-m42h-3232-vpv3 affected introduced 0, last_affected 3.9.4 summary NLTK version 3.9.4 is vulnerable to a path traversal attack due to an incomplete fix for GitHub Issue #3504.
2026-06-29	PYSEC-2026-388	litellm	1.84.0	LiteLLM: Authentication Bypass via Host Header Injection
published 2026-06-29 modified 2026-07-01 aliases CVE-2026-49468, GHSA-4xpc-pv4p-pm3w affected introduced 0, fixed 1.84.0 fixed in 1.84.0 summary LiteLLM: Authentication Bypass via Host Header Injection
2026-06-29	PYSEC-2026-366	jupyter-server	2.20.0	Jupyter Server: Stored XSS in `NbconvertFileHandler` / `NbconvertPostHandler` via missing `sandbox` CSP
published 2026-06-29 modified 2026-07-01 aliases CVE-2026-44727, GHSA-fcw5-x6j4-ccmp affected introduced 0, fixed 2.20.0 fixed in 2.20.0 summary Jupyter Server: Stored XSS in `NbconvertFileHandler` / `NbconvertPostHandler` via missing `sandbox` CSP
2026-06-29	PYSEC-2026-421	mlflow	3.8.0rc0	MLflow Use of Default Password Authentication Bypass Vulnerability
published 2026-06-29 modified 2026-07-01 aliases CVE-2026-2635, GHSA-gq3w-7jj3-x7gr affected introduced 0, fixed 3.8.0rc0 fixed in 3.8.0rc0 summary MLflow Use of Default Password Authentication Bypass Vulnerability
2026-06-29	PYSEC-2026-418	mlflow	3.10.0	MLflow: Improper Origin Validation in MLflow Assistant /ajax-api Endpoints Enables Browser-Mediated Local Command Execution
published 2026-06-29 modified 2026-07-01 aliases CVE-2026-2611, GHSA-67c5-x5mf-rppq affected introduced 3.9.0, fixed 3.10.0 fixed in 3.10.0 summary MLflow: Improper Origin Validation in MLflow Assistant /ajax-api Endpoints Enables Browser-Mediated Local Command Execution
2026-06-29	PYSEC-2026-282	apscheduler		APScheduler's JSONSerializer and CBORSerializer are vulnerable to Remote Code Execution (RCE) via Insecure Deserialization
published 2026-06-29 modified 2026-07-01 aliases CVE-2026-31072, GHSA-9cfw-f3f9-7mm7 affected introduced 4.0.0a1, last_affected 4.0.0a6 summary APScheduler's JSONSerializer and CBORSerializer are vulnerable to Remote Code Execution (RCE) via Insecure Deserialization
2026-06-29	PYSEC-2026-521	redshift-connector	2.1.14	amazon-redshift-python-driver vulnerable to Remote Code Execution via eval() Injection
published 2026-06-29 modified 2026-07-01 aliases CVE-2026-8838, GHSA-29h4-r29x-hchv affected introduced 0, fixed 2.1.14 fixed in 2.1.14 summary amazon-redshift-python-driver vulnerable to Remote Code Execution via eval() Injection
2026-06-29	PYSEC-2026-419	mlflow		mlflow: FastAPI job endpoints under `/ajax-api/3.0/jobs/*` are not protected by authentication or authorization
published 2026-06-29 modified 2026-07-01 aliases CVE-2026-0545, GHSA-7qhf-v65m-g5f3 affected introduced 0, last_affected 3.10.1 summary mlflow: FastAPI job endpoints under `/ajax-api/3.0/jobs/*` are not protected by authentication or authorization
2026-06-29	PYSEC-2026-390	litellm	1.83.0	LiteLLM: Authentication bypass via OIDC userinfo cache key collision
published 2026-06-29 modified 2026-07-01 aliases CVE-2026-35030, GHSA-jjhc-v7c2-5hh6 affected introduced 0, fixed 1.83.0 fixed in 1.83.0 summary LiteLLM: Authentication bypass via OIDC userinfo cache key collision
2026-06-29	PYSEC-2026-391	litellm	1.83.7	LiteLLM has SQL Injection in Proxy API key verification
published 2026-06-29 modified 2026-07-01 aliases CVE-2026-42208, GHSA-r75f-5x8p-qvmc affected introduced 1.81.16, fixed 1.83.7 fixed in 1.83.7 summary LiteLLM has SQL Injection in Proxy API key verification
2026-06-29	PYSEC-2026-287	authlib	1.6.9	Authlib JWS JWK Header Injection: Signature Verification Bypass
published 2026-06-29 modified 2026-07-01 aliases CVE-2026-27962, GHSA-wvwj-cvrp-7pv5 affected introduced 0, fixed 1.6.9 fixed in 1.6.9 summary Authlib JWS JWK Header Injection: Signature Verification Bypass
2026-06-29	PYSEC-2026-423	mlflow	3.8.1	MLflow Command Injection vulnerability
published 2026-06-29 modified 2026-07-01 aliases CVE-2025-15379, GHSA-r23q-823p-vmf7 affected introduced 0, fixed 3.8.1 fixed in 3.8.1 summary MLflow Command Injection vulnerability
2026-06-29	PYSEC-2026-424	mlflow	3.9.0	Mlflow: Command Injection when serving models with enable_mlserver=True
published 2026-06-29 modified 2026-07-01 aliases CVE-2026-0596, GHSA-rvhj-8chj-8v3c affected introduced 0, fixed 3.9.0 fixed in 3.9.0 summary Mlflow: Command Injection when serving models with enable_mlserver=True
2026-06-29	PYSEC-2026-338	fastmcp	3.2.0	FastMCP OpenAPI Provider has an SSRF & Path Traversal Vulnerability
published 2026-06-29 modified 2026-07-01 aliases CVE-2026-32871, GHSA-vv7q-7jx5-f767 affected introduced 0, fixed 3.2.0 fixed in 3.2.0 summary FastMCP OpenAPI Provider has an SSRF & Path Traversal Vulnerability
2026-06-29	PYSEC-2026-425	mlflow	3.9.0rc0	MLFlow path traversal vulnerability
published 2026-06-29 modified 2026-07-01 aliases CVE-2025-15036, GHSA-vhcx-3pq2-4fvc affected introduced 0, fixed 3.9.0rc0 fixed in 3.9.0rc0 summary MLFlow path traversal vulnerability
2026-06-29	PYSEC-2026-416	mlflow	2.9.2	MLflow Server-Side Request Forgery (SSRF)
published 2026-06-29 modified 2026-07-01 aliases CVE-2023-6974, GHSA-59v3-898r-qwhj affected introduced 0, fixed 2.9.2 fixed in 2.9.2 summary MLflow Server-Side Request Forgery (SSRF)
2026-06-29	PYSEC-2026-422	mlflow	2.9.2	MLFlow Path Traversal Vulnerability
published 2026-06-29 modified 2026-07-01 aliases CVE-2023-6975, GHSA-hh8p-p8mp-gqhm affected introduced 0, fixed 2.9.2 fixed in 2.9.2 summary MLFlow Path Traversal Vulnerability
2026-06-29	PYSEC-2026-522	reportlab	3.5.31	ReportLab vulnerable to remote code execution via paraparser
published 2026-06-29 modified 2026-07-01 aliases CVE-2019-19450, GHSA-pj98-2xf6-cff5 affected introduced 0, fixed 3.5.31 fixed in 3.5.31 summary ReportLab vulnerable to remote code execution via paraparser
2026-06-29	PYSEC-2026-372	langchain	0.0.247	Langchain SQL Injection vulnerability
published 2026-06-29 modified 2026-07-01 aliases CVE-2023-32785, GHSA-8h5w-f6q9-wg35 affected introduced 0, fixed 0.0.247 fixed in 0.0.247 summary Langchain SQL Injection vulnerability
2026-06-29	PYSEC-2026-415	mlflow	2.8.0	MLflow authentication requirement bypass can allow a user to arbitrarily create an account
published 2026-06-29 modified 2026-07-01 aliases CVE-2023-6014, GHSA-4qq5-mxxx-m6gg affected introduced 0, fixed 2.8.0 fixed in 2.8.0 summary MLflow authentication requirement bypass can allow a user to arbitrarily create an account
2026-06-29	PYSEC-2026-420	mlflow	2.8.1	MLflow allowed arbitrary files to be PUT onto the server
published 2026-06-29 modified 2026-07-01 aliases CVE-2023-6015, GHSA-f798-qm4r-23r5 affected introduced 0, fixed 2.8.1 fixed in 2.8.1 summary MLflow allowed arbitrary files to be PUT onto the server
2026-06-29	PYSEC-2026-417	mlflow	2.9.2	Remote Code Execution due to Full Controled File Write in mlflow
published 2026-06-29 modified 2026-07-01 aliases CVE-2023-6018, GHSA-5p3h-7fwh-92rc affected introduced 0, fixed 2.9.2 fixed in 2.9.2 summary Remote Code Execution due to Full Controled File Write in mlflow
2026-06-29	PYSEC-2026-389	litellm	1.40.16	litellm vulnerable to remote code execution based on using eval unsafely
published 2026-06-29 modified 2026-07-01 aliases CVE-2024-5751, GHSA-gppg-gqw8-wh9g affected introduced 0, fixed 1.40.16 fixed in 1.40.16 summary litellm vulnerable to remote code execution based on using eval unsafely
2026-06-29	PYSEC-2026-457	pillow	10.2.0	Arbitrary Code Execution in Pillow
published 2026-06-29 modified 2026-07-01 aliases CVE-2023-50447, GHSA-3f63-hfp8-52jq affected introduced 0, fixed 10.2.0 fixed in 10.2.0 summary Arbitrary Code Execution in Pillow
2026-06-29	PYSEC-2026-502	pymysql	1.1.1	PyMySQL SQL Injection vulnerability
published 2026-06-29 modified 2026-07-01 aliases CVE-2024-36039, GHSA-v9hf-5j83-6xpp affected introduced 0, fixed 1.1.1 fixed in 1.1.1 summary PyMySQL SQL Injection vulnerability
2026-06-29	PYSEC-2026-387	litellm	1.34.42	LiteLLM has Server-Side Template Injection vulnerability in /completions endpoint
published 2026-06-29 modified 2026-07-01 aliases CVE-2024-2952, GHSA-46cm-pfwv-cgf8 affected introduced 0, fixed 1.34.42 fixed in 1.34.42 summary LiteLLM has Server-Side Template Injection vulnerability in /completions endpoint
2026-06-29	PYSEC-2026-373	langchain-core	1.2.5	LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs
published 2026-06-29 modified 2026-07-02 aliases CVE-2025-68664, GHSA-c67j-w6g6-q2cm affected introduced 0, fixed 0.3.81, introduced 1.0.0, fixed 1.2.5 fixed in 1.2.5 summary LangChain serialization injection vulnerability enables secret extraction in dumps/loads APIs
2026-06-29	PYSEC-2026-327	deepdiff	8.6.1	DeepDiff Class Pollution in Delta class leading to DoS, Remote Code Execution, and more
published 2026-06-29 modified 2026-07-01 aliases CVE-2025-58367, GHSA-mw26-5g2v-hqw3 affected introduced 5.0.0, fixed 8.6.1 fixed in 8.6.1 summary DeepDiff Class Pollution in Delta class leading to DoS, Remote Code Execution, and more
2026-06-29	PYSEC-2026-361	joserfc	1.4.2	joserfc has Possible Uncontrolled Resource Consumption Vulnerability Triggered by Logging Arbitrarily Large JWT Token Payloads
published 2026-06-29 modified 2026-07-02 aliases CVE-2025-65015, GHSA-frfh-8v73-gjg4 affected introduced 1.3.3, fixed 1.3.5, introduced 1.4.0, fixed 1.4.2 fixed in 1.4.2 summary joserfc has Possible Uncontrolled Resource Consumption Vulnerability Triggered by Logging Arbitrarily Large JWT Token Payloads
2026-06-29	PYSEC-2026-348	h11	0.16.0	h11 accepts some malformed Chunked-Encoding bodies
published 2026-06-29 modified 2026-07-01 aliases CVE-2025-43859, GHSA-vqfr-h8mv-ghfj affected introduced 0, fixed 0.16.0 fixed in 0.16.0 summary h11 accepts some malformed Chunked-Encoding bodies
2026-06-22	PYSEC-2026-2294	ujson	5.13.0	UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+.
published 2026-06-22 modified 2026-07-13 aliases CVE-2026-54911, GHSA-3j69-69wj-xqx2 affected introduced 0, fixed 5.13.0 fixed in 5.13.0 summary UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+.
2026-06-22	PYSEC-2026-2119	authlib	1.6.10	Authlib is a Python library which builds OAuth and OpenID Connect servers.
published 2026-06-22 modified 2026-07-13 aliases CVE-2026-41479, GHSA-w8p2-r796-3vmq affected introduced 0, fixed 1.6.10 fixed in 1.6.10 summary Authlib is a Python library which builds OAuth and OpenID Connect servers.
2026-06-22	PYSEC-2026-2078	nltk	3.10.0	NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing.
published 2026-06-22 modified 2026-07-08 aliases CVE-2026-54293, GHSA-p4gq-832x-fm9v affected introduced 0, fixed 3.10.0 fixed in 3.10.0 summary NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing.
2026-06-22	PYSEC-2026-249	starlette	1.3.1	Starlette is a lightweight ASGI framework/toolkit.
published 2026-06-22 modified 2026-06-27 aliases CVE-2026-54283, GHSA-82w8-qh3p-5jfq affected introduced 0.4.1, fixed 1.3.1 fixed in 1.3.1 summary Starlette is a lightweight ASGI framework/toolkit.
2026-06-22	PYSEC-2026-248	starlette	1.3.0	Starlette is a lightweight ASGI framework/toolkit.
published 2026-06-22 modified 2026-06-27 aliases CVE-2026-54282, GHSA-jp82-jpqv-5vv3 affected introduced 0, fixed 1.3.0 fixed in 1.3.0 summary Starlette is a lightweight ASGI framework/toolkit.
2026-06-22	PYSEC-2026-2113	aiohttp	3.14.1	AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.
published 2026-06-22 modified 2026-07-13 aliases CVE-2026-54280, GHSA-9x8q-7h8h-wcw9 affected introduced 0, fixed 3.14.1 fixed in 3.14.1 summary AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.
2026-06-22	PYSEC-2026-2112	aiohttp	3.14.1	AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.
published 2026-06-22 modified 2026-07-13 aliases CVE-2026-54279, GHSA-2fqr-mr3j-6wp8 affected introduced 0, fixed 3.14.1 fixed in 3.14.1 summary AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.
2026-06-22	PYSEC-2026-2111	aiohttp	3.14.1	AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.
published 2026-06-22 modified 2026-07-13 aliases CVE-2026-54278, GHSA-g3cq-j2xw-wf74 affected introduced 0, fixed 3.14.1 fixed in 3.14.1 summary AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.
2026-06-22	PYSEC-2026-2110	aiohttp	3.14.1	AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.
published 2026-06-22 modified 2026-07-13 aliases CVE-2026-54277, GHSA-63hw-fmq6-xxg2 affected introduced 0, fixed 3.14.1 fixed in 3.14.1 summary AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.
2026-06-22	PYSEC-2026-2109	aiohttp	3.14.1	AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.
published 2026-06-22 modified 2026-07-13 aliases CVE-2026-54276, GHSA-hpj7-wq8m-9hgp affected introduced 0, fixed 3.14.1 fixed in 3.14.1 summary AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.
2026-06-22	PYSEC-2026-237	aiohttp	3.14.1	AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.
published 2026-06-22 modified 2026-06-27 aliases CVE-2026-54275, GHSA-4m7w-qmgq-4wj5 affected introduced 0, fixed 3.14.1 fixed in 3.14.1 summary AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.
2026-06-22	PYSEC-2026-2108	aiohttp	3.14.1	AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.
published 2026-06-22 modified 2026-07-13 aliases CVE-2026-54274, GHSA-xcgm-r5h9-7989 affected introduced 0, fixed 3.14.1 fixed in 3.14.1 summary AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.
2026-06-22	PYSEC-2026-2107	aiohttp	3.14.1	AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.
published 2026-06-22 modified 2026-07-13 aliases CVE-2026-54273, GHSA-4fvr-rgm6-gqmc affected introduced 0, fixed 3.14.1 fixed in 3.14.1 summary AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.
2026-06-22	PYSEC-2026-2106	aiohttp	3.14.0	AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.
published 2026-06-22 modified 2026-07-13 aliases CVE-2026-50269, GHSA-m6qw-4cw2-hm4m affected introduced 0, fixed 3.14.0 fixed in 3.14.0 summary AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.
2026-06-17	PYSEC-2026-2280	starlette	1.1.0	Starlette is a lightweight ASGI framework/toolkit.
published 2026-06-17 modified 2026-07-13 aliases CVE-2026-48817, GHSA-x746-7m8f-x49c affected introduced 0, fixed 1.1.0 fixed in 1.1.0 summary Starlette is a lightweight ASGI framework/toolkit.
2026-06-17	PYSEC-2026-2281	starlette	1.1.0	Starlette is a lightweight ASGI framework/toolkit.
published 2026-06-17 modified 2026-07-13 aliases CVE-2026-48818, GHSA-wqp7-x3pw-xc5r affected introduced 0, fixed 1.1.0 fixed in 1.1.0 summary Starlette is a lightweight ASGI framework/toolkit.
2026-06-10	PYSEC-2026-2191	kafka-python	2.3.2	kafka-python prior to 2.3.2 contains a denial-of-service vulnerability in SCRAM authentication handling that allows a malicious or machine-in-the-middle broker to freeze the client event loop by supp…
published 2026-06-10 modified 2026-07-13 aliases CVE-2026-10143, GHSA-2jcm-hq8r-84wx affected introduced 0, fixed 2.3.2 fixed in 2.3.2 summary kafka-python prior to 2.3.2 contains a denial-of-service vulnerability in SCRAM authentication handling that allows a malicious or machine-in-the-middle broker to freeze the client event loop by supp…
2026-06-10	PYSEC-2026-2190	kafka-python	2.3.2	kafka-python prior to 2.3.2 contains a denial-of-service vulnerability in the protocol parser that allows a malicious broker or machine-in-the-middle attacker to exhaust memory or hang connections by…
published 2026-06-10 modified 2026-07-13 aliases CVE-2026-10142, GHSA-m3px-q5gj-j9x7 affected introduced 0, fixed 2.3.2 fixed in 2.3.2 summary kafka-python prior to 2.3.2 contains a denial-of-service vulnerability in the protocol parser that allows a malicious broker or machine-in-the-middle attacker to exhaust memory or hang connections by…
2026-06-05	PYSEC-2026-215	idna	3.15	Internationalized Domain Names in Applications (IDNA) for Python provides support for Internationalized Domain Names in Applications (IDNA) and Unicode IDNA Compatibility Processing.
published 2026-06-05 modified 2026-06-16 aliases CVE-2026-45409, GHSA-65pc-fj4g-8rjx affected introduced 0, fixed 3.15 fixed in 3.15 summary Internationalized Domain Names in Applications (IDNA) for Python provides support for Internationalized Domain Names in Applications (IDNA) and Unicode IDNA Compatibility Processing.
2026-06-04	PYSEC-2026-212	streamlit	1.53.1	A vulnerability has been found in Streamlit up to 1.53.0.
published 2026-06-04 modified 2026-06-15 aliases CVE-2026-10804, GHSA-vqwp-45wm-r9r5 affected introduced 0, fixed 1.53.1 fixed in 1.53.1 summary A vulnerability has been found in Streamlit up to 1.53.0.
2026-06-04	PYSEC-2026-195	mlflow	3.10.1	A flaw has been found in MLflow up to 3.10.0.
published 2026-06-04 modified 2026-06-05 aliases CVE-2026-10803, GHSA-5qmp-p3c4-72qj affected introduced 0, fixed 3.10.1 fixed in 3.10.1 summary A flaw has been found in MLflow up to 3.10.0.
2026-06-03	PYSEC-2026-201	django	6.0.6	An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6.
published 2026-06-03 modified 2026-06-06 aliases CVE-2026-8404, GHSA-8cjm-8mp7-r2xf affected introduced 5.2, fixed 5.2.15, introduced 6.0, fixed 6.0.6 fixed in 6.0.6 summary An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6.
2026-06-03	PYSEC-2026-200	django	6.0.6	An issue was discovered in Django 6.0 before 6.0.6 and 5.2 before 5.2.15.
published 2026-06-03 modified 2026-06-06 aliases CVE-2026-7666, GHSA-mm6v-q8q9-pgcf affected introduced 5.2, fixed 5.2.15, introduced 6.0, fixed 6.0.6 fixed in 6.0.6 summary An issue was discovered in Django 6.0 before 6.0.6 and 5.2 before 5.2.15.
2026-06-03	PYSEC-2026-199	django	6.0.6	An issue was discovered in Django 6.0 before 6.0.6 and 5.2 before 5.2.15.
published 2026-06-03 modified 2026-06-06 aliases CVE-2026-6873, GHSA-h7pc-vwp9-298g affected introduced 5.2, fixed 5.2.15, introduced 6.0, fixed 6.0.6 fixed in 6.0.6 summary An issue was discovered in Django 6.0 before 6.0.6 and 5.2 before 5.2.15.
2026-06-03	PYSEC-2026-2290	transformers		A vulnerability in the LightGlue model loading path of huggingface/transformers version 5.2.0 allows an attacker-controlled model repository to execute arbitrary code during model initialization.
published 2026-06-03 modified 2026-07-13 aliases CVE-2026-5241, GHSA-fgcw-684q-jj6r affected introduced 0, last_affected 5.2.0 summary A vulnerability in the LightGlue model loading path of huggingface/transformers version 5.2.0 allows an attacker-controlled model repository to execute arbitrary code during model initialization.
2026-06-03	PYSEC-2026-198	django	6.0.6	An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6.
published 2026-06-03 modified 2026-06-06 aliases CVE-2026-48587, GHSA-923m-gv2p-w5qp affected introduced 5.2, fixed 5.2.15, introduced 6.0, fixed 6.0.6 fixed in 6.0.6 summary An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6.
2026-06-03	PYSEC-2026-197	django	6.0.6	An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6.
published 2026-06-03 modified 2026-06-06 aliases CVE-2026-35193, GHSA-qpc8-7fxc-cm4p affected introduced 5.2, fixed 5.2.15, introduced 6.0, fixed 6.0.6 fixed in 6.0.6 summary An issue was discovered in Django 5.2 before 5.2.15 and 6.0 before 6.0.6.
2026-06-03	PYSEC-2026-2222	mlflow	3.11.0	A vulnerability in mlflow/mlflow versions prior to 3.11.0 allows for the resolution of environment variables in AI Gateway secrets, which can be exploited to exfiltrate sensitive server-side environm…
published 2026-06-03 modified 2026-07-13 aliases CVE-2026-4035, GHSA-g35p-px32-whv6 affected introduced 0, fixed 3.11.0 fixed in 3.11.0 summary A vulnerability in mlflow/mlflow versions prior to 3.11.0 allows for the resolution of environment variables in AI Gateway secrets, which can be exploited to exfiltrate sensitive server-side environm…
2026-06-02	PYSEC-2026-2105	aiohttp	3.14.0	AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.
published 2026-06-02 modified 2026-07-13 aliases CVE-2026-47265, GHSA-hg6j-4rv6-33pg affected introduced 0, fixed 3.14.0 fixed in 3.14.0 summary AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.
2026-06-02	PYSEC-2026-2104	aiohttp	3.14.0	AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.
published 2026-06-02 modified 2026-07-13 aliases CVE-2026-34993, GHSA-jg22-mg44-37j8 affected introduced 0, fixed 3.14.0 fixed in 3.14.0 summary AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.
2026-06-01	PYSEC-2026-196	pip	26.1.2	pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved absolute path to the installation directory, leading to entry points being installed out…
published 2026-06-01 modified 2026-06-05 aliases CVE-2026-8643, GHSA-wf93-45jw-7689 affected introduced 0, fixed 26.1.2 fixed in 26.1.2 summary pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved absolute path to the installation directory, leading to entry points being installed out…
2026-05-28	PYSEC-2026-179	pyjwt	2.13.0	PyJWT is a JSON Web Token implementation in Python.
published 2026-05-28 modified 2026-06-02 aliases CVE-2026-48526, GHSA-xgmm-8j9v-c9wx affected introduced 0, fixed 2.13.0 fixed in 2.13.0 summary PyJWT is a JSON Web Token implementation in Python.
2026-05-28	PYSEC-2026-178	pyjwt	2.13.0	PyJWT is a JSON Web Token implementation in Python.
published 2026-05-28 modified 2026-06-02 aliases CVE-2026-48525, GHSA-w7vc-732c-9m39 affected introduced 2.8.0, fixed 2.13.0 fixed in 2.13.0 summary PyJWT is a JSON Web Token implementation in Python.
2026-05-28	PYSEC-2026-177	pyjwt	2.13.0	PyJWT is a JSON Web Token implementation in Python.
published 2026-05-28 modified 2026-06-02 aliases CVE-2026-48524, GHSA-fhv5-28vv-h8m8 affected introduced 0, fixed 2.13.0 fixed in 2.13.0 summary PyJWT is a JSON Web Token implementation in Python.
2026-05-28	PYSEC-2026-176	pyjwt	2.12.1	PyJWT is a JSON Web Token implementation in Python.
published 2026-05-28 modified 2026-06-02 aliases CVE-2026-48523, GHSA-jq35-7prp-9v3f affected introduced 2.9.0, fixed 2.12.1 fixed in 2.12.1 summary PyJWT is a JSON Web Token implementation in Python.
2026-05-28	PYSEC-2026-175	pyjwt	2.13.0	PyJWT is a JSON Web Token implementation in Python.
published 2026-05-28 modified 2026-06-02 aliases CVE-2026-48522, GHSA-993g-76c3-p5m4 affected introduced 0, fixed 2.13.0 fixed in 2.13.0 summary PyJWT is a JSON Web Token implementation in Python.
2026-05-27	PYSEC-2026-2293	ujson	5.12.1	UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+.
published 2026-05-27 modified 2026-07-13 aliases CVE-2026-44660, GHSA-c38f-wx89-p2xg affected introduced 0, fixed 5.12.1 fixed in 5.12.1 summary UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+.
2026-05-27	PYSEC-2026-188	authlib	1.6.12	Authlib is a Python library which builds OAuth and OpenID Connect servers.
published 2026-05-27 modified 2026-06-03 aliases CVE-2026-44681, GHSA-r95x-qfjj-fjj2 affected introduced 0, fixed 1.6.12 fixed in 1.6.12 summary Authlib is a Python library which builds OAuth and OpenID Connect servers.
2026-05-26	PYSEC-2026-2209	mistune	3.2.1	Mistune is a Python Markdown parser with renderers and plugins.
published 2026-05-26 modified 2026-07-13 aliases CVE-2026-44899, GHSA-ccfx-mfmx-2fx9 affected introduced 0, fixed 3.2.1 fixed in 3.2.1 summary Mistune is a Python Markdown parser with renderers and plugins.
2026-05-26	PYSEC-2026-2208	mistune	3.2.1	Mistune is a Python Markdown parser with renderers and plugins.
published 2026-05-26 modified 2026-07-13 aliases CVE-2026-44898, GHSA-6269-cqxg-mhhv affected introduced 0, fixed 3.2.1 fixed in 3.2.1 summary Mistune is a Python Markdown parser with renderers and plugins.
2026-05-26	PYSEC-2026-2207	mistune	3.2.1	Mistune is a Python Markdown parser with renderers and plugins.
published 2026-05-26 modified 2026-07-13 aliases CVE-2026-44897, GHSA-v87v-83h2-53w7 affected introduced 0, fixed 3.2.1 fixed in 3.2.1 summary Mistune is a Python Markdown parser with renderers and plugins.
2026-05-26	PYSEC-2026-168	mistune	3.2.1	Mistune is a Python Markdown parser with renderers and plugins.
published 2026-05-26 modified 2026-05-29 aliases CVE-2026-44896, GHSA-58cw-g322-p94v affected introduced 0, fixed 3.2.1 fixed in 3.2.1 summary Mistune is a Python Markdown parser with renderers and plugins.
2026-05-26	PYSEC-2026-2206	mistune	3.2.1	Mistune is a Python Markdown parser with renderers and plugins.
published 2026-05-26 modified 2026-07-13 aliases CVE-2026-44708, GHSA-8g87-j6q8-g93x affected introduced 0, fixed 3.2.1 fixed in 3.2.1 summary Mistune is a Python Markdown parser with renderers and plugins.
2026-05-25	PYSEC-2026-2220	mlflow	3.11.0rc0	A vulnerability in MLflow versions <=3.10.1.dev0 allows unauthorized access to multipart upload (MPU) endpoints when the `--serve-artifacts` mode is enabled.
published 2026-05-25 modified 2026-07-13 aliases CVE-2026-2651, GHSA-8c7q-86fq-vvmh affected introduced 0, fixed 3.11.0rc0 fixed in 3.11.0rc0 summary A vulnerability in MLflow versions <=3.10.1.dev0 allows unauthorized access to multipart upload (MPU) endpoints when the `--serve-artifacts` mode is enabled.
2026-05-24	PYSEC-2026-2289	transformers	5.3.0	A critical remote code execution vulnerability exists in all versions of the HuggingFace transformers library prior to version 5.3.0.
published 2026-05-24 modified 2026-07-13 aliases CVE-2026-4372, GHSA-29pf-2h5f-8g72 affected introduced 0, fixed 5.3.0 fixed in 5.3.0 summary A critical remote code execution vulnerability exists in all versions of the HuggingFace transformers library prior to version 5.3.0.
2026-05-22	PYSEC-2026-161	starlette	1.0.1	BadHost: Missing Host header validation poisons request.url.path, bypassing path-based security checks
published 2026-05-22 modified 2026-05-22 aliases X41-2026-002, CVE-2026-48710, GHSA-86qp-5c8j-p5mr affected introduced 0, fixed 1.0.1 fixed in 1.0.1 summary BadHost: Missing Host header validation poisons request.url.path, bypassing path-based security checks
2026-05-15	PYSEC-2026-2221	mlflow	3.10.0	A vulnerability in mlflow/mlflow versions 3.9.0 and earlier allows unauthenticated access to certain FastAPI routes when the server is started with authentication enabled (`--app-name basic-auth`) an…
published 2026-05-15 modified 2026-07-13 aliases CVE-2026-2652, GHSA-75cm-x2w3-8mgf affected introduced 0, fixed 3.10.0 fixed in 3.10.0 summary A vulnerability in mlflow/mlflow versions 3.9.0 and earlier allows unauthenticated access to certain FastAPI routes when the server is started with authentication enabled (`--app-name basic-auth`) an…
2026-05-13	PYSEC-2026-160	twisted	26.4.0	Twisted is an event-based framework for internet applications, supporting Python 3.6+.
published 2026-05-13 modified 2026-05-20 aliases CVE-2026-42304, GHSA-grgv-6hw6-v9g4 affected introduced 0, fixed 26.4.0 fixed in 26.4.0 summary Twisted is an event-based framework for internet applications, supporting Python 3.6+.
2026-05-13	PYSEC-2026-142	urllib3	2.7.0	urllib3 is an HTTP client library for Python.
published 2026-05-13 modified 2026-05-20 aliases CVE-2026-44432, GHSA-mf9v-mfxr-j63j affected introduced 2.6.0, fixed 2.7.0 fixed in 2.7.0 summary urllib3 is an HTTP client library for Python.
2026-05-13	PYSEC-2026-141	urllib3	2.7.0	urllib3 is an HTTP client library for Python.
published 2026-05-13 modified 2026-05-20 aliases CVE-2026-44431, GHSA-qccp-gfcp-xxvc affected introduced 1.23, fixed 2.7.0 fixed in 2.7.0 summary urllib3 is an HTTP client library for Python.
2026-05-13	PYSEC-2026-164	jupyterlab	4.5.7	JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture.
published 2026-05-13 modified 2026-05-27 aliases CVE-2026-42266, GHSA-37w4-hwhx-4rc4 affected introduced 4.0.0, fixed 4.5.7 fixed in 4.5.7 summary JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture.
2026-05-11	PYSEC-2026-2219	mlflow	3.9.0	A Server-Side Request Forgery (SSRF) vulnerability exists in MLflow versions prior to 3.9.0.
published 2026-05-11 modified 2026-07-13 aliases CVE-2026-2393, GHSA-65h7-c7c4-mghx affected introduced 0, fixed 3.9.0 fixed in 3.9.0 summary A Server-Side Request Forgery (SSRF) vulnerability exists in MLflow versions prior to 3.9.0.
2026-05-09	PYSEC-2026-2252	pillow	12.2.0	Pillow is a Python imaging library.
published 2026-05-09 modified 2026-07-13 aliases CVE-2026-42311, GHSA-pwv6-vv43-88gr affected introduced 10.3.0, fixed 12.2.0 fixed in 12.2.0 summary Pillow is a Python imaging library.
2026-05-09	PYSEC-2026-2251	pillow	12.2.0	Pillow is a Python imaging library.
published 2026-05-09 modified 2026-07-13 aliases CVE-2026-42309, GHSA-5xmw-vc9v-4wf2 affected introduced 11.2.1, fixed 12.2.0 fixed in 12.2.0 summary Pillow is a Python imaging library.
2026-05-09	PYSEC-2026-165	pillow	12.2.0	Pillow is a Python imaging library.
published 2026-05-09 modified 2026-05-27 aliases CVE-2026-42308, GHSA-wjx4-4jcj-g98j affected introduced 0, fixed 12.2.0 fixed in 12.2.0 summary Pillow is a Python imaging library.
2026-05-07	PYSEC-2026-2163	gitpython	3.1.49	GitPython is a python library used to interact with Git repositories.
published 2026-05-07 modified 2026-07-13 aliases CVE-2026-44244, GHSA-v87r-6q3f-2j67 affected introduced 0, fixed 3.1.49 fixed in 3.1.49 summary GitPython is a python library used to interact with Git repositories.
2026-05-07	PYSEC-2026-2162	gitpython	3.1.48	GitPython is a python library used to interact with Git repositories.
published 2026-05-07 modified 2026-07-13 aliases CVE-2026-44243, GHSA-7545-fcxq-7j24 affected introduced 0, fixed 3.1.48 fixed in 3.1.48 summary GitPython is a python library used to interact with Git repositories.
2026-05-07	PYSEC-2026-2161	gitpython	3.1.47	GitPython is a python library used to interact with Git repositories.
published 2026-05-07 modified 2026-07-13 aliases CVE-2026-42284, GHSA-x2qx-6953-8485 affected introduced 0, fixed 3.1.47 fixed in 3.1.47 summary GitPython is a python library used to interact with Git repositories.
2026-05-07	PYSEC-2026-2160	gitpython	3.1.47	GitPython is a python library used to interact with Git repositories.
published 2026-05-07 modified 2026-07-13 aliases CVE-2026-42215, GHSA-rpm5-65cw-6hj4 affected introduced 3.1.30, fixed 3.1.47 fixed in 3.1.47 summary GitPython is a python library used to interact with Git repositories.
2026-05-05	PYSEC-2026-69	jupyter-server	2.18.0	Jupyter Server is the backend for Jupyter web applications.
published 2026-05-05 modified 2026-05-20 aliases CVE-2026-40934, GHSA-5mrq-x3x5-8v8f affected introduced 0, fixed 2.18.0 fixed in 2.18.0 summary Jupyter Server is the backend for Jupyter web applications.
2026-05-05	PYSEC-2026-2187	jupyter-server	2.18.0	Jupyter Server is the backend for Jupyter web applications.
published 2026-05-05 modified 2026-07-13 aliases CVE-2026-40110, GHSA-24qx-w28j-9m6p affected introduced 0, fixed 2.18.0 fixed in 2.18.0 summary Jupyter Server is the backend for Jupyter web applications.
2026-05-05	PYSEC-2026-68	jupyter-server	2.18.0	Jupyter Server is the backend for Jupyter web applications.
published 2026-05-05 modified 2026-05-20 aliases CVE-2026-35397, GHSA-5789-5fc7-67v3 affected introduced 0, fixed 2.18.0 fixed in 2.18.0 summary Jupyter Server is the backend for Jupyter web applications.
2026-05-05	PYSEC-2026-55	django	6.0.5	An issue was discovered in 6.0 before 6.0.5 and 5.2 before 5.2.14.
published 2026-05-05 modified 2026-05-20 aliases CVE-2026-6907, GHSA-5hrc-gvxj-w55p affected introduced 5.2, fixed 5.2.14, introduced 6.0, fixed 6.0.5 fixed in 6.0.5 summary An issue was discovered in 6.0 before 6.0.5 and 5.2 before 5.2.14.
2026-05-05	PYSEC-2026-54	django	6.0.5	An issue was discovered in 6.0 before 6.0.5 and 5.2 before 5.2.14.
published 2026-05-05 modified 2026-05-20 aliases CVE-2026-5766, GHSA-w26r-rmm8-9c29 affected introduced 5.2, fixed 5.2.14, introduced 6.0, fixed 6.0.5 fixed in 6.0.5 summary An issue was discovered in 6.0 before 6.0.5 and 5.2 before 5.2.14.
2026-05-05	PYSEC-2026-50	django	6.0.5	An issue was discovered in 6.0 before 6.0.5 and 5.2 before 5.2.14.
published 2026-05-05 modified 2026-05-20 aliases CVE-2026-35192, GHSA-7h2m-m8vj-598h affected introduced 5.2, fixed 5.2.14, introduced 6.0, fixed 6.0.5 fixed in 6.0.5 summary An issue was discovered in 6.0 before 6.0.5 and 5.2 before 5.2.14.
2026-05-05	PYSEC-2026-67	jupyter-server	2.18.0	Jupyter Server is the backend for Jupyter web applications.
published 2026-05-05 modified 2026-05-20 aliases CVE-2025-61669, GHSA-qh7q-6qm3-653w affected introduced 0, fixed 2.18.0 fixed in 2.18.0 summary Jupyter Server is the backend for Jupyter web applications.
2026-04-30	PYSEC-2026-2132 withdrawn	click	8.3.3	Pallets Click, versions 8.3.2 and below, contain a command injection vulnerability in the click.edit() function, allowing attackers to pass arbitrary OS commands from an unprivileged account.
published 2026-04-30 modified 2026-10-07 withdrawn 2026-10-07 aliases CVE-2026-7246, GHSA-47fr-3ffg-hgmw affected introduced 0, fixed 8.3.3 fixed in 8.3.3 summary Pallets Click, versions 8.3.2 and below, contain a command injection vulnerability in the click.edit() function, allowing attackers to pass arbitrary OS commands from an unprivileged account.
2026-04-24	PYSEC-2026-76	langchain-openai	1.1.14	LangChain is a framework for building agents and LLM-powered applications.
published 2026-04-24 modified 2026-05-20 aliases CVE-2026-41488, GHSA-r7w7-9xr2-qq2r affected introduced 0, fixed 1.1.14 fixed in 1.1.14 summary LangChain is a framework for building agents and LLM-powered applications.
2026-04-24	PYSEC-2026-77	langchain-text-splitters	1.1.2	LangChain is a framework for building agents and LLM-powered applications.
published 2026-04-24 modified 2026-05-20 aliases CVE-2026-41481, GHSA-fv5p-p927-qmxr affected introduced 0, fixed 1.1.2 fixed in 1.1.2 summary LangChain is a framework for building agents and LLM-powered applications.
2026-04-24	PYSEC-2026-25	authlib	1.6.11	Authlib is a Python library which builds OAuth and OpenID Connect servers.
published 2026-04-24 modified 2026-05-20 aliases CVE-2026-41425, GHSA-jj8c-mmj3-mmgv affected introduced 0, fixed 1.6.11 fixed in 1.6.11 summary Authlib is a Python library which builds OAuth and OpenID Connect servers.
2026-04-24	PYSEC-2026-87	lxml	6.1.0	lxml is a library for processing XML and HTML in the Python language.
published 2026-04-24 modified 2026-05-20 aliases CVE-2026-41066, GHSA-vfmq-68hx-4jfw affected introduced 0, fixed 6.1.0 fixed in 6.1.0 summary lxml is a library for processing XML and HTML in the Python language.
2026-04-23	PYSEC-2026-88	mako	1.3.11	Mako is a template library written in Python.
published 2026-04-23 modified 2026-05-20 aliases CVE-2026-41205, GHSA-v92g-xgxw-vvmm affected introduced 0, fixed 1.3.11 fixed in 1.3.11 summary Mako is a template library written in Python.
2026-04-21	PYSEC-2026-2230	nbconvert	7.17.1	The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates.
published 2026-04-21 modified 2026-07-13 aliases CVE-2026-39378, GHSA-7jqv-fw35-gmx9 affected introduced 6.5.0, fixed 7.17.1 fixed in 7.17.1 summary The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates.
2026-04-21	PYSEC-2026-2229	nbconvert	7.17.1	The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates.
published 2026-04-21 modified 2026-07-13 aliases CVE-2026-39377, GHSA-4c99-qj7h-p3vg affected introduced 6.5.0, fixed 7.17.1 fixed in 7.17.1 summary The nbconvert tool, jupyter nbconvert, converts Jupyter notebooks to various other formats via Jinja templates.
2026-04-20	PYSEC-2026-2270	python-dotenv	1.2.2	python-dotenv reads key-value pairs from a .env file and can set them as environment variables.
published 2026-04-20 modified 2026-07-13 aliases CVE-2026-28684, GHSA-mf9w-mj56-hr94 affected introduced 0, fixed 1.2.2 fixed in 1.2.2 summary python-dotenv reads key-value pairs from a .env file and can set them as environment variables.
2026-04-15	PYSEC-2026-2250	pillow	12.2.0	Pillow is a Python imaging library.
published 2026-04-15 modified 2026-07-13 aliases CVE-2026-40192, GHSA-whj4-6x5x-4v2j affected introduced 10.3.0, fixed 12.2.0 fixed in 12.2.0 summary Pillow is a Python imaging library.
2026-04-08	PYSEC-2026-36	cryptography	46.0.7	cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.
published 2026-04-08 modified 2026-05-20 aliases CVE-2026-39892, GHSA-p423-j2cm-9vmq affected introduced 45.0.0, fixed 46.0.7 fixed in 46.0.7 summary cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.
2026-04-07	PYSEC-2026-70	jwcrypto	1.5.7	JWCrypto implements JWK, JWS, and JWE specifications using python-cryptography.
published 2026-04-07 modified 2026-05-21 aliases CVE-2026-39373, GHSA-fjrm-76x2-c4q4 affected introduced 0, fixed 1.5.7 fixed in 1.5.7 summary JWCrypto implements JWK, JWS, and JWE specifications using python-cryptography.
2026-04-07	PYSEC-2026-53	django	6.0.4	An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30.
published 2026-04-07 modified 2026-05-20 aliases CVE-2026-4292, GHSA-mmwr-2jhp-mc7j affected introduced 4.2, fixed 4.2.30, introduced 5.2, fixed 5.2.13, introduced 6.0, fixed 6.0.4 fixed in 6.0.4 summary An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30.
2026-04-07	PYSEC-2026-52	django	6.0.4	An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30.
published 2026-04-07 modified 2026-05-20 aliases CVE-2026-4277, GHSA-pwjp-ccjc-ghwg affected introduced 4.2, fixed 4.2.30, introduced 5.2, fixed 5.2.13, introduced 6.0, fixed 6.0.4 fixed in 6.0.4 summary An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30.
2026-04-07	PYSEC-2026-51	django	6.0.4	An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30.
published 2026-04-07 modified 2026-05-20 aliases CVE-2026-3902, GHSA-mvfq-ggxm-9mc5 affected introduced 4.2, fixed 4.2.30, introduced 5.2, fixed 5.2.13, introduced 6.0, fixed 6.0.4 fixed in 6.0.4 summary An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30.
2026-04-07	PYSEC-2026-49	django	6.0.4	An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30.
published 2026-04-07 modified 2026-05-20 aliases CVE-2026-33034, GHSA-933h-hp56-hf7m affected introduced 4.2, fixed 4.2.30, introduced 5.2, fixed 5.2.13, introduced 6.0, fixed 6.0.4 fixed in 6.0.4 summary An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30.
2026-04-07	PYSEC-2026-48	django	6.0.4	An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30.
published 2026-04-07 modified 2026-05-20 aliases CVE-2026-33033, GHSA-5mf9-h53q-7mhq affected introduced 4.2, fixed 4.2.30, introduced 5.2, fixed 5.2.13, introduced 6.0, fixed 6.0.4 fixed in 6.0.4 summary An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30.
2026-04-07	PYSEC-2026-94	mlflow	3.11.0rc0	MLflow is vulnerable to an authorization bypass affecting the AJAX endpoint used to download saved model artifacts.
published 2026-04-07 modified 2026-05-20 aliases CVE-2026-33866, GHSA-46r5-x6jq-v8g6 affected introduced 0, fixed 3.11.0rc0 fixed in 3.11.0rc0 summary MLflow is vulnerable to an authorization bypass affecting the AJAX endpoint used to download saved model artifacts.
2026-04-07	PYSEC-2026-93	mlflow	3.11.0rc0	MLflow is vulnerable to Stored Cross-Site Scripting (XSS) caused by unsafe parsing of YAML-based MLmodel artifacts in its web interface.
published 2026-04-07 modified 2026-05-20 aliases CVE-2026-33865, GHSA-fh64-r2vc-xvhr affected introduced 0, fixed 3.11.0rc0 fixed in 3.11.0rc0 summary MLflow is vulnerable to Stored Cross-Site Scripting (XSS) caused by unsafe parsing of YAML-based MLmodel artifacts in its web interface.
2026-04-07	PYSEC-2026-2288	transformers	5.0.0	A vulnerability in the HuggingFace Transformers library, specifically in the `Trainer` class, allows for arbitrary code execution.
published 2026-04-07 modified 2026-07-13 aliases CVE-2026-1839, GHSA-69w3-r845-3855 affected introduced 0, fixed 5.0.0 fixed in 5.0.0 summary A vulnerability in the HuggingFace Transformers library, specifically in the `Trainer` class, allows for arbitrary code execution.
2026-04-03	PYSEC-2026-2287	tornado	6.5.5	In Tornado before 6.5.5, cookie attribute injection could occur because the domain, path, and samesite arguments to .RequestHandler.set_cookie were not checked for crafted characters.
published 2026-04-03 modified 2026-07-13 aliases CVE-2026-35536, GHSA-78cv-mqj4-43f7, GHSA-fqwm-6jpj-5wxc affected introduced 0, fixed 6.5.5 fixed in 6.5.5 summary In Tornado before 6.5.5, cookie attribute injection could occur because the domain, path, and samesite arguments to .RequestHandler.set_cookie were not checked for crafted characters.
2026-04-02	PYSEC-2026-2260	poetry	2.3.3	Poetry is a dependency manager for Python.
published 2026-04-02 modified 2026-07-13 aliases CVE-2026-34591, GHSA-2599-h6xx-hpxp affected introduced 1.4.0, fixed 2.3.3 fixed in 2.3.3 summary Poetry is a dependency manager for Python.
2026-04-01	PYSEC-2026-2103	aiohttp	3.13.4	AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.
published 2026-04-01 modified 2026-07-13 aliases CVE-2026-34525, GHSA-c427-h43c-vf67 affected introduced 0, fixed 3.13.4 fixed in 3.13.4 summary AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.
2026-04-01	PYSEC-2026-2102	aiohttp	3.13.4	AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.
published 2026-04-01 modified 2026-07-13 aliases CVE-2026-34520, GHSA-63hf-3vf5-4wqf affected introduced 0, fixed 3.13.4 fixed in 3.13.4 summary AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.
2026-04-01	PYSEC-2026-2101	aiohttp	3.13.4	AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.
published 2026-04-01 modified 2026-07-13 aliases CVE-2026-34519, GHSA-mwh4-6h8g-pg8w affected introduced 0, fixed 3.13.4 fixed in 3.13.4 summary AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.
2026-04-01	PYSEC-2026-2100	aiohttp	3.13.4	AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.
published 2026-04-01 modified 2026-07-13 aliases CVE-2026-34518, GHSA-966j-vmvw-g2g9 affected introduced 0, fixed 3.13.4 fixed in 3.13.4 summary AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.
2026-04-01	PYSEC-2026-2099	aiohttp	3.13.4	AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.
published 2026-04-01 modified 2026-07-13 aliases CVE-2026-34517, GHSA-3wq7-rqq7-wx6j affected introduced 0, fixed 3.13.4 fixed in 3.13.4 summary AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.
2026-04-01	PYSEC-2026-2098	aiohttp	3.13.4	AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.
published 2026-04-01 modified 2026-07-13 aliases CVE-2026-34516, GHSA-m5qp-6w8w-w647 affected introduced 0, fixed 3.13.4 fixed in 3.13.4 summary AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.
2026-04-01	PYSEC-2026-2097	aiohttp	3.13.4	AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.
published 2026-04-01 modified 2026-07-13 aliases CVE-2026-34515, GHSA-p998-jp59-783m affected introduced 0, fixed 3.13.4 fixed in 3.13.4 summary AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.
2026-04-01	PYSEC-2026-2096	aiohttp	3.13.4	AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.
published 2026-04-01 modified 2026-07-13 aliases CVE-2026-34514, GHSA-2vrm-gr82-f7m5 affected introduced 0, fixed 3.13.4 fixed in 3.13.4 summary AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.
2026-04-01	PYSEC-2026-2095	aiohttp	3.13.4	AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.
published 2026-04-01 modified 2026-07-13 aliases CVE-2026-34513, GHSA-hcc4-c3v8-rx92 affected introduced 0, fixed 3.13.4 fixed in 3.13.4 summary AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.
2026-04-01	PYSEC-2026-2094	aiohttp	3.13.4	AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.
published 2026-04-01 modified 2026-07-13 aliases CVE-2026-22815, GHSA-w2fm-2cpv-w7v5 affected introduced 0, fixed 3.13.4 fixed in 3.13.4 summary AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python.
2026-03-31	PYSEC-2026-2115	anthropic	0.87.0	The Claude SDK for Python provides access to the Claude API from Python applications.
published 2026-03-31 modified 2026-07-13 aliases CVE-2026-34452, GHSA-w828-4qhx-vxx3 affected introduced 0.86.0, fixed 0.87.0 fixed in 0.87.0 summary The Claude SDK for Python provides access to the Claude API from Python applications.
2026-03-31	PYSEC-2026-2114	anthropic	0.87.0	The Claude SDK for Python provides access to the Claude API from Python applications.
published 2026-03-31 modified 2026-07-13 aliases CVE-2026-34450, GHSA-q5f5-3gjm-7mfm affected introduced 0.86.0, fixed 0.87.0 fixed in 0.87.0 summary The Claude SDK for Python provides access to the Claude API from Python applications.
2026-03-31	PYSEC-2026-35	cryptography	46.0.6	cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.
published 2026-03-31 modified 2026-05-20 aliases CVE-2026-34073, GHSA-m959-cc7f-wv43 affected introduced 0, fixed 46.0.6 fixed in 46.0.6 summary cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.
2026-03-31	PYSEC-2026-2193	langchain-core	1.2.22	LangChain is a framework for building agents and LLM-powered applications.
published 2026-03-31 modified 2026-07-13 aliases CVE-2026-34070, GHSA-qh6h-p6c9-ff54 affected introduced 0, fixed 1.2.22 fixed in 1.2.22 summary LangChain is a framework for building agents and LLM-powered applications.
2026-03-26	PYSEC-2026-2285	streamlit	1.54.0	Streamlit is a data oriented application development framework for python.
published 2026-03-26 modified 2026-07-13 aliases CVE-2026-33682, GHSA-7p48-42j8-8846 affected introduced 0, fixed 1.54.0 fixed in 1.54.0 summary Streamlit is a data oriented application development framework for python.
2026-03-25	PYSEC-2026-2275	requests	2.33.0	Requests is a HTTP library.
published 2026-03-25 modified 2026-07-13 aliases CVE-2026-25645, GHSA-gc5v-m9x4-r6x2 affected introduced 0, fixed 2.33.0 fixed in 2.33.0 summary Requests is a HTTP library.
2026-03-23	PYSEC-2026-2123	cbor2	5.9.0	cbor2 provides encoding and decoding for the Concise Binary Object Representation (CBOR) serialization format.
published 2026-03-23 modified 2026-07-13 aliases CVE-2026-26209, GHSA-3c37-wwvx-h642 affected introduced 0, fixed 5.9.0 fixed in 5.9.0 summary cbor2 provides encoding and decoding for the Concise Binary Object Representation (CBOR) serialization format.
2026-03-22	PYSEC-2026-139	torch		A vulnerability was identified in PyTorch 2.10.0.
published 2026-03-22 modified 2026-05-21 aliases CVE-2026-4538 affected introduced 0, last_affected 2.10.0 summary A vulnerability was identified in PyTorch 2.10.0.
2026-03-20	PYSEC-2026-2237	nltk	3.9.4	NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing.
published 2026-03-20 modified 2026-07-13 aliases CVE-2026-33236, GHSA-469j-vmhf-r6v7 affected introduced 0, fixed 3.9.4 fixed in 3.9.4 summary NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing.
2026-03-20	PYSEC-2026-2236	nltk	3.9.4	NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing.
published 2026-03-20 modified 2026-07-13 aliases CVE-2026-33231, GHSA-jm6w-m3j8-898g affected introduced 0, fixed 3.9.4 fixed in 3.9.4 summary NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing.
2026-03-20	PYSEC-2026-2235	nltk	3.9.4	NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing.
published 2026-03-20 modified 2026-07-13 aliases CVE-2026-33230, GHSA-gfwx-w7gr-fvh7 affected introduced 0, fixed 3.9.4 fixed in 3.9.4 summary NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing.
2026-03-20	PYSEC-2026-2292	ujson	5.12.0	UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+.
published 2026-03-20 modified 2026-07-13 aliases CVE-2026-32875, GHSA-c8rr-9gxc-jprv affected introduced 5.1.0, fixed 5.12.0 fixed in 5.12.0 summary UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+.
2026-03-20	PYSEC-2026-2291	ujson	5.12.0	UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+.
published 2026-03-20 modified 2026-07-13 aliases CVE-2026-32874, GHSA-wgvc-ghv9-3pmm affected introduced 5.4.0, fixed 5.12.0 fixed in 5.12.0 summary UltraJSON is a fast JSON encoder and decoder written in pure C with bindings for Python 3.7+.
2026-03-18	PYSEC-2026-2263	pyasn1	0.6.3	pyasn1 is a generic ASN.1 library for Python.
published 2026-03-18 modified 2026-07-13 aliases CVE-2026-30922, GHSA-jr27-m4p2-rc6r affected introduced 0, fixed 0.6.3 fixed in 0.6.3 summary pyasn1 is a generic ASN.1 library for Python.
2026-03-18	PYSEC-2026-2269	pyopenssl	26.0.0	pyOpenSSL is a Python wrapper around the OpenSSL library.
published 2026-03-18 modified 2026-07-13 aliases CVE-2026-27459, GHSA-5pwr-322w-8jr4 affected introduced 22.0.0, fixed 26.0.0 fixed in 26.0.0 summary pyOpenSSL is a Python wrapper around the OpenSSL library.
2026-03-18	PYSEC-2026-2268	pyopenssl	26.0.0	pyOpenSSL is a Python wrapper around the OpenSSL library.
published 2026-03-18 modified 2026-07-13 aliases CVE-2026-27448, GHSA-vp96-hxj8-p424 affected introduced 0.14, fixed 26.0.0 fixed in 26.0.0 summary pyOpenSSL is a Python wrapper around the OpenSSL library.
2026-03-16	PYSEC-2026-2117	authlib	1.6.9	Authlib is a Python library which builds OAuth and OpenID Connect servers.
published 2026-03-16 modified 2026-07-13 aliases CVE-2026-28498, GHSA-m344-f55w-2m6j affected introduced 0, fixed 1.6.9 fixed in 1.6.9 summary Authlib is a Python library which builds OAuth and OpenID Connect servers.
2026-03-16	PYSEC-2026-2116	authlib	1.6.9	Authlib is a Python library which builds OAuth and OpenID Connect servers.
published 2026-03-16 modified 2026-07-13 aliases CVE-2026-28490, GHSA-7432-952r-cw78 affected introduced 0, fixed 1.6.9 fixed in 1.6.9 summary Authlib is a Python library which builds OAuth and OpenID Connect servers.
2026-03-13	PYSEC-2026-120	pyjwt	2.12.0	PyJWT is a JSON Web Token implementation in Python.
published 2026-03-13 modified 2026-05-20 aliases CVE-2026-32597, GHSA-752w-5fwx-jx9f affected introduced 0, fixed 2.12.0 fixed in 2.12.0 summary PyJWT is a JSON Web Token implementation in Python.
2026-03-12	PYSEC-2026-2121	black	26.3.1	Black is the uncompromising Python code formatter.
published 2026-03-12 modified 2026-07-13 aliases CVE-2026-32274, GHSA-3936-cmfr-pm3m affected introduced 0, fixed 26.3.1 fixed in 26.3.1 summary Black is the uncompromising Python code formatter.
2026-03-11	PYSEC-2026-140	tornado	6.5.5	Tornado is a Python web framework and asynchronous networking library.
published 2026-03-11 modified 2026-05-20 aliases CVE-2026-31958, GHSA-qjxf-f2mg-c6mc affected introduced 0, fixed 6.5.5 fixed in 6.5.5 summary Tornado is a Python web framework and asynchronous networking library.
2026-03-11	PYSEC-2026-2120	black	26.3.0	Black is the uncompromising Python code formatter.
published 2026-03-11 modified 2026-07-13 aliases CVE-2026-31900, GHSA-v53h-f6m7-xcgm affected introduced 0, fixed 26.3.0 fixed in 26.3.0 summary Black is the uncompromising Python code formatter.
2026-03-09	PYSEC-2026-97	nltk		A vulnerability in the `filestring()` function of the `nltk.util` module in nltk version 3.9.2 allows arbitrary file read due to improper validation of input paths.
published 2026-03-09 modified 2026-05-21 aliases CVE-2026-0846, GHSA-h8wq-7xc4-p3qx affected introduced 0, last_affected 3.9.2 summary A vulnerability in the `filestring()` function of the `nltk.util` module in nltk version 3.9.2 allows arbitrary file read due to improper validation of input paths.
2026-03-06	PYSEC-2026-2118	authlib	1.6.7	Authlib is a Python library which builds OAuth and OpenID Connect servers.
published 2026-03-06 modified 2026-07-13 aliases CVE-2026-28802, GHSA-7wc2-qxgw-g8gg affected introduced 1.6.5, fixed 1.6.7 fixed in 1.6.7 summary Authlib is a Python library which builds OAuth and OpenID Connect servers.
2026-03-05	PYSEC-2026-99	nltk	3.9.3	NLTK versions <=3.9.2 are vulnerable to arbitrary code execution due to improper input validation in the StanfordSegmenter module.
published 2026-03-05 modified 2026-05-20 aliases CVE-2026-0848 affected introduced 0, fixed 3.9.3 fixed in 3.9.3 summary NLTK versions <=3.9.2 are vulnerable to arbitrary code execution due to improper input validation in the StanfordSegmenter module.
2026-03-05	PYSEC-2026-2202	lxml-html-clean	0.4.4	lxml_html_clean is a project for HTML cleaning functionalities copied from `lxml.html.clean`.
published 2026-03-05 modified 2026-07-13 aliases CVE-2026-28350, GHSA-xvp8-3mhv-424c affected introduced 0, fixed 0.4.4 fixed in 0.4.4 summary lxml_html_clean is a project for HTML cleaning functionalities copied from `lxml.html.clean`.
2026-03-05	PYSEC-2026-2201	lxml-html-clean	0.4.4	lxml_html_clean is a project for HTML cleaning functionalities copied from `lxml.html.clean`.
published 2026-03-05 modified 2026-07-13 aliases CVE-2026-28348, GHSA-hw26-mmpg-fqfg affected introduced 0, fixed 0.4.4 fixed in 0.4.4 summary lxml_html_clean is a project for HTML cleaning functionalities copied from `lxml.html.clean`.
2026-03-05	PYSEC-2026-83	langgraph	1.0.10rc1	LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both sync and async, via aiosqlite).
published 2026-03-05 modified 2026-05-20 aliases CVE-2026-28277, GHSA-g48c-2wqr-h844 affected introduced 0, fixed 1.0.10rc1 fixed in 1.0.10rc1 summary LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both sync and async, via aiosqlite).
2026-03-05	PYSEC-2026-89	markdown		Python-Markdown version 3.8 contain a vulnerability where malformed HTML-like sequences can cause html.parser.HTMLParser to raise an unhandled AssertionError during Markdown parsing.
published 2026-03-05 modified 2026-05-21 aliases CVE-2025-69534, GHSA-5wmx-573v-2qwq affected introduced 0, last_affected 3.8 summary Python-Markdown version 3.8 contain a vulnerability where malformed HTML-like sequences can cause html.parser.HTMLParser to raise an unhandled AssertionError during Markdown parsing.
2026-03-04	PYSEC-2026-98	nltk	3.9.3	A vulnerability in NLTK versions up to and including 3.9.2 allows arbitrary file read via path traversal in multiple CorpusReader classes, including WordListCorpusReader, TaggedCorpusReader, and Brac…
published 2026-03-04 modified 2026-05-20 aliases CVE-2026-0847, GHSA-68j8-pq59-fqgm affected introduced 0, fixed 3.9.3 fixed in 3.9.3 summary A vulnerability in NLTK versions up to and including 3.9.2 allows arbitrary file read via path traversal in multiple CorpusReader classes, including WordListCorpusReader, TaggedCorpusReader, and Brac…
2026-02-27	PYSEC-2026-2258	pillow-heif	1.3.0	pillow_heif is a Python library for working with HEIF images and plugin for Pillow.
published 2026-02-27 modified 2026-07-13 aliases CVE-2026-28231, GHSA-5gjj-6r7v-ph3x affected introduced 0, fixed 1.3.0 fixed in 1.3.0 summary pillow_heif is a Python library for working with HEIF images and plugin for Pillow.
2026-02-27	PYSEC-2026-2295	uv	0.9.6	A flaw was found in uv.
published 2026-02-27 modified 2026-07-13 aliases CVE-2025-13327, GHSA-pqhf-p39g-3x64 affected introduced 0, fixed 0.9.6 fixed in 0.9.6 summary A flaw was found in uv.
2026-02-21	PYSEC-2026-2151	flask	3.1.3	Flask is a web server gateway interface (WSGI) web application framework.
published 2026-02-21 modified 2026-07-13 aliases CVE-2026-27205, GHSA-68rp-wp8r-4726 affected introduced 0, fixed 3.1.3 fixed in 3.1.3 summary Flask is a web server gateway interface (WSGI) web application framework.
2026-02-21	PYSEC-2026-2320	werkzeug	3.1.6	Werkzeug is a comprehensive WSGI web application library.
published 2026-02-21 modified 2026-07-13 aliases CVE-2026-27199, GHSA-29vq-49wr-vm6x affected introduced 0, fixed 3.1.6 fixed in 3.1.6 summary Werkzeug is a comprehensive WSGI web application library.
2026-02-18	PYSEC-2026-96	nltk	3.9.3	A critical vulnerability exists in the NLTK downloader component of nltk/nltk, affecting all versions.
published 2026-02-18 modified 2026-05-20 aliases CVE-2025-14009, GHSA-7p94-766c-hgjp affected introduced 0, fixed 3.9.3 fixed in 3.9.3 summary A critical vulnerability exists in the NLTK downloader component of nltk/nltk, affecting all versions.
2026-02-17	PYSEC-2026-113	pyarrow	23.0.1	Use After Free vulnerability in Apache Arrow C++.
published 2026-02-17 modified 2026-05-20 aliases CVE-2026-25087, GHSA-rgxp-2hwp-jwgg affected introduced 15.0.0, fixed 23.0.1 fixed in 23.0.1 summary Use After Free vulnerability in Apache Arrow C++.
2026-02-11	PYSEC-2026-2249	pillow	12.1.1	Pillow is a Python imaging library.
published 2026-02-11 modified 2026-07-13 aliases CVE-2026-25990, GHSA-cfh3-3jmp-rvhc affected introduced 10.3.0, fixed 12.1.1 fixed in 12.1.1 summary Pillow is a Python imaging library.
2026-02-10	PYSEC-2026-2141	cryptography	46.0.5	cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.
published 2026-02-10 modified 2026-07-13 aliases CVE-2026-26007, GHSA-r6ph-v2qm-q3c2 affected introduced 0, fixed 46.0.5 fixed in 46.0.5 summary cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.
2026-02-03	PYSEC-2026-47	django	6.0.2	An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28.
published 2026-02-03 modified 2026-05-20 aliases CVE-2026-1312, GHSA-6426-9fv3-65x8 affected introduced 4.2, fixed 4.2.28, introduced 5.2, fixed 5.2.11, introduced 6.0, fixed 6.0.2 fixed in 6.0.2 summary An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28.
2026-02-03	PYSEC-2026-46	django	6.0.2	An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28.
published 2026-02-03 modified 2026-05-20 aliases CVE-2026-1287, GHSA-gvg8-93h5-g6qq affected introduced 4.2, fixed 4.2.28, introduced 5.2, fixed 5.2.11, introduced 6.0, fixed 6.0.2 fixed in 6.0.2 summary An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28.
2026-02-03	PYSEC-2026-45	django	6.0.2	An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28.
published 2026-02-03 modified 2026-05-20 aliases CVE-2026-1285, GHSA-4rrr-2h4v-f3j9 affected introduced 4.2, fixed 4.2.28, introduced 5.2, fixed 5.2.11, introduced 6.0, fixed 6.0.2 fixed in 6.0.2 summary An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28.
2026-02-03	PYSEC-2026-44	django	6.0.2	An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28.
published 2026-02-03 modified 2026-05-20 aliases CVE-2026-1207, GHSA-mwm9-4648-f68q affected introduced 4.2, fixed 4.2.28, introduced 5.2, fixed 5.2.11, introduced 6.0, fixed 6.0.2 fixed in 6.0.2 summary An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28.
2026-02-03	PYSEC-2026-43	django	6.0.2	An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28.
published 2026-02-03 modified 2026-05-20 aliases CVE-2025-14550, GHSA-33mw-q7rj-mjwj affected introduced 4.2, fixed 4.2.28, introduced 5.2, fixed 5.2.11, introduced 6.0, fixed 6.0.2 fixed in 6.0.2 summary An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28.
2026-02-03	PYSEC-2026-42	django	6.0.2	An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28.
published 2026-02-03 modified 2026-05-20 aliases CVE-2025-13473, GHSA-2mcm-79hx-8fxw affected introduced 4.2, fixed 4.2.28, introduced 5.2, fixed 5.2.11, introduced 6.0, fixed 6.0.2 fixed in 6.0.2 summary An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28.
2026-01-30	PYSEC-2026-62	geopandas	1.1.2	SQL injection vulnerability in geopandas before v.1.1.2 allows an attacker to obtain sensitive information via the to_postgis()` function being used to write GeoDataFrames to a PostgreSQL database.
published 2026-01-30 modified 2026-05-20 aliases CVE-2025-69662, GHSA-6497-prx7-gpmq affected introduced 0, fixed 1.1.2 fixed in 1.1.2 summary SQL injection vulnerability in geopandas before v.1.1.2 allows an attacker to obtain sensitive information via the to_postgis()` function being used to write GeoDataFrames to a PostgreSQL database.
2026-01-27	PYSEC-2026-2286	torch	2.10.0	PyTorch is a Python package that provides tensor computation.
published 2026-01-27 modified 2026-07-13 aliases CVE-2026-24747, GHSA-63cw-57p8-fm3p affected introduced 0, fixed 2.10.0 fixed in 2.10.0 summary PyTorch is a Python package that provides tensor computation.
2026-01-22	PYSEC-2026-107	orjson	3.11.5	The orjson.dumps function in orjson thru 3.11.4 does not limit recursion for deeply nested JSON documents.
published 2026-01-22 modified 2026-05-21 aliases CVE-2025-67221, GHSA-hx9q-6w63-j58v affected introduced 0, fixed 3.11.5 fixed in 3.11.5 summary The orjson.dumps function in orjson thru 3.11.4 does not limit recursion for deeply nested JSON documents.
2025-12-31	PYSEC-2025-90	cbor2	5.8.0	cbor2 provides encoding and decoding for the Concise Binary Object Representation (CBOR) serialization format.
published 2025-12-31 modified 2026-05-20 aliases CVE-2025-68131, GHSA-wcj4-jw5j-44wh affected introduced 3.0.0, fixed 5.8.0 fixed in 5.8.0 summary cbor2 provides encoding and decoding for the Concise Binary Object Representation (CBOR) serialization format.
2025-12-23	PYSEC-2025-218	transformers		Hugging Face Transformers GLM4 Deserialization of Untrusted Data Remote Code Execution Vulnerability.
published 2025-12-23 modified 2026-05-21 aliases CVE-2025-14930 affected introduced 0, last_affected 4.57.1 summary Hugging Face Transformers GLM4 Deserialization of Untrusted Data Remote Code Execution Vulnerability.
2025-12-23	PYSEC-2025-217	transformers		Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution Vulnerability.
published 2025-12-23 modified 2026-05-21 aliases CVE-2025-14929 affected introduced 0, last_affected 5.0.0-rc0 summary Hugging Face Transformers X-CLIP Checkpoint Conversion Deserialization of Untrusted Data Remote Code Execution Vulnerability.
2025-12-23	PYSEC-2025-216	transformers		Hugging Face Transformers HuBERT convert_config Code Injection Remote Code Execution Vulnerability.
published 2025-12-23 modified 2026-05-21 aliases CVE-2025-14928 affected introduced 0, last_affected 4.57.0 summary Hugging Face Transformers HuBERT convert_config Code Injection Remote Code Execution Vulnerability.
2025-12-23	PYSEC-2025-215	transformers		Hugging Face Transformers SEW-D convert_config Code Injection Remote Code Execution Vulnerability.
published 2025-12-23 modified 2026-05-21 aliases CVE-2025-14927 affected introduced 0, last_affected 4.57.0 summary Hugging Face Transformers SEW-D convert_config Code Injection Remote Code Execution Vulnerability.
2025-12-23	PYSEC-2025-214	transformers		Hugging Face Transformers SEW convert_config Code Injection Remote Code Execution Vulnerability.
published 2025-12-23 modified 2026-05-21 aliases CVE-2025-14926 affected introduced 0, last_affected 4.57.0 summary Hugging Face Transformers SEW convert_config Code Injection Remote Code Execution Vulnerability.
2025-12-23	PYSEC-2025-213	transformers		Hugging Face Transformers megatron_gpt2 Deserialization of Untrusted Data Remote Code Execution Vulnerability.
published 2025-12-23 modified 2026-05-21 aliases CVE-2025-14924 affected introduced 0, last_affected 4.55.0 summary Hugging Face Transformers megatron_gpt2 Deserialization of Untrusted Data Remote Code Execution Vulnerability.
2025-12-23	PYSEC-2025-212	transformers		Hugging Face Transformers Transformer-XL Model Deserialization of Untrusted Data Remote Code Execution Vulnerability.
published 2025-12-23 modified 2026-05-21 aliases CVE-2025-14921 affected introduced 0, last_affected 4.54.1 summary Hugging Face Transformers Transformer-XL Model Deserialization of Untrusted Data Remote Code Execution Vulnerability.
2025-12-23	PYSEC-2025-211	transformers		Hugging Face Transformers Perceiver Model Deserialization of Untrusted Data Remote Code Execution Vulnerability.
published 2025-12-23 modified 2026-05-21 aliases CVE-2025-14920 affected introduced 0, last_affected 4.54.1 summary Hugging Face Transformers Perceiver Model Deserialization of Untrusted Data Remote Code Execution Vulnerability.
2025-12-17	PYSEC-2025-185	python-jose		In python-jose 3.3.0 (specifically jwe.decrypt), a vulnerability allows an attacker to cause a Denial-of-Service (DoS) condition by crafting a malicious JSON Web Encryption (JWE) token with an except…
published 2025-12-17 modified 2026-05-21 aliases CVE-2024-29370, GHSA-h4pw-wxh7-4vjj affected introduced 0, last_affected 3.3.0 summary In python-jose 3.3.0 (specifically jwe.decrypt), a vulnerability allows an attacker to cause a Denial-of-Service (DoS) condition by crafting a malicious JSON Web Encryption (JWE) token with an except…
2025-12-12	PYSEC-2025-267	tornado	6.5.3	Tornado is a Python web framework and asynchronous networking library.
published 2025-12-12 modified 2026-07-13 aliases CVE-2025-67726, GHSA-jhmp-mqwm-3gq8 affected introduced 0, fixed 6.5.3 fixed in 6.5.3 summary Tornado is a Python web framework and asynchronous networking library.
2025-12-12	PYSEC-2025-266	tornado	6.5.3	Tornado is a Python web framework and asynchronous networking library.
published 2025-12-12 modified 2026-07-13 aliases CVE-2025-67725, GHSA-c98p-7wgm-6p64 affected introduced 0, fixed 6.5.3 fixed in 6.5.3 summary Tornado is a Python web framework and asynchronous networking library.
2025-12-12	PYSEC-2025-265	tornado	6.5.3	Tornado is a Python web framework and asynchronous networking library.
published 2025-12-12 modified 2026-07-13 aliases CVE-2025-67724, GHSA-pr2v-jx2c-wg9f affected introduced 0, fixed 6.5.3 fixed in 6.5.3 summary Tornado is a Python web framework and asynchronous networking library.
2025-12-02	PYSEC-2025-109	django	5.2.9	An issue was discovered in 5.2 before 5.2.9, 5.1 before 5.1.15, and 4.2 before 4.2.27.
published 2025-12-02 modified 2026-05-20 aliases CVE-2025-64460, GHSA-vrcr-9hj9-jcg6 affected introduced 4.2, fixed 4.2.27, introduced 5.1, fixed 5.1.15, introduced 5.2, fixed 5.2.9 fixed in 5.2.9 summary An issue was discovered in 5.2 before 5.2.9, 5.1 before 5.1.15, and 4.2 before 4.2.27.
2025-12-02	PYSEC-2025-104	django	5.2.9	An issue was discovered in 5.2 before 5.2.9, 5.1 before 5.1.15, and 4.2 before 4.2.27.
published 2025-12-02 modified 2026-05-20 aliases CVE-2025-13372, GHSA-rqw2-ghq9-44m7 affected introduced 4.2, fixed 4.2.27, introduced 5.1, fixed 5.1.15, introduced 5.2, fixed 5.2.9 fixed in 5.2.9 summary An issue was discovered in 5.2 before 5.2.9, 5.1 before 5.1.15, and 4.2 before 4.2.27.
2025-11-18	PYSEC-2025-238	cbor2	5.7.1	Multiple vulnerabilities exist in cbor2 through version 5.7.0 in the decode_definite_long_string() function of the C extension decoder (source/decoder.c): (1) Integer Underflow Leading to Out-of-Boun…
published 2025-11-18 modified 2026-07-13 aliases CVE-2025-64076, GHSA-9q9c-vjxh-p795 affected introduced 0, fixed 5.7.1 fixed in 5.7.1 summary Multiple vulnerabilities exist in cbor2 through version 5.7.0 in the decode_definite_long_string() function of the C extension decoder (source/decoder.c): (1) Integer Underflow Leading to Out-of-Boun…
2025-11-12	PYSEC-2025-112	duckdb	1.4.2	DuckDB is a SQL database management system.
published 2025-11-12 modified 2026-05-20 aliases CVE-2025-64429, GHSA-vmp8-hg63-v2hp affected introduced 1.4.0, fixed 1.4.2 fixed in 1.4.2 summary DuckDB is a SQL database management system.
2025-11-12	PYSEC-2025-210	torch		An issue was discovered in PyTorch v2.5 and v2.7.1.
published 2025-11-12 modified 2026-01-02 aliases CVE-2025-63396 affected introduced 0, last_affected 2.5.0-NA, last_affected 2.7.1-NA summary An issue was discovered in PyTorch v2.5 and v2.7.1.
2025-11-05	PYSEC-2025-108	django	5.2.8	An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8.
published 2025-11-05 modified 2026-05-20 aliases CVE-2025-64459, GHSA-frmv-pr5f-9mcr affected introduced 4.2, fixed 4.2.26, introduced 5.1, fixed 5.1.14, introduced 5.2, fixed 5.2.8 fixed in 5.2.8 summary An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8.
2025-11-05	PYSEC-2025-107	django	5.2.8	An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8.
published 2025-11-05 modified 2026-05-20 aliases CVE-2025-64458, GHSA-qw25-v68c-qjf3 affected introduced 4.2, fixed 4.2.26, introduced 5.1, fixed 5.1.14, introduced 5.2, fixed 5.2.8 fixed in 5.2.8 summary An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8.
2025-10-15	PYSEC-2025-184	pyspark	3.5.2	This issue affects Apache Spark versions before 3.4.4, 3.5.2 and 4.0.0.
published 2025-10-15 modified 2026-05-20 aliases CVE-2025-55039, GHSA-6p6v-m64v-jx8q affected introduced 0, fixed 3.4.4, introduced 3.5.0, fixed 3.5.2 fixed in 3.5.2 summary This issue affects Apache Spark versions before 3.4.4, 3.5.2 and 4.0.0.
2025-10-01	PYSEC-2025-106	django	5.2.7	An issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13, and 5.2 before 5.2.7.
published 2025-10-01 modified 2026-05-20 aliases CVE-2025-59681, GHSA-hpr9-3m2g-3j9p affected introduced 4.2, fixed 4.2.25, introduced 5.1, fixed 5.1.13, introduced 5.2, fixed 5.2.7 fixed in 5.2.7 summary An issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13, and 5.2 before 5.2.7.
2025-09-25	PYSEC-2025-209	torch	2.7.1	An issue in pytorch v2.7.0 can lead to a Denial of Service (DoS) when a PyTorch model consists of torch.Tensor.to_sparse() and torch.Tensor.to_dense() and is compiled by Inductor.
published 2025-09-25 modified 2026-05-20 aliases CVE-2025-55560 affected introduced 0, fixed 2.7.1 fixed in 2.7.1 summary An issue in pytorch v2.7.0 can lead to a Denial of Service (DoS) when a PyTorch model consists of torch.Tensor.to_sparse() and torch.Tensor.to_dense() and is compiled by Inductor.
2025-09-25	PYSEC-2025-208	torch	2.7.1	A buffer overflow occurs in pytorch v2.7.0 when a PyTorch model consists of torch.nn.Conv2d, torch.nn.functional.hardshrink, and torch.Tensor.view-torch.mv() and is compiled by Inductor, leading to a…
published 2025-09-25 modified 2026-05-20 aliases CVE-2025-55558 affected introduced 0, fixed 2.7.1 fixed in 2.7.1 summary A buffer overflow occurs in pytorch v2.7.0 when a PyTorch model consists of torch.nn.Conv2d, torch.nn.functional.hardshrink, and torch.Tensor.view-torch.mv() and is compiled by Inductor, leading to a…
2025-09-25	PYSEC-2025-207	torch	2.7.1	A Name Error occurs in pytorch v2.7.0 when a PyTorch model consists of torch.cummin and is compiled by Inductor, leading to a Denial of Service (DoS).
published 2025-09-25 modified 2026-05-20 aliases CVE-2025-55557 affected introduced 0, fixed 2.7.1 fixed in 2.7.1 summary A Name Error occurs in pytorch v2.7.0 when a PyTorch model consists of torch.cummin and is compiled by Inductor, leading to a Denial of Service (DoS).
2025-09-25	PYSEC-2025-206	torch	2.9.0	pytorch v2.8.0 was discovered to contain an integer overflow in the component torch.nan_to_num-.long().
published 2025-09-25 modified 2026-05-20 aliases CVE-2025-55554 affected introduced 0, fixed 2.9.0 fixed in 2.9.0 summary pytorch v2.8.0 was discovered to contain an integer overflow in the component torch.nan_to_num-.long().
2025-09-25	PYSEC-2025-205	torch	2.7.1	A syntax error in the component proxy_tensor.py of pytorch v2.7.0 allows attackers to cause a Denial of Service (DoS).
published 2025-09-25 modified 2026-05-20 aliases CVE-2025-55553 affected introduced 0, fixed 2.7.1 fixed in 2.7.1 summary A syntax error in the component proxy_tensor.py of pytorch v2.7.0 allows attackers to cause a Denial of Service (DoS).
2025-09-25	PYSEC-2025-204	torch	2.9.0	pytorch v2.8.0 was discovered to display unexpected behavior when the components torch.rot90 and torch.randn_like are used together.
published 2025-09-25 modified 2026-05-20 aliases CVE-2025-55552 affected introduced 0, fixed 2.9.0 fixed in 2.9.0 summary pytorch v2.8.0 was discovered to display unexpected behavior when the components torch.rot90 and torch.randn_like are used together.
2025-09-25	PYSEC-2025-203	torch	2.9.0	An issue in the component torch.linalg.lu of pytorch v2.8.0 allows attackers to cause a Denial of Service (DoS) when performing a slice operation.
published 2025-09-25 modified 2026-05-20 aliases CVE-2025-55551 affected introduced 0, fixed 2.9.0 fixed in 2.9.0 summary An issue in the component torch.linalg.lu of pytorch v2.8.0 allows attackers to cause a Denial of Service (DoS) when performing a slice operation.
2025-09-25	PYSEC-2025-202	torch	2.7.0	PyTorch before 3.7.0 has a bernoulli_p decompose function in decompositions.py even though it lacks full consistency with the eager CPU implementation, negatively affecting nn.Dropout1d, nn.Dropout2d…
published 2025-09-25 modified 2026-05-20 aliases CVE-2025-46153 affected introduced 2.6.0, fixed 2.7.0 fixed in 2.7.0 summary PyTorch before 3.7.0 has a bernoulli_p decompose function in decompositions.py even though it lacks full consistency with the eager CPU implementation, negatively affecting nn.Dropout1d, nn.Dropout2d…
2025-09-25	PYSEC-2025-201	torch	2.7.0	In PyTorch before 2.7.0, bitwise_right_shift produces incorrect output for certain out-of-bounds values of the "other" argument.
published 2025-09-25 modified 2026-05-20 aliases CVE-2025-46152 affected introduced 2.6.0, fixed 2.7.0 fixed in 2.7.0 summary In PyTorch before 2.7.0, bitwise_right_shift produces incorrect output for certain out-of-bounds values of the "other" argument.
2025-09-25	PYSEC-2025-200	torch	2.7.0	In PyTorch before 2.7.0, when torch.compile is used, FractionalMaxPool2d has inconsistent results.
published 2025-09-25 modified 2026-05-20 aliases CVE-2025-46150 affected introduced 2.6.0, fixed 2.7.0 fixed in 2.7.0 summary In PyTorch before 2.7.0, when torch.compile is used, FractionalMaxPool2d has inconsistent results.
2025-09-25	PYSEC-2025-199	torch	2.7.0	In PyTorch before 2.7.0, when inductor is used, nn.Fold has an assertion error.
published 2025-09-25 modified 2026-05-20 aliases CVE-2025-46149 affected introduced 2.6.0, fixed 2.7.0 fixed in 2.7.0 summary In PyTorch before 2.7.0, when inductor is used, nn.Fold has an assertion error.
2025-09-25	PYSEC-2025-198	torch	2.7.0	In PyTorch through 2.6.0, when eager is used, nn.PairwiseDistance(p=2) produces incorrect results.
published 2025-09-25 modified 2026-05-20 aliases CVE-2025-46148 affected introduced 0, fixed 2.7.0 fixed in 2.7.0 summary In PyTorch through 2.6.0, when eager is used, nn.PairwiseDistance(p=2) produces incorrect results.
2025-09-03	PYSEC-2025-105	django	5.2.6	An issue was discovered in Django 4.2 before 4.2.24, 5.1 before 5.1.12, and 5.2 before 5.2.6.
published 2025-09-03 modified 2026-05-20 aliases CVE-2025-57833, GHSA-6w2r-r2m5-xq5w affected introduced 4.2, fixed 4.2.24, introduced 5.1, fixed 5.1.12, introduced 5.2, fixed 5.2.6 fixed in 5.2.6 summary An issue was discovered in Django 4.2 before 4.2.24, 5.1 before 5.1.12, and 5.2 before 5.2.6.
2025-07-31	PYSEC-2025-183	pyjwt		pyjwt v2.10.1 was discovered to contain weak encryption.
published 2025-07-31 modified 2026-05-21 aliases CVE-2025-45768 affected introduced 0, last_affected 2.10.1 summary pyjwt v2.10.1 was discovered to contain weak encryption.
2025-07-01	PYSEC-2025-61	pillow	11.3.0	Pillow is a Python imaging library.
published 2025-07-01 modified 2025-07-07 aliases CVE-2025-48379, GHSA-xg8h-j46f-w952 affected introduced 0, fixed 89f1f4626a2aaf5f3d5ca6437f41def2998fbe09, fixed ef98b3510e3e4f14b547762764813d7e5ca3c5a4; introduced 11.2.0, fixed 11.3.0 fixed in 11.3.0 summary Pillow is a Python imaging library.
2025-06-23	PYSEC-2025-52	mlflow	3.1.0	gateway_proxy_handler in MLflow before 3.1.0 lacks gateway_path validation.
published 2025-06-23 modified 2026-05-12 aliases CVE-2025-52967, GHSA-wxj7-3fx5-pp9m affected introduced 0, fixed 39a419b4ec8fd11b59b3e50ab397042a490f2324; introduced 0, fixed 3.1.0 fixed in 3.1.0 summary gateway_proxy_handler in MLflow before 3.1.0 lacks gateway_path validation.
2025-06-23	PYSEC-2025-70	langchain-community	0.0.28	A Server-Side Request Forgery (SSRF) vulnerability exists in the RequestsToolkit component of the langchain-community package (specifically, langchain_community.agent_toolkits.openapi.toolkit.Request…
published 2025-06-23 modified 2025-07-16 aliases CVE-2025-2828, GHSA-h5gc-rm8j-5gpr affected introduced 0, fixed e188d4ecb085d4561a0be3c583d26aa9c2c3283f; introduced 0, fixed 0.0.28 fixed in 0.0.28 summary A Server-Side Request Forgery (SSRF) vulnerability exists in the RequestsToolkit component of the langchain-community package (specifically, langchain_community.agent_toolkits.openapi.toolkit.Request…
2025-06-10	PYSEC-2025-74 withdrawn	jinja2		Nautobot is a Network Source of Truth and Network Automation Platform.
published 2025-06-10 modified 2025-08-21 withdrawn 2026-06-09 aliases CVE-2025-49142, GHSA-wjw6-95h5-4jpx affected all versions summary Nautobot is a Network Source of Truth and Network Automation Platform.
2025-06-05	PYSEC-2025-47	django	5.2.2	An issue was discovered in Django 5.2 before 5.2.2, 5.1 before 5.1.10, and 4.2 before 4.2.22.
published 2025-06-05 modified 2025-06-05 aliases CVE-2025-48432, GHSA-7xr5-9hcq-chf9 affected introduced 5.2, fixed 5.2.2, introduced 5.1, fixed 5.1.10, introduced 4.2, fixed 4.2.22 fixed in 5.2.2 summary An issue was discovered in Django 5.2 before 5.2.2, 5.1 before 5.1.10, and 4.2 before 4.2.22.
2025-05-19	PYSEC-2025-40	transformers	4.49.0	A vulnerability in the `preprocess_string()` function of the `transformers.testing_utils` module in huggingface/transformers version v4.48.3 allows for a Regular Expression Denial of Service (ReDoS) …
published 2025-05-19 modified 2025-05-21 aliases CVE-2025-2099, GHSA-qq3j-4f4f-9583 affected introduced 0, fixed 8cb522b4190bd556ce51be04942720650b1a3e57; introduced 0, fixed 4.49.0 fixed in 4.49.0 summary A vulnerability in the `preprocess_string()` function of the `transformers.testing_utils` module in huggingface/transformers version v4.48.3 allows for a Regular Expression Denial of Service (ReDoS) …
2025-05-17	PYSEC-2025-49	setuptools	78.1.1	setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages.
published 2025-05-17 modified 2025-06-12 aliases CVE-2025-47273, GHSA-5rjg-fvgr-3xxf affected introduced 0, fixed 250a6d17978f9f6ac3ac887091f2d32886fbbb0b; introduced 0, fixed 78.1.1 fixed in 78.1.1 summary setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages.
2025-05-08	PYSEC-2025-37	django	5.2.1	An issue was discovered in Django 4.2 before 4.2.21, 5.1 before 5.1.9, and 5.2 before 5.2.1.
published 2025-05-08 modified 2025-05-08 aliases CVE-2025-32873, GHSA-8j24-cjrq-gr2m affected introduced 4.2, fixed 4.2.21, introduced 5.1, fixed 5.1.9, introduced 5.2, fixed 5.2.1 fixed in 5.2.1 summary An issue was discovered in Django 4.2 before 4.2.21, 5.1 before 5.1.9, and 5.2 before 5.2.1.
2025-04-18	PYSEC-2025-41	torch	2.6.0	PyTorch is a Python package that provides tensor computation with strong GPU acceleration and deep neural networks built on a tape-based autograd system.
published 2025-04-18 modified 2025-05-28 aliases CVE-2025-32434, GHSA-53q9-r3pm-6pq6 affected introduced 0, fixed 2.6.0 fixed in 2.6.0 summary PyTorch is a Python package that provides tensor computation with strong GPU acceleration and deep neural networks built on a tape-based autograd system.
2025-04-03	PYSEC-2025-197	torch		A vulnerability, which was classified as problematic, has been found in PyTorch 2.6.0.
published 2025-04-03 modified 2025-05-28 aliases CVE-2025-3136 affected introduced 0, last_affected 2.6.0-NA summary A vulnerability, which was classified as problematic, has been found in PyTorch 2.6.0.
2025-04-02	PYSEC-2025-196	torch		A vulnerability classified as problematic has been found in PyTorch 2.6.0.
published 2025-04-02 modified 2025-05-27 aliases CVE-2025-3121 affected introduced 0, last_affected 2.6.0-NA summary A vulnerability classified as problematic has been found in PyTorch 2.6.0.
2025-04-02	PYSEC-2025-14	django	5.1.8	An issue was discovered in Django 5.1 before 5.1.8 and 5.0 before 5.0.14.
published 2025-04-02 modified 2025-04-09 aliases CVE-2025-27556, GHSA-wqfg-m96j-85vm affected introduced 5.1, fixed 5.1.8, introduced 5.0, fixed 5.0.14 fixed in 5.1.8 summary An issue was discovered in Django 5.1 before 5.1.8 and 5.0 before 5.0.14.
2025-03-31	PYSEC-2025-195	torch		A vulnerability classified as critical was found in PyTorch 2.6.0.
published 2025-03-31 modified 2025-05-29 aliases CVE-2025-3001, GHSA-qfhq-4f3w-5fph affected introduced 0, last_affected 2.6.0-NA summary A vulnerability classified as critical was found in PyTorch 2.6.0.
2025-03-31	PYSEC-2025-194	torch		A vulnerability classified as critical has been found in PyTorch 2.6.0.
published 2025-03-31 modified 2025-05-29 aliases CVE-2025-3000, GHSA-rrmf-rvhw-rf47 affected introduced 0, last_affected 2.6.0-NA summary A vulnerability classified as critical has been found in PyTorch 2.6.0.
2025-03-31	PYSEC-2025-193	torch		A vulnerability was found in PyTorch 2.6.0.
published 2025-03-31 modified 2025-05-29 aliases CVE-2025-2999, GHSA-vgrw-7cvw-pwgx affected introduced 0, last_affected 2.6.0-NA summary A vulnerability was found in PyTorch 2.6.0.
2025-03-31	PYSEC-2025-192	torch		A vulnerability was found in PyTorch 2.6.0.
published 2025-03-31 modified 2025-05-29 aliases CVE-2025-2998, GHSA-f4hp-rmr7-r7v8 affected introduced 0, last_affected 2.6.0-NA summary A vulnerability was found in PyTorch 2.6.0.
2025-03-30	PYSEC-2025-191	torch		A vulnerability, which was classified as problematic, has been found in PyTorch 2.6.0+cu124.
published 2025-03-30 modified 2026-05-21 aliases CVE-2025-2953, GHSA-3749-ghw9-m3mg affected introduced 0, last_affected 2.6.0+cu124 summary A vulnerability, which was classified as problematic, has been found in PyTorch 2.6.0+cu124.
2025-03-20	PYSEC-2025-17	mlflow	2.19.0	In mlflow/mlflow version 2.18, an admin is able to create a new user account without setting a password.
published 2025-03-20 modified 2025-04-09 aliases CVE-2025-1474, GHSA-4rj2-9gcx-5qhx affected introduced 0, fixed 149c9e18aa219bc47e86b432e130e467a36f4a17; introduced 0, fixed 2.19.0 fixed in 2.19.0 summary In mlflow/mlflow version 2.18, an admin is able to create a new user account without setting a password.
2025-03-10	PYSEC-2025-190	torch		A vulnerability was found in PyTorch 2.6.0+cu124.
published 2025-03-10 modified 2026-02-24 aliases CVE-2025-2149, GHSA-x3gm-94wq-g975 affected introduced 0, last_affected 2.6.0-cu124 summary A vulnerability was found in PyTorch 2.6.0+cu124.
2025-03-10	PYSEC-2025-189	torch		A vulnerability was found in PyTorch 2.6.0+cu124.
published 2025-03-10 modified 2026-02-24 aliases CVE-2025-2148, GHSA-c678-jfcj-6jmf affected introduced 0, last_affected 2.6.0-cu124 summary A vulnerability was found in PyTorch 2.6.0+cu124.
2025-03-06	PYSEC-2025-13	django	5.1.7	An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20.
published 2025-03-06 modified 2025-04-09 aliases CVE-2025-26699, GHSA-p3fp-8748-vqfq affected introduced 5.1, fixed 5.1.7, introduced 5.0, fixed 5.0.13, introduced 4.2, fixed 4.2.20 fixed in 5.1.7 summary An issue was discovered in Django 5.1 before 5.1.7, 5.0 before 5.0.13, and 4.2 before 4.2.20.
2025-01-29	PYSEC-2025-28	snowflake-connector-python	3.13.1	The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all standard operations.
published 2025-01-29 modified 2025-04-09 aliases CVE-2025-24795, GHSA-r2x6-cjg7-8r43 affected introduced 0, fixed 3769b43822357c3874c40f5e74068458c2dc79af; introduced 2.3.7, fixed 3.13.1 fixed in 3.13.1 summary The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all standard operations.
2025-01-29	PYSEC-2025-27	snowflake-connector-python	3.13.1	The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all standard operations.
published 2025-01-29 modified 2025-04-09 aliases CVE-2025-24794, GHSA-m4f6-vcj4-w5mx affected introduced 0, fixed 3769b43822357c3874c40f5e74068458c2dc79af; introduced 2.7.12, fixed 3.13.1 fixed in 3.13.1 summary The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all standard operations.
2025-01-29	PYSEC-2025-26	snowflake-connector-python	3.13.1	The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all standard operations.
published 2025-01-29 modified 2025-04-09 aliases CVE-2025-24793, GHSA-2vpq-fh52-j3wv affected introduced 0, fixed f3f9b666518d29c31a49384bbaa9a65889e72056; introduced 2.2.5, fixed 3.13.1 fixed in 3.13.1 summary The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all standard operations.
2025-01-14	PYSEC-2025-1	django	5.1.5	An issue was discovered in Django 5.1 before 5.1.5, 5.0 before 5.0.11, and 4.2 before 4.2.18.
published 2025-01-14 modified 2025-01-14 aliases CVE-2024-56374, GHSA-qcgg-j2x8-h9g8 affected introduced 5.1, fixed 5.1.5, introduced 5.0, fixed 5.0.11, introduced 4.2, fixed 4.2.18 fixed in 5.1.5 summary An issue was discovered in Django 5.1 before 5.1.5, 5.0 before 5.0.11, and 4.2 before 4.2.18.
2024-12-06	PYSEC-2024-157	django	5.1.4	An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17.
published 2024-12-06 modified 2025-01-14 aliases CVE-2024-53908, GHSA-m9g8-fxxm-xg86 affected introduced 5.1, fixed 5.1.4, introduced 5.0, fixed 5.0.10, introduced 4.2, fixed 4.2.17 fixed in 5.1.4 summary An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17.
2024-12-06	PYSEC-2024-156	django	5.1.4	An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17.
published 2024-12-06 modified 2025-01-14 aliases CVE-2024-53907, GHSA-8498-2h75-472j affected introduced 5.1, fixed 5.1.4, introduced 5.0, fixed 5.0.10, introduced 4.2, fixed 4.2.17 fixed in 5.1.4 summary An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17.
2024-11-28	PYSEC-2024-161	pyarrow	17.0.0	Deserialization of untrusted data in IPC and Parquet readers in the Apache Arrow R package versions 4.0.0 through 16.1.0 allows arbitrary code execution.
published 2024-11-28 modified 2025-01-14 aliases CVE-2024-52338 affected introduced 0, fixed 801de2fbcf5bcbce0c019ed4b35ff3fc863b141b; introduced 4.0.0, fixed 17.0.0 fixed in 17.0.0 summary Deserialization of untrusted data in IPC and Parquet readers in the Apache Arrow R package versions 4.0.0 through 16.1.0 allows arbitrary code execution.
2024-11-25	PYSEC-2024-224	mlflow	2.16.0	Excessive directory permissions in MLflow leads to local privilege escalation when using spark_udf.
published 2024-11-25 modified 2025-02-03 aliases CVE-2024-27134, GHSA-qpgc-w4mg-6v92 affected introduced 0, fixed 2.16.0 fixed in 2.16.0 summary Excessive directory permissions in MLflow leads to local privilege escalation when using spark_udf.
2024-11-24	PYSEC-2024-187	virtualenv	20.26.6	virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment.
published 2024-11-24 modified 2025-01-19 aliases CVE-2024-53899, GHSA-rqc4-2hc7-8c8v affected introduced 0, fixed 20.26.6 fixed in 20.26.6 summary virtualenv before 20.26.6 allows command injection through the activation scripts for a virtual environment.
2024-11-22	PYSEC-2024-229	transformers	4.48.0	Hugging Face Transformers Trax Model Deserialization of Untrusted Data Remote Code Execution Vulnerability.
published 2024-11-22 modified 2025-02-10 aliases CVE-2024-11394, GHSA-hxxf-235m-72v3 affected introduced 0, fixed 4.48.0 fixed in 4.48.0 summary Hugging Face Transformers Trax Model Deserialization of Untrusted Data Remote Code Execution Vulnerability.
2024-11-22	PYSEC-2024-228	transformers	4.48.0	Hugging Face Transformers MaskFormer Model Deserialization of Untrusted Data Remote Code Execution Vulnerability.
published 2024-11-22 modified 2025-02-10 aliases CVE-2024-11393, GHSA-wrfc-pvp9-mr9g affected introduced 0, fixed 4.48.0 fixed in 4.48.0 summary Hugging Face Transformers MaskFormer Model Deserialization of Untrusted Data Remote Code Execution Vulnerability.
2024-11-22	PYSEC-2024-227	transformers	4.48.0	Hugging Face Transformers MobileViTV2 Deserialization of Untrusted Data Remote Code Execution Vulnerability.
published 2024-11-22 modified 2025-02-10 aliases CVE-2024-11392, GHSA-qxrp-vhvm-j765 affected introduced 0, fixed 4.48.0 fixed in 4.48.0 summary Hugging Face Transformers MobileViTV2 Deserialization of Untrusted Data Remote Code Execution Vulnerability.
2024-11-19	PYSEC-2024-160	lxml-html-clean	0.4.0	lxml_html_clean is a project for HTML cleaning functionalities copied from `lxml.html.clean`.
published 2024-11-19 modified 2025-01-14 aliases CVE-2024-52595, GHSA-5jfw-gq64-q45f affected introduced 0, fixed c5d816f86eb3707d72a8ecf5f3823e0daa1b3808; introduced 0, fixed 0.4.0 fixed in 0.4.0 summary lxml_html_clean is a project for HTML cleaning functionalities copied from `lxml.html.clean`.
2024-11-12	PYSEC-2024-231	lightgbm	4.6.0	LightGBM Remote Code Execution Vulnerability
published 2024-11-12 modified 2025-02-15 aliases CVE-2024-43598, GHSA-2586-f3p4-hq84 affected introduced 0, fixed 4.6.0 fixed in 4.6.0 summary LightGBM Remote Code Execution Vulnerability
2024-11-05	PYSEC-2024-115	langchain-community	0.3.0	A vulnerability in the GraphCypherQAChain class of langchain-ai/langchain-community version 0.2.5 allows for SQL injection through prompt injection.
published 2024-11-05 modified 2027-07-09 aliases CVE-2024-8309, GHSA-45pg-36p6-83v9 affected introduced 0.2.0, fixed 0.3.0 fixed in 0.3.0 summary A vulnerability in the GraphCypherQAChain class of langchain-ai/langchain-community version 0.2.5 allows for SQL injection through prompt injection.
2024-10-29	PYSEC-2024-114 withdrawn	langchain	0.3.1	A vulnerability in the GraphCypherQAChain class of langchain-ai/langchainjs versions 0.2.5 and all versions with this class allows for prompt injection, leading to SQL injection.
published 2024-10-29 modified 2024-11-04 withdrawn 2025-06-07 aliases CVE-2024-7042 affected introduced 0, fixed 615b9d9ab30a2d23a2f95fb8d7acfdf4b41ad7a6; introduced 0, fixed 0.3.1 fixed in 0.3.1 summary A vulnerability in the GraphCypherQAChain class of langchain-ai/langchainjs versions 0.2.5 and all versions with this class allows for prompt injection, leading to SQL injection.
2024-10-29	PYSEC-2024-111 withdrawn	langchain		A path traversal vulnerability exists in the `getFullPath` method of langchain-ai/langchainjs version 0.2.5.
published 2024-10-29 modified 2025-05-02 withdrawn 2024-11-04 aliases CVE-2024-7774 affected introduced 0, fixed a0fad77d6b569e5872bd4a9d33be0c0785e538a9; introduced 0 summary A path traversal vulnerability exists in the `getFullPath` method of langchain-ai/langchainjs version 0.2.5.
2024-10-29	PYSEC-2024-259	torch	2.5.0	In PyTorch <=2.4.1, the RemoteModule has Deserialization RCE.
published 2024-10-29 modified 2025-07-16 aliases CVE-2024-48063 affected introduced 0, fixed 2.5.0 fixed in 2.5.0 summary In PyTorch <=2.4.1, the RemoteModule has Deserialization RCE.
2024-10-24	PYSEC-2024-191	snowflake-connector-python	3.12.3	The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all standard operations.
published 2024-10-24 modified 2025-01-19 aliases CVE-2024-49750, GHSA-5vvg-pvhp-hv2m affected introduced 0, fixed dbc9284a3c0382c131b971b35e8d6ab93c46f37a; introduced 0, fixed 3.12.3 fixed in 3.12.3 summary The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all standard operations.
2024-10-08	PYSEC-2024-102	django	5.1.1	An issue was discovered in Django 5.1 before 5.1.1, 5.0 before 5.0.9, and 4.2 before 4.2.16.
published 2024-10-08 modified 2024-10-08 aliases CVE-2024-45230, GHSA-5hgc-2vfp-mqvc affected introduced 5.1, fixed 5.1.1, introduced 5.0, fixed 5.0.9, introduced 4.2, fixed 4.2.16 fixed in 5.1.1 summary An issue was discovered in Django 5.1 before 5.1.1, 5.0 before 5.0.9, and 4.2 before 4.2.16.
2024-08-18	PYSEC-2024-260 withdrawn	flask-cors		Withdrawn as duplicate of PYSEC-2024-71.
published 2024-08-18 modified 2026-07-09 withdrawn 2026-07-09 aliases CVE-2024-6221 affected introduced 0, last_affected 4.0.1 summary Withdrawn as duplicate of PYSEC-2024-71.
2024-08-12	PYSEC-2024-153	streamlit	1.37.0	Streamlit is a data oriented application development framework for python.
published 2024-08-12 modified 2024-11-25 aliases CVE-2024-42474, GHSA-rxff-vr5r-8cj5 affected introduced 0, fixed 3a639859cfdfba2187c81897d44a3e33825eb0a3; introduced 0, fixed 1.37.0 fixed in 1.37.0 summary Streamlit is a data oriented application development framework for python.
2024-08-07	PYSEC-2024-70	django	5.0.8	An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15.
published 2024-08-07 modified 2024-08-07 aliases CVE-2024-42005, GHSA-pv4p-cwwg-4rph affected introduced 5.0, fixed 5.0.8, introduced 4.2, fixed 4.2.15 fixed in 5.0.8 summary An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15.
2024-08-07	PYSEC-2024-69	django	5.0.8	An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15.
published 2024-08-07 modified 2024-08-07 aliases CVE-2024-41991, GHSA-r836-hh6v-rg5g affected introduced 5.0, fixed 5.0.8, introduced 4.2, fixed 4.2.15 fixed in 5.0.8 summary An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15.
2024-08-07	PYSEC-2024-68	django	5.0.8	An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15.
published 2024-08-07 modified 2024-08-07 aliases CVE-2024-41990, GHSA-795c-9xpc-xw6g affected introduced 5.0, fixed 5.0.8, introduced 4.2, fixed 4.2.15 fixed in 5.0.8 summary An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15.
2024-08-07	PYSEC-2024-67	django	5.0.8	An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15.
published 2024-08-07 modified 2024-08-07 aliases CVE-2024-41989, GHSA-jh75-99hh-qvx9 affected introduced 5.0, fixed 5.0.8, introduced 4.2, fixed 4.2.15 fixed in 5.0.8 summary An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15.
2024-07-29	PYSEC-2024-75	twisted	24.7.0rc1	Twisted is an event-based framework for internet applications, supporting Python 3.6+.
published 2024-07-29 modified 2024-09-11 aliases CVE-2024-41810, GHSA-cf56-g6w6-pqq2 affected introduced 0, fixed 046a164f89a0f08d3239ecebd750360f8914df33; introduced 0, fixed 24.7.0rc1 fixed in 24.7.0rc1 summary Twisted is an event-based framework for internet applications, supporting Python 3.6+.
2024-07-24	PYSEC-2024-203	duckdb	1.1.0	DuckDB is a SQL database management system.
published 2024-07-24 modified 2025-01-19 aliases CVE-2024-41672, GHSA-w2gf-jxc9-pf2q affected introduced 0, fixed c9b7c98aa0e1cd7363fe8bb8543a95f38e980d8a; introduced 0, fixed 1.1.0 fixed in 1.1.0 summary DuckDB is a SQL database management system.
2024-07-16	PYSEC-2024-322	jupyterlab	4.3.0	JupyterLab extension template is a `copier` template for JupyterLab extensions.
published 2024-07-16 modified 2026-07-13 aliases CVE-2024-39700, GHSA-45gq-v5wm-82wg affected introduced 0, fixed 4.3.0 fixed in 4.3.0 summary JupyterLab extension template is a `copier` template for JupyterLab extensions.
2024-07-16	PYSEC-2024-66	dbt-core	1.7.14	dbt enables data analysts and engineers to transform their data using the same practices that software engineers use to build applications.
published 2024-07-16 modified 2024-07-19 aliases CVE-2024-40637, GHSA-p3f3-5ccg-83xq affected introduced 0, fixed 3c82a0296d227cb1be295356df314c11716f4ff6, fixed 87ac4deb00cc9fe334706e42a365903a1d581624; introduced 1.7.0, fixed 1.7.14, introduced 0, fixed 1.6.14 fixed in 1.7.14 summary dbt enables data analysts and engineers to transform their data using the same practices that software engineers use to build applications.
2024-07-10	PYSEC-2024-59	django	5.0.7	An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14.
published 2024-07-10 modified 2024-07-10 aliases CVE-2024-39614, GHSA-f6f8-9mx6-9mx2 affected introduced 5.0, fixed 5.0.7, introduced 4.2, fixed 4.2.14 fixed in 5.0.7 summary An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14.
2024-07-10	PYSEC-2024-58	django	5.0.7	An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14.
published 2024-07-10 modified 2024-07-10 aliases CVE-2024-39330, GHSA-9jmf-237g-qf46 affected introduced 5.0, fixed 5.0.7, introduced 4.2, fixed 4.2.14 fixed in 5.0.7 summary An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14.
2024-07-10	PYSEC-2024-57	django	5.0.7	An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14.
published 2024-07-10 modified 2024-07-10 aliases CVE-2024-39329, GHSA-x7q2-wr7g-xqmf affected introduced 5.0, fixed 5.0.7, introduced 4.2, fixed 4.2.14 fixed in 5.0.7 summary An issue was discovered in Django 5.0 before 5.0.7 and 4.2 before 4.2.14.
2024-07-10	PYSEC-2024-56	django	5.0.7	An issue was discovered in Django 4.2 before 4.2.14 and 5.0 before 5.0.7.
published 2024-07-10 modified 2024-07-10 aliases CVE-2024-38875, GHSA-qg2p-9jwr-mmqf affected introduced 4.2, fixed 4.2.14, introduced 5.0, fixed 5.0.7 fixed in 5.0.7 summary An issue was discovered in Django 4.2 before 4.2.14 and 5.0 before 5.0.7.
2024-07-07	PYSEC-2024-60	idna	3.7	A vulnerability was identified in the kjd/idna library, specifically within the `idna.encode()` function, affecting version 3.6.
published 2024-07-07 modified 2024-07-11 aliases CVE-2024-3651, GHSA-jjg7-2v4v-x38h affected introduced 0, fixed 1d365e17e10d72d0b7876316fc7b9ca0eebdd38d; introduced 0.1, fixed 3.7 fixed in 3.7 summary A vulnerability was identified in the kjd/idna library, specifically within the `idna.encode()` function, affecting version 3.6.
2024-07-05	PYSEC-2024-230	certifi	2024.7.4	Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts.
published 2024-07-05 modified 2025-02-12 aliases CVE-2024-39689, GHSA-248v-346w-9cwc affected introduced 0, fixed bd8153872e9c6fc98f4023df9c2deaffea2fa463; introduced 2021.5.30, fixed 2024.7.4 fixed in 2024.7.4 summary Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts.
2024-06-27	PYSEC-2024-167	nltk	3.9	NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download functionality is used.
published 2024-06-27 modified 2025-01-18 aliases CVE-2024-39705, GHSA-cgvx-9447-vcch affected introduced 0, fixed 3.9 fixed in 3.9 summary NLTK through 3.8.1 allows remote code execution if untrusted packages have pickled Python code, and the integrated data package download functionality is used.
2024-06-09	PYSEC-2024-52	authlib	1.3.1	lepture Authlib before 1.3.1 has algorithm confusion with asymmetric public keys.
published 2024-06-09 modified 2024-06-09 aliases CVE-2024-37568, GHSA-5357-c2jx-v7qh affected introduced 0, fixed 1.3.1 fixed in 1.3.1 summary lepture Authlib before 1.3.1 has algorithm confusion with asymmetric public keys.
2024-06-06	PYSEC-2024-110	scikit-learn	1.5.0	A sensitive data leakage vulnerability was identified in scikit-learn's TfidfVectorizer, specifically in versions up to and including 1.4.1.post1, which was fixed in version 1.5.0.
published 2024-06-06 modified 2024-10-24 aliases CVE-2024-5206, GHSA-jw8x-6495-233v affected introduced 0, fixed 70ca21f106b603b611da73012c9ade7cd8e438b8; introduced 0, fixed 1.5.0 fixed in 1.5.0 summary A sensitive data leakage vulnerability was identified in scikit-learn's TfidfVectorizer, specifically in versions up to and including 1.4.1.post1, which was fixed in version 1.5.0.
2024-06-06	PYSEC-2024-242	mlflow	2.11.3	A Local File Inclusion (LFI) vulnerability was identified in mlflow/mlflow, specifically in version 2.9.2, which was fixed in version 2.11.3.
published 2024-06-06 modified 2025-04-08 aliases CVE-2024-2928, GHSA-j46q-5pxx-8vmw affected introduced 0, fixed 96f0b573a73d8eedd6735a2ce26e08859527be07, fixed 96f0b573a73d8eedd6735a2ce26e08859527be07; introduced 0, fixed 2.11.3 fixed in 2.11.3 summary A Local File Inclusion (LFI) vulnerability was identified in mlflow/mlflow, specifically in version 2.9.2, which was fixed in version 2.11.3.
2024-06-06	PYSEC-2024-239	mlflow	2.9.0	A vulnerability in mlflow/mlflow version 8.2.1 allows for remote code execution due to improper neutralization of special elements used in an OS command ('Command Injection') within the `mlflow.data.…
published 2024-06-06 modified 2025-04-08 aliases CVE-2024-0520, GHSA-5q6c-ffvg-xcm9 affected introduced 0, fixed 400c226953b4568f4361bc0a0c223511652c2b9d, fixed 400c226953b4568f4361bc0a0c223511652c2b9d; introduced 0, fixed 2.9.0 fixed in 2.9.0 summary A vulnerability in mlflow/mlflow version 8.2.1 allows for remote code execution due to improper neutralization of special elements used in an OS command ('Command Injection') within the `mlflow.data.…
2024-06-06	PYSEC-2024-165	jupyter-server	2.14.1	The Jupyter Server provides the backend for Jupyter web applications.
published 2024-06-06 modified 2025-01-18 aliases CVE-2024-35178, GHSA-hrw6-wg82-cm62 affected introduced 0, fixed 79fbf801c5908f4d1d9bc90004b74cfaaeeed2df; introduced 0, fixed 2.14.1 fixed in 2.14.1 summary The Jupyter Server provides the backend for Jupyter web applications.
2024-05-17	PYSEC-2024-277 withdrawn	joblib		joblib v1.4.2 was discovered to contain a deserialization vulnerability via the component joblib.numpy_pickle::NumpyArrayWrapper().read_array().
published 2024-05-17 modified 2026-05-21 withdrawn 2026-06-09 aliases CVE-2024-34997 affected introduced 0, last_affected 1.4.2 summary joblib v1.4.2 was discovered to contain a deserialization vulnerability via the component joblib.numpy_pickle::NumpyArrayWrapper().read_array().
2024-05-16	PYSEC-2024-244	mlflow	2.12.1	A path traversal vulnerability exists in mlflow/mlflow version 2.11.0, identified as a bypass for the previously addressed CVE-2023-6909.
published 2024-05-16 modified 2025-04-08 aliases CVE-2024-3848, GHSA-rfqq-wq6w-72jm affected introduced 0, fixed f8d51e21523238280ebcfdb378612afd7844eca8, fixed f8d51e21523238280ebcfdb378612afd7844eca8; introduced 0, fixed 2.12.1 fixed in 2.12.1 summary A path traversal vulnerability exists in mlflow/mlflow version 2.11.0, identified as a bypass for the previously addressed CVE-2023-6909.
2024-05-16	PYSEC-2024-51	mlflow	2.10.1	A broken access control vulnerability exists in mlflow/mlflow versions before 2.10.1, where low privilege users with only EDIT permissions on an experiment can delete any artifacts.
published 2024-05-16 modified 2024-05-16 aliases CVE-2024-4263, GHSA-p4jx-q62p-x5jr affected introduced 0, fixed b43e0e3de5b500554e13dc032ba2083b2d6c94b8; introduced 0, fixed 2.10.1 fixed in 2.10.1 summary A broken access control vulnerability exists in mlflow/mlflow versions before 2.10.1, where low privilege users with only EDIT permissions on an experiment can delete any artifacts.
2024-04-26	PYSEC-2024-233	python-jose	3.4.0	python-jose through 3.3.0 allows attackers to cause a denial of service (resource consumption) during a decode via a crafted JSON Web Encryption (JWE) token with a high compression ratio, aka a "JWT …
published 2024-04-26 modified 2025-02-18 aliases CVE-2024-33664, GHSA-cjwg-qfpm-7377 affected introduced 0, fixed 3.4.0 fixed in 3.4.0 summary python-jose through 3.3.0 allows attackers to cause a denial of service (resource consumption) during a decode via a crafted JSON Web Encryption (JWE) token with a high compression ratio, aka a "JWT …
2024-04-26	PYSEC-2024-232	python-jose	3.4.0	python-jose through 3.3.0 has algorithm confusion with OpenSSH ECDSA keys and other key formats.
published 2024-04-26 modified 2025-02-18 aliases CVE-2024-33663, GHSA-6c5p-j8vq-pqhj affected introduced 0, fixed 3.4.0 fixed in 3.4.0 summary python-jose through 3.3.0 has algorithm confusion with OpenSSH ECDSA keys and other key formats.
2024-04-19	PYSEC-2024-271	flask-cors		corydolphin/flask-cors is vulnerable to log injection when the log level is set to debug.
published 2024-04-19 modified 2026-05-21 aliases CVE-2024-1681, GHSA-84pr-m4jr-85g5 affected introduced 0, last_affected 4.0.0 summary corydolphin/flask-cors is vulnerable to log injection when the log level is set to debug.
2024-04-19	PYSEC-2024-250	torch	2.2.0	Pytorch before v2.2.0 has an Out-of-bounds Read vulnerability via the component torch/csrc/jit/mobile/flatbuffer_loader.cpp.
published 2024-04-19 modified 2025-06-03 aliases CVE-2024-31584 affected introduced 0, fixed 7c35874ad664e74c8e4252d67521f3986eadb0e6, fixed 7c35874ad664e74c8e4252d67521f3986eadb0e6; introduced 0, fixed 2.2.0 fixed in 2.2.0 summary Pytorch before v2.2.0 has an Out-of-bounds Read vulnerability via the component torch/csrc/jit/mobile/flatbuffer_loader.cpp.
2024-04-17	PYSEC-2024-252	torch	2.2.0	PyTorch before v2.2.0 was discovered to contain a heap buffer overflow vulnerability in the component /runtime/vararg_functions.cpp.
published 2024-04-17 modified 2025-06-10 aliases CVE-2024-31580, GHSA-5pcm-hx3q-hm94 affected introduced 0, fixed b5c3a17c2c207ebefcb85043f0cf94be9b2fef81, fixed b5c3a17c2c207ebefcb85043f0cf94be9b2fef81; introduced 0, fixed 2.2.0 fixed in 2.2.0 summary PyTorch before v2.2.0 was discovered to contain a heap buffer overflow vulnerability in the component /runtime/vararg_functions.cpp.
2024-04-17	PYSEC-2024-251	torch	2.2.0	Pytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in torch/csrc/jit/mobile/interpreter.cpp.
published 2024-04-17 modified 2025-06-10 aliases CVE-2024-31583, GHSA-pg7h-5qx3-wjr3 affected introduced 0, fixed 9c7071b0e324f9fb68ab881283d6b8d388a4bcd2, fixed 9c7071b0e324f9fb68ab881283d6b8d388a4bcd2; introduced 0, fixed 2.2.0 fixed in 2.2.0 summary Pytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in torch/csrc/jit/mobile/interpreter.cpp.
2024-04-16	PYSEC-2024-243	mlflow	2.10.0	mlflow/mlflow is vulnerable to Local File Inclusion (LFI) due to improper parsing of URIs, allowing attackers to bypass checks and read arbitrary files on the system.
published 2024-04-16 modified 2025-04-08 aliases CVE-2024-3573, GHSA-hq88-wg7q-gp4g affected introduced 0, fixed 438a450714a3ca06285eeea34bdc6cf79d7f6cbc, fixed 438a450714a3ca06285eeea34bdc6cf79d7f6cbc; introduced 0, fixed 2.10.0 fixed in 2.10.0 summary mlflow/mlflow is vulnerable to Local File Inclusion (LFI) due to improper parsing of URIs, allowing attackers to bypass checks and read arbitrary files on the system.
2024-03-19	PYSEC-2024-48	black	24.3.0	Versions of the package black before 24.3.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the lines_with_leading_tabs_expanded function in the strings.py file.
published 2024-03-19 modified 2024-03-19 aliases CVE-2024-21503, GHSA-fj7x-q9j7-g6q6 affected introduced 0, fixed f00093672628d212b8965a8993cee8bedf5fe9b8; introduced 0, fixed 24.3.0 fixed in 24.3.0 summary Versions of the package black before 24.3.0 are vulnerable to Regular Expression Denial of Service (ReDoS) via the lines_with_leading_tabs_expanded function in the strings.py file.
2024-03-15	PYSEC-2024-47	django	5.0.3	In Django 3.2 before 3.2.25, 4.2 before 4.2.11, and 5.0 before 5.0.3, the django.utils.text.Truncator.words() method (with html=True) and the truncatewords_html template filter are subject to a poten…
published 2024-03-15 modified 2024-03-15 aliases CVE-2024-27351, GHSA-vm8q-m57g-pff3 affected introduced 3.2, fixed 3.2.25, introduced 4.2, fixed 4.2.11, introduced 5.0, fixed 5.0.3 fixed in 5.0.3 summary In Django 3.2 before 3.2.25, 4.2 before 4.2.11, and 5.0 before 5.0.3, the django.utils.text.Truncator.words() method (with html=True) and the truncatewords_html template filter are subject to a poten…
2024-03-04	PYSEC-2024-45	langchain-core	0.1.11	LangChain through 0.1.10 allows ../ directory traversal by an actor who is able to control the final part of the path parameter in a load_chain call.
published 2024-03-04 modified 2024-03-13 aliases CVE-2024-28088, GHSA-h59x-p739-982c affected introduced 0, fixed 0.1.11 fixed in 0.1.11 summary LangChain through 0.1.10 allows ../ directory traversal by an actor who is able to control the final part of the path parameter in a load_chain call.
2024-03-01	PYSEC-2024-278	langchain-community		A vulnerability was found in LangChain langchain_community 0.0.26.
published 2024-03-01 modified 2026-05-21 aliases CVE-2024-2057 affected introduced 0, last_affected 0.0.26 summary A vulnerability was found in LangChain langchain_community 0.0.26.
2024-02-26	PYSEC-2024-40	orjson	3.9.15	orjson.loads in orjson before 3.9.15 does not limit recursion for deeply nested JSON documents.
published 2024-02-26 modified 2024-02-26 aliases CVE-2024-27454, GHSA-pwr2-4v36-6qpr affected introduced 0, fixed b0e4d2c06ce06c6e63981bf0276e4b7c74e5845e; introduced 0, fixed 3.9.15 fixed in 3.9.15 summary orjson.loads in orjson before 3.9.15 does not limit recursion for deeply nested JSON documents.
2024-02-23	PYSEC-2024-241	mlflow	2.10.0	Insufficient sanitization in MLflow leads to XSS when running a recipe that uses an untrusted dataset.
published 2024-02-23 modified 2025-04-08 aliases CVE-2024-27133, GHSA-3v79-q7ph-j75h affected introduced 0, fixed 2.10.0 fixed in 2.10.0 summary Insufficient sanitization in MLflow leads to XSS when running a recipe that uses an untrusted dataset.
2024-02-23	PYSEC-2024-240	mlflow	2.10.0	Insufficient sanitization in MLflow leads to XSS when running an untrusted recipe.
published 2024-02-23 modified 2025-04-08 aliases CVE-2024-27132, GHSA-6749-m5cp-6cg7 affected introduced 0, fixed 2.10.0 fixed in 2.10.0 summary Insufficient sanitization in MLflow leads to XSS when running an untrusted recipe.
2024-02-21	PYSEC-2024-225	cryptography	42.0.4	cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.
published 2024-02-21 modified 2025-02-06 aliases CVE-2024-26130, GHSA-6vqw-3v5j-54x4 affected introduced 0, fixed 97d231672763cdb5959a3b191e692a362f1b9e55; introduced 38.0.0, fixed 42.0.4 fixed in 42.0.4 summary cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.
2024-02-19	PYSEC-2024-155	cbor2	5.6.2	cbor2 provides encoding and decoding for the Concise Binary Object Representation (CBOR) (RFC 8949) serialization format.
published 2024-02-19 modified 2025-01-14 aliases CVE-2024-26134, GHSA-375g-39jq-vq7m affected introduced 0, fixed 387755eacf0be35591a478d3c67fe10618a6d542, fixed 4de6991ba29bf2290d7b9d83525eda7d021873df; introduced 5.5.1, fixed 5.6.2 fixed in 5.6.2 summary cbor2 provides encoding and decoding for the Concise Binary Object Representation (CBOR) (RFC 8949) serialization format.
2024-02-12	PYSEC-2024-104	jwcrypto	1.5.1	A vulnerability was found in JWCrypto.
published 2024-02-12 modified 2024-10-10 aliases CVE-2023-6681, GHSA-cw2r-4p82-qv79 affected introduced 0, fixed 1.5.1 fixed in 1.5.1 summary A vulnerability was found in JWCrypto.
2024-02-06	PYSEC-2024-28	django	5.0.2	An issue was discovered in Django 3.2 before 3.2.24, 4.2 before 4.2.10, and Django 5.0 before 5.0.2.
published 2024-02-06 modified 2024-02-07 aliases CVE-2024-24680, GHSA-xxj9-f6rv-m3x4 affected introduced 3.2, fixed 3.2.24, introduced 4.2, fixed 4.2.10, introduced 5.0, fixed 5.0.2 fixed in 5.0.2 summary An issue was discovered in Django 3.2 before 3.2.24, 4.2 before 4.2.10, and Django 5.0 before 5.0.2.
2024-02-05	PYSEC-2024-38	fastapi	0.109.1	FastAPI is a web framework for building APIs with Python 3.8+ based on standard Python type hints.
published 2024-02-05 modified 2024-02-16 aliases CVE-2024-24762, GHSA-qf9m-vfgh-m389 affected introduced 0, fixed 9d34ad0ee8a0dfbbcce06f76c2d5d851085024fc; introduced 0, fixed 0.109.1 fixed in 0.109.1 summary FastAPI is a web framework for building APIs with Python 3.8+ based on standard Python type hints.
2024-01-30	PYSEC-2024-25	duckdb	0.9.3.dev6	DuckDB <=0.9.2 and DuckDB extension-template <=0.9.2 are vulnerable to malicious extension injection via the custom extension feature.
published 2024-01-30 modified 2024-02-06 aliases CVE-2024-22682 affected introduced 0, fixed 0.9.3.dev6 fixed in 0.9.3.dev6 summary DuckDB <=0.9.2 and DuckDB extension-template <=0.9.2 are vulnerable to malicious extension injection via the custom extension feature.
2024-01-29	PYSEC-2024-26	aiohttp	3.9.2	aiohttp is an asynchronous HTTP client/server framework for asyncio and Python.
published 2024-01-29 modified 2024-02-06 aliases CVE-2024-23829, GHSA-8qpw-xqxj-h4r2 affected introduced 0, fixed 33ccdfb0a12690af5bb49bda2319ec0907fa7827; introduced 0, fixed 3.9.2 fixed in 3.9.2 summary aiohttp is an asynchronous HTTP client/server framework for asyncio and Python.
2024-01-29	PYSEC-2024-24	aiohttp	3.9.2	aiohttp is an asynchronous HTTP client/server framework for asyncio and Python.
published 2024-01-29 modified 2024-02-05 aliases CVE-2024-23334, GHSA-5h86-8mv2-jq9f affected introduced 0, fixed 1c335944d6a8b1298baf179b7c0b3069f10c514b; introduced 1.0.5, fixed 3.9.2 fixed in 3.9.2 summary aiohttp is an asynchronous HTTP client/server framework for asyncio and Python.
2024-01-11	PYSEC-2024-4	gitpython	3.1.41	GitPython is a python library used to interact with Git repositories.
published 2024-01-11 modified 2024-01-18 aliases CVE-2024-22190, GHSA-2mqj-m65w-jghx affected introduced 0, fixed ef3192cc414f2fd9978908454f6fd95243784c7f; introduced 0, fixed 3.1.41 fixed in 3.1.41 summary GitPython is a python library used to interact with Git repositories.
2023-12-20	PYSEC-2023-301	transformers	4.36.0	Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36.
published 2023-12-20 modified 2024-11-21 aliases CVE-2023-7018, GHSA-v68g-wm8c-6x7j affected introduced 0, fixed 1d63b0ec361e7a38f1339385e8a5a855085532ce; introduced 0, fixed 4.36.0 fixed in 4.36.0 summary Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36.
2023-12-19	PYSEC-2023-300	transformers	4.36.0	Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36.
published 2023-12-19 modified 2024-11-21 aliases CVE-2023-6730, GHSA-3863-2447-669p affected introduced 0, fixed 1d63b0ec361e7a38f1339385e8a5a855085532ce; introduced 0, fixed 4.36.0 fixed in 4.36.0 summary Deserialization of Untrusted Data in GitHub repository huggingface/transformers prior to 4.36.
2023-12-18	PYSEC-2023-252	mlflow	2.9.2	Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2.
published 2023-12-18 modified 2024-02-06 aliases CVE-2023-6909, GHSA-5r3q-93q3-f978 affected introduced 0, fixed 1da75dfcecd4d169e34809ade55748384e8af6c1; introduced 0, fixed 2.9.2 fixed in 2.9.2 summary Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2.
2023-12-15	PYSEC-2023-253	mlflow	2.9.2	Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2.
published 2023-12-15 modified 2024-02-14 aliases CVE-2023-6831, GHSA-554w-xh4j-8w64 affected introduced 0, fixed 1da75dfcecd4d169e34809ade55748384e8af6c1; introduced 0, fixed 2.9.2 fixed in 2.9.2 summary Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2.
2023-12-13	PYSEC-2023-309	mlflow	2.9.2	Path Traversal in GitHub repository mlflow/mlflow prior to 2.9.2.
published 2023-12-13 modified 2025-04-09 aliases CVE-2023-6753, GHSA-v945-r3rc-6fjm affected introduced 0, fixed 1c6309f884798fbf56017a3cc808016869ee8de4, fixed 1c6309f884798fbf56017a3cc808016869ee8de4; introduced 0, fixed 2.9.2 fixed in 2.9.2 summary Path Traversal in GitHub repository mlflow/mlflow prior to 2.9.2.
2023-12-12	PYSEC-2023-281	mlflow	2.9.2	Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository mlflow/mlflow prior to 2.9.2.
published 2023-12-12 modified 2024-11-21 aliases CVE-2023-6709, GHSA-cxfr-5q3r-2rc2 affected introduced 0, fixed 432b8ccf27fd3a76df4ba79bb1bec62118a85625; introduced 0, fixed 2.9.2 fixed in 2.9.2 summary Improper Neutralization of Special Elements Used in a Template Engine in GitHub repository mlflow/mlflow prior to 2.9.2.
2023-12-07	PYSEC-2023-260	mlflow	2.9.1	A reflected Cross-Site Scripting (XSS) vulnerability exists in the mlflow/mlflow repository, specifically within the handling of the Content-Type header in POST requests.
published 2023-12-07 modified 2024-04-16 aliases CVE-2023-6568, GHSA-vwhf-3v6x-wff8 affected introduced 0, fixed 28ff3f94994941e038f2172c6484b65dc4db6ca1; introduced 0, fixed 2.9.1 fixed in 2.9.1 summary A reflected Cross-Site Scripting (XSS) vulnerability exists in the mlflow/mlflow repository, specifically within the handling of the Content-Type header in POST requests.
2023-12-04	PYSEC-2023-272	jupyter-server	2.11.2	The Jupyter Server provides the backend (i.e.
published 2023-12-04 modified 2024-11-21 aliases CVE-2023-49080, GHSA-h56g-gq9v-vc8r affected introduced 0, fixed 0056c3aa52cbb28b263a7a609ae5f17618b36652; introduced 0, fixed 2.11.2 fixed in 2.11.2 summary The Jupyter Server provides the backend (i.e.
2023-11-30	PYSEC-2023-250	aiohttp	3.9.0	aiohttp is an asynchronous HTTP client/server framework for asyncio and Python.
published 2023-11-30 modified 2024-01-29 aliases CVE-2023-49081, GHSA-q3qx-c6g2-7pw2 affected introduced 0, fixed 1e86b777e61cf4eefc7d92fa57fa19dcc676013b; introduced 0, fixed 3.9.0 fixed in 3.9.0 summary aiohttp is an asynchronous HTTP client/server framework for asyncio and Python.
2023-11-29	PYSEC-2023-251	aiohttp	3.9.0	aiohttp is an asynchronous HTTP client/server framework for asyncio and Python.
published 2023-11-29 modified 2024-01-29 aliases CVE-2023-49082, GHSA-qvrw-v9rv-5rjx affected introduced 0, fixed e4ae01c2077d2cfa116aa82e4ff6866857f7c466; introduced 0, fixed 3.9.0 fixed in 3.9.0 summary aiohttp is an asynchronous HTTP client/server framework for asyncio and Python.
2023-11-29	PYSEC-2023-254	cryptography	41.0.6	cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.
published 2023-11-29 modified 2024-02-17 aliases CVE-2023-49083, GHSA-jfhm-5ghh-2f97 affected introduced 0, fixed f09c261ca10a31fe41b1262306db7f8f1da0e48a; introduced 3.1, fixed 41.0.6 fixed in 41.0.6 summary cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.
2023-11-17	PYSEC-2023-238	pyarrow	14.0.1	Deserialization of untrusted data in IPC and Parquet readers in PyArrow versions 0.14.0 to 14.0.0 allows arbitrary code execution.
published 2023-11-17 modified 2023-11-20 aliases CVE-2023-47248, GHSA-5wvp-7f3h-6wmm affected introduced 0.14.0, fixed 14.0.1 fixed in 14.0.1 summary Deserialization of untrusted data in IPC and Parquet readers in PyArrow versions 0.14.0 to 14.0.0 allows arbitrary code execution.
2023-11-14	PYSEC-2023-247	aiohttp	3.8.0	aiohttp is an asynchronous HTTP client/server framework for asyncio and Python.
published 2023-11-14 modified 2023-11-22 aliases CVE-2023-47641, GHSA-xx9p-xxvh-7g8j affected introduced 0, fixed f016f0680e4ace6742b03a70cb0382ce86abe371; introduced 0, fixed 3.8.0 fixed in 3.8.0 summary aiohttp is an asynchronous HTTP client/server framework for asyncio and Python.
2023-11-14	PYSEC-2023-246	aiohttp	3.8.6	aiohttp is an asynchronous HTTP client/server framework for asyncio and Python.
published 2023-11-14 modified 2023-11-22 aliases CVE-2023-47627, GHSA-gfw2-4jvh-wgfg affected introduced 0, fixed d5c12ba890557a575c313bb3017910d7616fce3d; introduced 0, fixed 3.8.6 fixed in 3.8.6 summary aiohttp is an asynchronous HTTP client/server framework for asyncio and Python.
2023-11-03	PYSEC-2023-227	pillow	10.0.0	An issue was discovered in Pillow before 10.0.0.
published 2023-11-03 modified 2023-11-03 aliases CVE-2023-44271, GHSA-8ghj-p4vj-mr35 affected introduced 0, fixed 1fe1bb49c452b0318cad12ea9d97c3bef188e9a7; introduced 0, fixed 10.0.0 fixed in 10.0.0 summary An issue was discovered in Pillow before 10.0.0.
2023-11-03	PYSEC-2023-226	django	4.2.6	In Django 3.2 before 3.2.22, 4.1 before 4.1.12, and 4.2 before 4.2.6, the django.utils.text.Truncator chars() and words() methods (when used with html=True) are subject to a potential DoS (denial of …
published 2023-11-03 modified 2023-11-03 aliases CVE-2023-43665, GHSA-h8gc-pgj2-vjm3 affected introduced 3.2, fixed 3.2.22, introduced 4.1, fixed 4.1.12, introduced 4.2, fixed 4.2.6 fixed in 4.2.6 summary In Django 3.2 before 3.2.22, 4.1 before 4.1.12, and 4.2 before 4.2.6, the django.utils.text.Truncator chars() and words() methods (when used with html=True) are subject to a potential DoS (denial of …
2023-11-03	PYSEC-2023-225	django	4.2.5	In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uri_to_iri() is subject to a potential DoS (denial of service) attack via certain inputs with a very large …
published 2023-11-03 modified 2023-11-03 aliases CVE-2023-41164, GHSA-7h4p-27mh-hmrw affected introduced 3.2, fixed 3.2.21, introduced 4.1, fixed 4.1.11, introduced 4.2, fixed 4.2.5 fixed in 4.2.5 summary In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uri_to_iri() is subject to a potential DoS (denial of service) attack via certain inputs with a very large …
2023-11-02	PYSEC-2023-222	django	4.2.7	An issue was discovered in Django 3.2 before 3.2.23, 4.1 before 4.1.13, and 4.2 before 4.2.7.
published 2023-11-02 modified 2023-11-02 aliases CVE-2023-46695, GHSA-qmf9-6jqf-j8fq affected introduced 3.2, fixed 3.2.23, introduced 4.1, fixed 4.1.13, introduced 4.2, fixed 4.2.7 fixed in 4.2.7 summary An issue was discovered in Django 3.2 before 3.2.23, 4.1 before 4.1.13, and 4.2 before 4.2.7.
2023-10-25	PYSEC-2023-221	werkzeug	3.0.1	Werkzeug is a comprehensive WSGI web application library.
published 2023-10-25 modified 2023-11-08 aliases CVE-2023-46136, GHSA-hrfv-mqp8-q5rw affected introduced 0, fixed f3c803b3ade485a45f12b6d6617595350c0f03e2, fixed f2300208d5e2a5076cbbb4c2aad71096fd040ef9; introduced 0, fixed 2.3.8, introduced 3.0.0, fixed 3.0.1 fixed in 3.0.1 summary Werkzeug is a comprehensive WSGI web application library.
2023-10-25	PYSEC-2023-224	twisted	23.10.0rc1	Twisted is an event-based framework for internet applications.
published 2023-10-25 modified 2023-11-02 aliases CVE-2023-46137, GHSA-xc8x-vp79-p3wm affected introduced 0, fixed 23.10.0rc1 fixed in 23.10.0rc1 summary Twisted is an event-based framework for internet applications.
2023-10-25	PYSEC-2023-228	pip	23.3	When installing a package from a Mercurial VCS URL (ie "pip install
published 2023-10-25 modified 2023-11-03 aliases CVE-2023-5752, GHSA-mq26-g339-26xf affected introduced 0, fixed 23.3 fixed in 23.3 summary When installing a package from a Mercurial VCS URL (ie "pip install
2023-10-19	PYSEC-2023-205	langchain	0.0.317	LangChain before 0.0.317 allows SSRF via document_loaders/recursive_url_loader.py because crawling can proceed from an external server to an internal server.
published 2023-10-19 modified 2023-10-19 aliases CVE-2023-46229, GHSA-655w-fm8m-m478 affected introduced 0, fixed 9ecb7240a480720ec9d739b3877a52f76098a2b8; introduced 0, fixed 0.0.317 fixed in 0.0.317 summary LangChain before 0.0.317 allows SSRF via document_loaders/recursive_url_loader.py because crawling can proceed from an external server to an internal server.
2023-10-17	PYSEC-2023-212	urllib3	2.0.7	urllib3 is a user-friendly HTTP client library for Python.
published 2023-10-17 modified 2023-10-25 aliases CVE-2023-45803, GHSA-g4mx-q9vg-27p4 affected introduced 0, fixed 4e98d57809dacab1cbe625fddeec1a290c478ea9; introduced 2.0.0, fixed 2.0.7, introduced 0, fixed 1.26.18 fixed in 2.0.7 summary urllib3 is a user-friendly HTTP client library for Python.
2023-10-15	PYSEC-2023-206	selenium	4.14.0	NULL Pointer Dereference in GitHub repository seleniumhq/selenium prior to 4.14.0.
published 2023-10-15 modified 2023-10-19 aliases CVE-2023-5590 affected introduced 0, fixed 023a0d52f106321838ab1c0997e76693f4dcbdf6; introduced 0, fixed 4.14.0 fixed in 4.14.0 summary NULL Pointer Dereference in GitHub repository seleniumhq/selenium prior to 4.14.0.
2023-10-15	PYSEC-2023-207	urllib3	1.24.2	urllib3 before 1.24.2 does not remove the authorization HTTP header when following a cross-origin redirect (i.e., a redirect that differs in host, port, or scheme).
published 2023-10-15 modified 2023-10-19 aliases CVE-2018-25091, GHSA-gwvm-45gx-3cf8 affected introduced 0, fixed adb358f8e06865406d1f05e581a16cbea2136fbc; introduced 0, fixed 1.24.2 fixed in 1.24.2 summary urllib3 before 1.24.2 does not remove the authorization HTTP header when following a cross-origin redirect (i.e., a redirect that differs in host, port, or scheme).
2023-10-04	PYSEC-2023-192	urllib3	2.0.6	urllib3 is a user-friendly HTTP client library for Python.
published 2023-10-04 modified 2023-10-10 aliases CVE-2023-43804, GHSA-v845-jxx5-vc9f affected introduced 0, fixed 644124ecd0b6e417c527191f866daa05a5a2056d, fixed 01220354d389cd05474713f8c982d05c9b17aafb; introduced 2.0.0, fixed 2.0.6, introduced 0, fixed 1.26.17 fixed in 2.0.6 summary urllib3 is a user-friendly HTTP client library for Python.
2023-09-29	PYSEC-2023-184	opencv-python-headless	4.8.1.78	opencv-python-headless versions before v4.8.1.78 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863.
published 2023-09-29 modified 2023-09-29 affected introduced 0, fixed 4.8.1.78 fixed in 4.8.1.78 summary opencv-python-headless versions before v4.8.1.78 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863.
2023-09-29	PYSEC-2023-183	opencv-python	4.8.1.78	opencv-python versions before v4.8.1.78 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863.
published 2023-09-29 modified 2023-09-29 affected introduced 0, fixed 4.8.1.78 fixed in 4.8.1.78 summary opencv-python versions before v4.8.1.78 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-4863.
2023-09-25	PYSEC-2023-177	gevent	23.9.0	An issue in Gevent before version 23.9.0 allows a remote attacker to escalate privileges via a crafted script to the WSGIServer component.
published 2023-09-25 modified 2023-09-25 aliases CVE-2023-41419, GHSA-x7m3-jprg-wc5g affected introduced 0, fixed 2f53c851eaf926767fbac62385615efd4886221c; introduced 0, fixed 23.9.0 fixed in 23.9.0 summary An issue in Gevent before version 23.9.0 allows a remote attacker to escalate privileges via a crafted script to the WSGIServer component.
2023-09-20	PYSEC-2023-175	pillow	10.0.1	Pillow versions before v10.0.1 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-5129 (previously CVE-2023-4863).
published 2023-09-20 modified 2023-09-25 affected introduced 0, fixed 10.0.1 fixed in 10.0.1 summary Pillow versions before v10.0.1 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-5129 (previously CVE-2023-4863).
2023-09-01	PYSEC-2023-162	langchain	0.0.308	An issue in LanChain-ai Langchain v.0.0.245 allows a remote attacker to execute arbitrary code via the evaluate function in the numexpr library.
published 2023-09-01 modified 2023-10-04 aliases CVE-2023-39631 affected introduced 0, fixed 0.0.308 fixed in 0.0.308 summary An issue in LanChain-ai Langchain v.0.0.245 allows a remote attacker to execute arbitrary code via the evaluate function in the numexpr library.
2023-08-30	PYSEC-2023-165	gitpython	3.1.35	GitPython is a python library used to interact with Git repositories.
published 2023-08-30 modified 2023-09-07 aliases CVE-2023-41040, GHSA-cwvm-v4w8-q58c affected introduced 0, fixed 3.1.35 fixed in 3.1.35 summary GitPython is a python library used to interact with Git repositories.
2023-08-28	PYSEC-2023-157	jupyter-server	2.7.2	jupyter-server is the backend for Jupyter web applications.
published 2023-08-28 modified 2023-09-01 aliases CVE-2023-40170, GHSA-64x5-55rw-9974 affected introduced 0, fixed 87a4927272819f0b1cae1afa4c8c86ee2da002fd; introduced 0, fixed 2.7.2 fixed in 2.7.2 summary jupyter-server is the backend for Jupyter web applications.
2023-08-28	PYSEC-2023-155	jupyter-server	2.7.2	jupyter-server is the backend for Jupyter web applications.
published 2023-08-28 modified 2023-09-01 aliases CVE-2023-39968, GHSA-r726-vmfq-j9j3 affected introduced 0, fixed 290362593b2ffb23c59f8114d76f77875de4b925; introduced 0, fixed 2.7.2 fixed in 2.7.2 summary jupyter-server is the backend for Jupyter web applications.
2023-08-28	PYSEC-2023-161	gitpython	3.1.33	GitPython is a python library used to interact with Git repositories.
published 2023-08-28 modified 2023-09-05 aliases CVE-2023-40590, GHSA-wfm5-v35h-vwf4 affected introduced 0, fixed 3.1.33 fixed in 3.1.33 summary GitPython is a python library used to interact with Git repositories.
2023-08-22	PYSEC-2023-151	langchain	0.0.171	An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via the via the a json file to the load_prompt parameter.
published 2023-08-22 modified 2023-08-29 aliases CVE-2023-36281, GHSA-7gfq-f96f-g85j affected introduced 0, fixed 0.0.171 fixed in 0.0.171 summary An issue in langchain v.0.0.171 allows a remote attacker to execute arbitrary code via the via the a json file to the load_prompt parameter.
2023-08-15	PYSEC-2023-145	langchain	0.0.247	An issue in LangChain v.0.0.231 allows a remote attacker to execute arbitrary code via the prompt parameter.
published 2023-08-15 modified 2023-08-29 aliases CVE-2023-38860, GHSA-fj32-q626-pjjc affected introduced 0, fixed 0.0.247 fixed in 0.0.247 summary An issue in LangChain v.0.0.231 allows a remote attacker to execute arbitrary code via the prompt parameter.
2023-08-15	PYSEC-2023-147	langchain	0.0.233	An issue in langchain langchain-ai v.0.0.232 and before allows a remote attacker to execute arbitrary code via a crafted script to the PythonAstREPLTool._run component.
published 2023-08-15 modified 2023-08-22 aliases CVE-2023-39659, GHSA-prgp-w7vf-ch62 affected introduced 0, fixed 0.0.233 fixed in 0.0.233 summary An issue in langchain langchain-ai v.0.0.232 and before allows a remote attacker to execute arbitrary code via a crafted script to the PythonAstREPLTool._run component.
2023-08-15	PYSEC-2023-146	langchain	0.0.195	An issue in Harrison Chase langchain v.0.0.194 and before allows a remote attacker to execute arbitrary code via the from_math_prompt and from_colored_object_prompt functions.
published 2023-08-15 modified 2023-08-22 aliases CVE-2023-38896, GHSA-92j5-3459-qgp4 affected introduced 0, fixed 0.0.195 fixed in 0.0.195 summary An issue in Harrison Chase langchain v.0.0.194 and before allows a remote attacker to execute arbitrary code via the from_math_prompt and from_colored_object_prompt functions.
2023-08-11	PYSEC-2023-137	gitpython	3.1.32	GitPython before 3.1.32 does not block insecure non-multi options in clone and clone_from.
published 2023-08-11 modified 2023-08-17 aliases CVE-2023-40267, GHSA-pr76-5cm5-w9cj affected introduced 0, fixed ca965ecc81853bca7675261729143f54e5bf4cdd; introduced 0, fixed 3.1.32 fixed in 3.1.32 summary GitPython before 3.1.32 does not block insecure non-multi options in clone and clone_from.
2023-08-05	PYSEC-2023-138	langchain	0.0.236	An issue in Harrison Chase langchain v.0.0.194 allows an attacker to execute arbitrary code via the python exec calls in the PALChain, affected functions include from_math_prompt and from_colored_obj…
published 2023-08-05 modified 2023-08-22 aliases CVE-2023-36095, GHSA-gwqq-6vq7-5j86 affected introduced 0, fixed 0.0.236 fixed in 0.0.236 summary An issue in Harrison Chase langchain v.0.0.194 allows an attacker to execute arbitrary code via the python exec calls in the PALChain, affected functions include from_math_prompt and from_colored_obj…
2023-08-03	PYSEC-2023-135	certifi	2023.7.22	Certifi 2023.07.22 removes root certificates from "e-Tugra" from the root store.
published 2023-08-03 modified 2023-08-07 aliases CVE-2023-37920, GHSA-xqr8-7jwr-rhp7 affected introduced 2015.4.28, fixed 2023.7.22 fixed in 2023.7.22 summary Certifi 2023.07.22 removes root certificates from "e-Tugra" from the root store.
2023-08-01	PYSEC-2023-280	mlflow	2.6.0	OS Command Injection in GitHub repository mlflow/mlflow prior to 2.6.0.
published 2023-08-01 modified 2024-11-21 aliases CVE-2023-4033, GHSA-ffw3-6378-cqgp affected introduced 0, fixed 6dde93758d42455cb90ef324407919ed67668b9b; introduced 0, fixed 2.6.0 fixed in 2.6.0 summary OS Command Injection in GitHub repository mlflow/mlflow prior to 2.6.0.
2023-07-20	PYSEC-2023-120	aiohttp	3.8.5	aiohttp.web.Application vulnerable to HTTP request smuggling via llhttp HTTP request parser
published 2023-07-20 modified 2023-07-24 aliases GHSA-45c4-8wx5-qw6w, CVE-2023-37276 affected introduced 0, fixed 3.8.5 fixed in 3.8.5 summary aiohttp.web.Application vulnerable to HTTP request smuggling via llhttp HTTP request parser
2023-07-19	PYSEC-2023-117	pygments	2.15.1	A ReDoS issue was discovered in pygments/lexers/smithy.py in pygments through 2.15.0 via SmithyLexer.
published 2023-07-19 modified 2023-07-19 aliases CVE-2022-40896, GHSA-mrwq-x4v8-fh7p affected introduced 0, fixed 2.15.1 fixed in 2.15.1 summary A ReDoS issue was discovered in pygments/lexers/smithy.py in pygments through 2.15.0 via SmithyLexer.
2023-07-19	PYSEC-2023-308	mlflow	2.5.0	Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.5.0.
published 2023-07-19 modified 2025-04-09 aliases CVE-2023-3765, GHSA-fmxj-6h9g-6vw3 affected introduced 0, fixed 6dde93758d42455cb90ef324407919ed67668b9b, fixed 6dde93758d42455cb90ef324407919ed67668b9b; introduced 0, fixed 2.5.0 fixed in 2.5.0 summary Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.5.0.
2023-07-15	PYSEC-2023-312 withdrawn	redis	6.2.0	Redis before 6cbea7d allows a replica to cause an assertion failure in a primary server by sending a non-administrative command (specifically, a SET command).
published 2023-07-15 modified 2025-06-02 withdrawn 2025-06-09 aliases CVE-2021-31294 affected introduced 0, fixed 46f4ebbe842620f0976a36741a72482620aa4b48, fixed 6cbea7d29b5285692843bc1c351abba1a7ef326f, fixed 46f4ebbe842620f0976a36741a72482620aa4b48, fixed 6cbea7d29b5285692843bc1c351abba1a7ef326f; introduced 0, fixed 6.2.0 fixed in 6.2.0 summary Redis before 6cbea7d allows a replica to cause an assertion failure in a primary server by sending a non-administrative command (specifically, a SET command).
2023-07-14	PYSEC-2023-112	cryptography	41.0.2	The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options.
published 2023-07-14 modified 2023-08-21 aliases CVE-2023-38325, GHSA-cf7p-gm2m-833m affected introduced 40.0.0, fixed 41.0.2 fixed in 41.0.2 summary The cryptography package before 41.0.2 for Python mishandles SSH certificates that have critical options.
2023-07-06	PYSEC-2023-110	langchain	0.0.247	SQL injection vulnerability in langchain v.0.0.64 allows a remote attacker to obtain sensitive information via the SQLDatabaseChain component.
published 2023-07-06 modified 2023-08-28 aliases CVE-2023-36189, GHSA-7q94-qpjr-xpgm affected introduced 0, fixed 0.0.247 fixed in 0.0.247 summary SQL injection vulnerability in langchain v.0.0.64 allows a remote attacker to obtain sensitive information via the SQLDatabaseChain component.
2023-07-06	PYSEC-2023-109	langchain	0.0.247	An issue in langchain v.0.0.64 allows a remote attacker to execute arbitrary code via the PALChain parameter in the Python exec method.
published 2023-07-06 modified 2023-08-29 aliases CVE-2023-36188, GHSA-57fc-8q82-gfp3 affected introduced 0, fixed 0.0.247 fixed in 0.0.247 summary An issue in langchain v.0.0.64 allows a remote attacker to execute arbitrary code via the PALChain parameter in the Python exec method.
2023-07-06	PYSEC-2023-114	scipy	1.8.0	DISPUTED A use-after-free issue was discovered in Py_FindObjects() function in SciPy versions prior to 1.8.0.
published 2023-07-06 modified 2023-07-17 aliases CVE-2023-29824, GHSA-jrfm-2h82-xg28 affected introduced 0, fixed 1.8.0 fixed in 1.8.0 summary DISPUTED A use-after-free issue was discovered in Py_FindObjects() function in SciPy versions prior to 1.8.0.
2023-07-05	PYSEC-2023-101 withdrawn	selenium		A cross-site scripting (XSS) vulnerability in Selenium Grid v3.141.59 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the hub parameter under the /grid/c…
published 2023-07-05 modified 2023-08-31 withdrawn 2023-08-09 aliases CVE-2020-23452 affected introduced 0 summary A cross-site scripting (XSS) vulnerability in Selenium Grid v3.141.59 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the hub parameter under the /grid/c…
2023-07-05	PYSEC-2023-102	scipy	1.10.0	A refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in Py_FindObjects() function.
published 2023-07-05 modified 2023-08-17 aliases CVE-2023-25399, GHSA-9jx5-6pgf-crrp affected introduced 0, fixed 1.10.0 fixed in 1.10.0 summary A refcounting issue which leads to potential memory leak was discovered in scipy commit 8627df31ab in Py_FindObjects() function.
2023-07-03	PYSEC-2023-98	langchain	0.0.247	An issue in langchain v.0.0.199 allows an attacker to execute arbitrary code via the PALChain in the python exec method.
published 2023-07-03 modified 2023-08-29 aliases CVE-2023-36258, GHSA-2qmj-7962-cjq8 affected introduced 0, fixed 0.0.247 fixed in 0.0.247 summary An issue in langchain v.0.0.199 allows an attacker to execute arbitrary code via the PALChain in the python exec method.
2023-07-03	PYSEC-2023-100	django	4.2.3	In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS (regular expression denial of service) attack via a very large num…
published 2023-07-03 modified 2023-07-11 aliases CVE-2023-36053, GHSA-jh3w-4vvf-mjgr affected introduced 4.2, fixed 4.2.3, introduced 4.0, fixed 4.1.10, introduced 3.2, fixed 3.2.20 fixed in 4.2.3 summary In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS (regular expression denial of service) attack via a very large num…
2023-06-20	PYSEC-2023-92	langchain	0.0.247	Langchain 0.0.171 is vulnerable to Arbitrary code execution in load_prompt.
published 2023-06-20 modified 2023-08-29 aliases CVE-2023-34541, GHSA-6643-h7h5-x9wh affected introduced 0, fixed 0.0.247 fixed in 0.0.247 summary Langchain 0.0.171 is vulnerable to Arbitrary code execution in load_prompt.
2023-06-14	PYSEC-2023-91	langchain	0.0.225	Langchain 0.0.171 is vulnerable to Arbitrary Code Execution.
published 2023-06-14 modified 2023-08-28 aliases CVE-2023-34540, GHSA-x32c-59v5-h7fg affected introduced 0, fixed 0.0.225 fixed in 0.0.225 summary Langchain 0.0.171 is vulnerable to Arbitrary Code Execution.
2023-06-08	PYSEC-2023-88	snowflake-connector-python	3.0.2	The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all standard operations.
published 2023-06-08 modified 2023-06-16 aliases CVE-2023-34233, GHSA-5w5m-pfw9-c8fp affected introduced 0, fixed 1cdbd3b1403c5ef520d7f4d9614fe35165e101ac; introduced 0, fixed 3.0.2 fixed in 3.0.2 summary The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all standard operations.
2023-06-01	PYSEC-2023-83	starlette	0.27.0	Directory traversal vulnerability in Starlette versions 0.13.5 and later and prior to 0.27.0 allows a remote unauthenticated attacker to view files in a web service which was built using Starlette.
published 2023-06-01 modified 2023-06-08 aliases CVE-2023-29159, GHSA-v5gw-mw7f-84px affected introduced 0.13.5, fixed 0.27.0 fixed in 0.27.0 summary Directory traversal vulnerability in Starlette versions 0.13.5 and later and prior to 0.27.0 allows a remote unauthenticated attacker to view files in a web service which was built using Starlette.
2023-05-26	PYSEC-2023-74	requests	2.31.0	Requests is a HTTP library.
published 2023-05-26 modified 2023-06-05 aliases CVE-2023-32681, GHSA-j8r2-6x86-q33q affected introduced 0, fixed 74ea7cf7a6a27a4eeb2ae24e162bcc942a6706d5; introduced 2.3.0, fixed 2.31.0 fixed in 2.31.0 summary Requests is a HTTP library.
2023-05-25	PYSEC-2023-75	tornado	6.3.2	Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user acc…
published 2023-05-25 modified 2023-06-05 aliases CVE-2023-28370, GHSA-hj3f-6gcp-jg8j affected introduced 0, fixed 6.3.2 fixed in 6.3.2 summary Open redirect vulnerability in Tornado versions 6.3.1 and earlier allows a remote unauthenticated attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having user acc…
2023-05-18	PYSEC-2023-73 withdrawn	redis		redis-7.0.10 was discovered to contain a segmentation violation.
published 2023-05-18 modified 2023-06-27 withdrawn 2023-06-06 aliases CVE-2023-31655 affected introduced 0 summary redis-7.0.10 was discovered to contain a segmentation violation.
2023-05-18	PYSEC-2023-299	transformers	4.30.0	Insecure Temporary File in GitHub repository huggingface/transformers prior to 4.30.0.
published 2023-05-18 modified 2024-11-21 aliases CVE-2023-2800, GHSA-282v-666c-3fvg affected introduced 0, fixed 80ca92470938bbcc348e2d9cf4734c7c25cb1c43; introduced 0, fixed 4.30.0 fixed in 4.30.0 summary Insecure Temporary File in GitHub repository huggingface/transformers prior to 4.30.0.
2023-05-17	PYSEC-2023-69	mlflow	2.3.1	Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.3.1.
published 2023-05-17 modified 2023-06-05 aliases CVE-2023-2780, GHSA-wjq3-7jxx-whj9 affected introduced 0, fixed fae77a525dd908c56d6204a4cef1c1c75b4e9857; introduced 0, fixed 2.3.1 fixed in 2.3.1 summary Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.3.1.
2023-05-11	PYSEC-2023-70	mlflow	2.0.1	A directory traversal vulnerability in the /get-artifact API method of the mlflow platform up to v2.0.1 allows attackers to read arbitrary files on the server via the path parameter.
published 2023-05-11 modified 2023-06-05 aliases CVE-2023-30172, GHSA-wc6j-5g83-xfm6 affected introduced 0, fixed 2.0.1 fixed in 2.0.1 summary A directory traversal vulnerability in the /get-artifact API method of the mlflow platform up to v2.0.1 allows attackers to read arbitrary files on the server via the path parameter.
2023-05-07	PYSEC-2023-61	django	4.2.1	In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files.
published 2023-05-07 modified 2023-06-05 aliases CVE-2023-31047, GHSA-r3xc-prgr-mg9p affected introduced 3.2, fixed 3.2.19, introduced 4.0, fixed 4.1.9, introduced 4.2, fixed 4.2.1 fixed in 4.2.1 summary In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files.
2023-05-02	PYSEC-2023-62	flask	2.3.2	Flask is a lightweight WSGI web application framework.
published 2023-05-02 modified 2023-06-05 aliases CVE-2023-30861, GHSA-m2qf-hxjv-5gpq affected introduced 0, fixed 70f906c51ce49c485f1d355703e9cc3386b1cc2b, fixed afd63b16170b7c047f5758eb910c416511e9c965; introduced 0, fixed 2.2.5, introduced 2.3.0, fixed 2.3.2 fixed in 2.3.2 summary Flask is a lightweight WSGI web application framework.
2023-05-02	PYSEC-2023-72	pyspark	3.2.2	UNSUPPORTED WHEN ASSIGNED The Apache Spark UI offers the possibility to enable ACLs via the configuration option spark.acls.enable.
published 2023-05-02 modified 2026-06-08 aliases CVE-2023-32007, GHSA-59hw-j9g6-mfg3 affected introduced 0, fixed 3.2.2 fixed in 3.2.2 summary UNSUPPORTED WHEN ASSIGNED The Apache Spark UI offers the possibility to enable ACLs via the configuration option spark.acls.enable.
2023-04-28	PYSEC-2023-68	mlflow	2.3.1	Relative Path Traversal in GitHub repository mlflow/mlflow prior to 2.3.1.
published 2023-04-28 modified 2023-06-05 aliases CVE-2023-2356, GHSA-x422-6qhv-p29g affected introduced 0, fixed f73147496e05c09a8b83d95fb4f1bf86696c6342; introduced 0, fixed 2.3.1 fixed in 2.3.1 summary Relative Path Traversal in GitHub repository mlflow/mlflow prior to 2.3.1.
2023-04-21	PYSEC-2023-48	starlette	0.25.0	There MultipartParser usage in Encode's Starlette python framework before versions 0.25.0 allows an unauthenticated and remote attacker to specify any number of form fields or files which can cause e…
published 2023-04-21 modified 2023-05-04 aliases CVE-2023-30798, GHSA-74m5-2c7w-9w3x affected introduced 0, fixed 8c74c2c8dba7030154f8af18e016136bea1938fa; introduced 0, fixed 0.25.0 fixed in 0.25.0 summary There MultipartParser usage in Encode's Starlette python framework before versions 0.25.0 allows an unauthenticated and remote attacker to specify any number of form fields or files which can cause e…
2023-04-18	PYSEC-2023-87	sqlparse	0.4.4	sqlparse is a non-validating SQL parser module for Python.
published 2023-04-18 modified 2023-06-14 aliases CVE-2023-30608, GHSA-rrm6-wvj7-cwh2 affected introduced 0, fixed c457abd5f097dd13fb21543381e7cfafe7d31cfb, fixed e75e35869473832a1eb67772b1adfee2db11b85a; introduced 0.1.15, fixed 0.4.4 fixed in 0.4.4 summary sqlparse is a non-validating SQL parser module for Python.
2023-04-17	PYSEC-2023-44	pyspark	3.4.0	In Apache Spark versions prior to 3.4.0, applications using spark-submit can specify a 'proxy-user' to run as, limiting privileges.
published 2023-04-17 modified 2026-06-10 aliases CVE-2023-22946, GHSA-329j-jfvr-rhr6 affected introduced 0, fixed 3.4.0 fixed in 3.4.0 summary In Apache Spark versions prior to 3.4.0, applications using spark-submit can specify a 'proxy-user' to run as, limiting privileges.
2023-04-05	PYSEC-2023-18	langchain	0.0.132	In LangChain through 0.0.131, the LLMMathChain chain allows prompt injection attacks that can execute arbitrary code via the Python exec method.
published 2023-04-05 modified 2023-05-04 aliases CVE-2023-29374, GHSA-fprp-p869-w6q2 affected introduced 0, fixed 0.0.132 fixed in 0.0.132 summary In LangChain through 0.0.131, the LLMMathChain chain allows prompt injection attacks that can execute arbitrary code via the Python exec method.
2023-03-26	PYSEC-2023-46	redis	4.5.4	redis-py through 4.5.3 leaves a connection open after canceling an async Redis command at an inopportune time (in the case of a non-pipeline operation), and can send response data to the client of an…
published 2023-03-26 modified 2023-06-05 aliases CVE-2023-28859, GHSA-8fww-64cx-x8p5 affected introduced 4.2.0, fixed 4.4.4, introduced 4.5.0, fixed 4.5.4 fixed in 4.5.4 summary redis-py through 4.5.3 leaves a connection open after canceling an async Redis command at an inopportune time (in the case of a non-pipeline operation), and can send response data to the client of an…
2023-03-26	PYSEC-2023-45	redis	4.5.3	redis-py before 4.5.3, as used in ChatGPT and other products, leaves a connection open after canceling an async Redis command at an inopportune time (in the case of a pipeline operation), and can sen…
published 2023-03-26 modified 2023-06-05 aliases CVE-2023-28858, GHSA-24wv-mv5m-xv4h affected introduced 4.2.0, fixed 4.3.6, introduced 4.4.0, fixed 4.4.3, introduced 4.5.0, fixed 4.5.3 fixed in 4.5.3 summary redis-py before 4.5.3, as used in ChatGPT and other products, leaves a connection open after canceling an async Redis command at an inopportune time (in the case of a pipeline operation), and can sen…
2023-03-24	PYSEC-2023-29	mlflow	2.2.1	Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.2.1.
published 2023-03-24 modified 2023-05-04 aliases CVE-2023-1177, GHSA-xg73-94fp-g449 affected introduced 0, fixed 7162a50c654792c21f3e4a160eb1a0e6a34f6e6e; introduced 0, fixed 2.2.1 fixed in 2.2.1 summary Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.2.1.
2023-03-24	PYSEC-2023-28	mlflow	2.2.2	Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.2.2.
published 2023-03-24 modified 2023-05-04 aliases CVE-2023-1176, GHSA-wp72-7hj9-5265 affected introduced 0, fixed 63ef72aa4334a6473ce7f889573c92fcae0b3c0d; introduced 0, fixed 2.2.2 fixed in 2.2.2 summary Absolute Path Traversal in GitHub repository mlflow/mlflow prior to 2.2.2.
2023-03-16	PYSEC-2023-50	streamlit	0.81.0	Streamlit, software for turning data scripts into web applications, had a cross-site scripting (XSS) vulnerability in versions 0.63.0 through 0.80.0.
published 2023-03-16 modified 2023-05-04 aliases CVE-2023-27494, GHSA-9c6g-qpgj-rvxw affected introduced 0, fixed afcf880c60e5d7538936cc2d9721b9e1bc02b075; introduced 0.63.0, fixed 0.81.0 fixed in 0.81.0 summary Streamlit, software for turning data scripts into web applications, had a cross-site scripting (XSS) vulnerability in versions 0.63.0 through 0.80.0.
2023-02-23	PYSEC-2023-24	markdown-it-py	2.2.0	Denial of service could be caused to markdown-it-py, before v2.2.0, if an attacker was allowed to force null assertions with specially crafted input.
published 2023-02-23 modified 2023-05-04 aliases CVE-2023-26303, GHSA-vrjv-mxr7-vjf8 affected introduced 0, fixed ae03c6107dfa18e648f6fdd1280f5b89092d5d49; introduced 0, fixed 2.2.0 fixed in 2.2.0 summary Denial of service could be caused to markdown-it-py, before v2.2.0, if an attacker was allowed to force null assertions with specially crafted input.
2023-02-22	PYSEC-2023-23	markdown-it-py	2.2.0	Denial of service could be caused to the command line interface of markdown-it-py, before v2.2.0, if an attacker was allowed to use invalid UTF-8 characters as input.
published 2023-02-22 modified 2023-05-04 aliases CVE-2023-26302, GHSA-jrwr-5x3p-hvc3 affected introduced 0, fixed 53ca3e9c2b9e9b295f6abf7f4ad2730a9b70f68c; introduced 0, fixed 2.2.0 fixed in 2.2.0 summary Denial of service could be caused to the command line interface of markdown-it-py, before v2.2.0, if an attacker was allowed to use invalid UTF-8 characters as input.
2023-02-15	PYSEC-2023-13	django	4.1.7	An issue was discovered in the Multipart Request Parser in Django 3.2 before 3.2.18, 4.0 before 4.0.10, and 4.1 before 4.1.7.
published 2023-02-15 modified 2023-05-04 aliases CVE-2023-24580, GHSA-2hrw-hx67-34x6 affected introduced 3.2, fixed 3.2.18, introduced 4.0, fixed 4.0.10, introduced 4.1, fixed 4.1.7 fixed in 4.1.7 summary An issue was discovered in the Multipart Request Parser in Django 3.2 before 3.2.18, 4.0 before 4.0.10, and 4.1 before 4.1.7.
2023-02-14	PYSEC-2023-58	werkzeug	2.2.3	Werkzeug is a comprehensive WSGI web application library.
published 2023-02-14 modified 2023-05-04 aliases CVE-2023-25577, GHSA-xg9f-g7g7-2323 affected introduced 0, fixed 517cac5a804e8c4dc4ed038bb20dacd038e7a9f1; introduced 0, fixed 2.2.3 fixed in 2.2.3 summary Werkzeug is a comprehensive WSGI web application library.
2023-02-14	PYSEC-2023-57	werkzeug	2.2.3	Werkzeug is a comprehensive WSGI web application library.
published 2023-02-14 modified 2023-05-04 aliases CVE-2023-23934, GHSA-px8h-6qxv-m22q affected introduced 0, fixed cf275f42acad1b5950c50ffe8ef58fe62cdce028; introduced 0, fixed 2.2.3 fixed in 2.2.3 summary Werkzeug is a comprehensive WSGI web application library.
2023-02-10	PYSEC-2023-17	ipython	8.10.0	IPython (Interactive Python) is a command shell for interactive computing in multiple programming languages, originally developed for the Python programming language.
published 2023-02-10 modified 2023-05-04 aliases CVE-2023-24816, GHSA-29gw-9793-fvw7 affected introduced 0, fixed 385d69325319a5972ee9b5983638e3617f21cb1f; introduced 0, fixed 8.10.0 fixed in 8.10.0 summary IPython (Interactive Python) is a command shell for interactive computing in multiple programming languages, originally developed for the Python programming language.
2023-02-07	PYSEC-2023-11	cryptography	39.0.1	cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.
published 2023-02-07 modified 2023-05-04 aliases CVE-2023-23931, GHSA-w7pp-m8wf-vj6r affected introduced 0, fixed 94a50a9731f35405f0357fa5f3b177d46a726ab3; introduced 1.8, fixed 39.0.1 fixed in 39.0.1 summary cryptography is a package designed to expose cryptographic primitives and recipes to Python developers.
2023-02-01	PYSEC-2023-12	django	4.1.6	In Django 3.2 before 3.2.17, 4.0 before 4.0.9, and 4.1 before 4.1.6, the parsed values of Accept-Language headers are cached in order to avoid repetitive parsing.
published 2023-02-01 modified 2023-05-04 aliases CVE-2023-23969, GHSA-q2jf-h9jm-m7p4 affected introduced 3.2, fixed 3.2.17, introduced 4.0, fixed 4.0.9, introduced 4.1, fixed 4.1.6 fixed in 4.1.6 summary In Django 3.2 before 3.2.17, 4.0 before 4.0.9, and 4.1 before 4.1.6, the parsed values of Accept-Language headers are cached in order to avoid repetitive parsing.
2022-12-23	PYSEC-2022-43017	wheel	0.38.1	An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli.
published 2022-12-23 modified 2023-05-04 aliases CVE-2022-40898, GHSA-qwmp-2cf2-g9g6 affected introduced 0, fixed 0.38.1 fixed in 0.38.1 summary An issue discovered in Python Packaging Authority (PyPA) Wheel 0.37.1 and earlier allows remote attackers to cause a denial of service via attacker controlled input to wheel cli.
2022-12-23	PYSEC-2022-43012	setuptools	65.5.1	Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page.
published 2022-12-23 modified 2023-05-04 aliases CVE-2022-40897, GHSA-r9hx-vwmv-q579 affected introduced 0, fixed 43a9c9bfa6aa626ec2a22540bea28d2ca77964be; introduced 0, fixed 65.5.1 fixed in 65.5.1 summary Python Packaging Authority (PyPA) setuptools before 65.5.1 allows remote attackers to cause a denial of service via HTML in a crafted package or custom PackageIndex page.
2022-12-23	PYSEC-2022-42991	future	0.18.3	An issue discovered in Python Charmers Future 0.18.2 and earlier allows remote attackers to cause a denial of service via crafted Set-Cookie header from malicious web server.
published 2022-12-23 modified 2023-05-04 aliases CVE-2022-40899, GHSA-v3c5-jqr6-7qm8 affected introduced 0, fixed 0.18.3 fixed in 0.18.3 summary An issue discovered in Python Charmers Future 0.18.2 and earlier allows remote attackers to cause a denial of service via crafted Set-Cookie header from malicious web server.
2022-12-07	PYSEC-2022-42986	certifi	2022.12.7	Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts.
published 2022-12-07 modified 2023-05-04 aliases CVE-2022-23491, GHSA-43fp-rhv2-5gv8 affected introduced 2017.11.5, fixed 2022.12.7 fixed in 2022.12.7 summary Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts.
2022-12-06	PYSEC-2022-42992	gitpython	3.1.30	All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clon…
published 2022-12-06 modified 2023-05-04 aliases CVE-2022-24439, GHSA-hcpj-qp55-gfph affected introduced 0, fixed 3.1.30 fixed in 3.1.30 summary All versions of package gitpython are vulnerable to Remote Code Execution (RCE) due to improper user input validation, which makes it possible to inject a maliciously crafted remote URL into the clon…
2022-11-26	PYSEC-2022-43015	torch	1.13.1	In PyTorch before trunk/89695, torch.jit.annotations.parse_type_line can cause arbitrary code execution because eval is used unsafely.
published 2022-11-26 modified 2023-05-04 aliases CVE-2022-45907, GHSA-47fc-vmwq-366v affected introduced 0, fixed 767f6aa49fe20a2766b9843d01e3b7f7793df6a3; introduced 0, fixed 1.13.1 fixed in 1.13.1 summary In PyTorch before trunk/89695, torch.jit.annotations.parse_type_line can cause arbitrary code execution because eval is used unsafely.
2022-11-14	PYSEC-2022-42980	pillow	9.3.0	Pillow before 9.3.0 allows denial of service via SAMPLESPERPIXEL.
published 2022-11-14 modified 2023-05-25 aliases CVE-2022-45199, GHSA-q4mp-jvh2-76fj affected introduced 0, fixed 2444cddab2f83f28687c7c20871574acbb6dbcf3; introduced 9.2.0, fixed 9.3.0 fixed in 9.3.0 summary Pillow before 9.3.0 allows denial of service via SAMPLESPERPIXEL.
2022-11-14	PYSEC-2022-42979	pillow	9.2.0	Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data (Data Amplification).
published 2022-11-14 modified 2022-11-14 aliases CVE-2022-45198, GHSA-m2vv-5vj5-2hm7 affected introduced 0, fixed 11918eac0628ec8ac0812670d9838361ead2d6a4; introduced 0, fixed 9.2.0 fixed in 9.2.0 summary Pillow before 9.2.0 performs Improper Handling of Highly Compressed GIF Data (Data Amplification).
2022-11-09	PYSEC-2022-43178	cleo	2.0.0	An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the cleo PyPI package, when an attacker is able to supply arbitrary input to the Table.set_rows method
published 2022-11-09 modified 2025-04-09 aliases CVE-2022-42966, GHSA-2p9h-ccw7-33gf affected introduced 0, fixed 2.0.0 fixed in 2.0.0 summary An exponential ReDoS (Regular Expression Denial of Service) can be triggered in the cleo PyPI package, when an attacker is able to supply arbitrary input to the Table.set_rows method
2022-11-04	PYSEC-2022-42969 withdrawn	py		The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data, because the InfoS…
published 2022-11-04 modified 2022-11-04 withdrawn 2026-06-09 aliases CVE-2022-42969, GHSA-w596-4wvx-j9j6 affected introduced 0, last_affected 1.11.0 summary The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS (Regular expression Denial of Service) attack via a Subversion repository with crafted info data, because the InfoS…
2022-11-01	PYSEC-2022-42976	pyspark	3.2.2	A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a ma…
published 2022-11-01 modified 2022-11-07 aliases CVE-2022-31777, GHSA-43xg-8wmj-cw8h affected introduced 0, fixed 3.2.2 fixed in 3.2.2 summary A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a ma…
2022-10-26	PYSEC-2022-42974	jupyter-core	4.11.2	Jupyter Core is a package for the core common functionality of Jupyter projects.
published 2022-10-26 modified 2022-11-09 aliases CVE-2022-39286, GHSA-m678-f26j-3hrp affected introduced 0, fixed 1118c8ce01800cb689d51f655f5ccef19516e283; introduced 0, fixed 4.11.2 fixed in 4.11.2 summary Jupyter Core is a package for the core common functionality of Jupyter projects.
2022-10-16	PYSEC-2022-304	django	4.1.2	In Django 3.2 before 3.2.16, 4.0 before 4.0.8, and 4.1 before 4.1.2, internationalized URLs were subject to a potential denial of service attack via the locale parameter, which is treated as a regula…
published 2022-10-16 modified 2022-10-16 aliases CVE-2022-41323, GHSA-qrw5-5h28-6cmg affected introduced 0, fixed 5b6b257fa7ec37ff27965358800c67e2dd11c924; introduced 3.2, fixed 3.2.16, introduced 4.0, fixed 4.0.8, introduced 4.1, fixed 4.1.2 fixed in 4.1.2 summary In Django 3.2 before 3.2.16, 4.0 before 4.0.8, and 4.1 before 4.1.2, internationalized URLs were subject to a potential denial of service attack via the locale parameter, which is treated as a regula…
2022-09-26	PYSEC-2022-288	joblib	1.2.0	The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the pre_dispatch flag in Parallel() class due to the eval() statement.
published 2022-09-26 modified 2022-10-10 aliases CVE-2022-21797, GHSA-6hrg-qmvc-2xh8 affected introduced 0, fixed b90f10efeb670a2cc877fb88ebb3f2019189e059; introduced 0, fixed 1.2.0 fixed in 1.2.0 summary The package joblib from 0 and before 1.2.0 are vulnerable to Arbitrary Code Execution via the pre_dispatch flag in Parallel() class due to the eval() statement.
2022-09-09	PYSEC-2022-269	oauthlib	3.2.1	OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+.
published 2022-09-09 modified 2022-09-15 aliases CVE-2022-36087, GHSA-3pgj-pg6c-r5p7 affected introduced 0, fixed 2e40b412c844ecc4673c3fa3f72181f228bdbacd; introduced 3.1.1, fixed 3.2.1 fixed in 3.2.1 summary OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+.
2022-09-07	PYSEC-2022-266	poetry	1.1.9	Poetry is a dependency manager for Python.
published 2022-09-07 modified 2022-09-13 aliases CVE-2022-36069, GHSA-9xgj-fcgf-x6mw affected introduced 0, fixed 1.1.9 fixed in 1.1.9 summary Poetry is a dependency manager for Python.
2022-09-07	PYSEC-2022-260	mako	1.2.2	Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse.
published 2022-09-07 modified 2022-09-07 aliases CVE-2022-40023, GHSA-v973-fxgf-6xhp affected introduced 0, fixed 925760291d6efec64fda6e9dd1fd9cfbd5be068c; introduced 0, fixed 1.2.2 fixed in 1.2.2 summary Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse.
2022-09-07	PYSEC-2022-43179	poetry	1.1.9	Poetry is a dependency manager for Python.
published 2022-09-07 modified 2025-04-09 aliases CVE-2022-36070, GHSA-j4j9-7hg9-97g6 affected introduced 0, fixed 1.1.9 fixed in 1.1.9 summary Poetry is a dependency manager for Python.
2022-08-18	PYSEC-2022-249	nbconvert	6.3.0a0	The GitHub Security Lab discovered sixteen ways to exploit a cross-site scripting vulnerability in nbconvert.
published 2022-08-18 modified 2022-08-20 aliases CVE-2021-32862, GHSA-9jmq-rx5f-8jwq, GHSA-h274-fcvj-h2wm affected introduced 0, fixed 6.3.0a0 fixed in 6.3.0a0 summary The GitHub Security Lab discovered sixteen ways to exploit a cross-site scripting vulnerability in nbconvert.
2022-08-03	PYSEC-2022-245	django	4.0.7	An issue was discovered in the HTTP FileResponse class in Django 3.2 before 3.2.15 and 4.0 before 4.0.7.
published 2022-08-03 modified 2022-08-03 aliases CVE-2022-36359, GHSA-8x94-hmjh-97hq affected introduced 3.2, fixed 3.2.15, introduced 4.0, fixed 4.0.7 fixed in 4.0.7 summary An issue was discovered in the HTTP FileResponse class in Django 3.2 before 3.2.15 and 4.0 before 4.0.7.
2022-08-01	PYSEC-2022-248	streamlit	1.11.1	Streamlit is a data oriented application development framework for python.
published 2022-08-01 modified 2022-08-10 aliases CVE-2022-35918, GHSA-v4hr-4jpx-56gc affected introduced 0, fixed 80d9979d5f4a00217743d607078a1d867fad8acf; introduced 0.63.0, fixed 1.11.1 fixed in 1.11.1 summary Streamlit is a data oriented application development framework for python.
2022-07-25	PYSEC-2022-237	mistune	2.0.3	In mistune through 2.0.2, support of inline markup is implemented by using regular expressions that can involve a high amount of backtracking on certain edge cases.
published 2022-07-25 modified 2022-07-26 aliases CVE-2022-34749, GHSA-fw3v-x4f2-v673 affected introduced 0, fixed a6d43215132fe4f3d93f8d7e90ba83b16a0838b2; introduced 2.0.0a1, fixed 2.0.3 fixed in 2.0.3 summary In mistune through 2.0.2, support of inline markup is implemented by using regular expressions that can involve a high amount of backtracking on certain edge cases.
2022-07-18	PYSEC-2022-236	pyspark	3.2.2	The Apache Spark UI offers the possibility to enable ACLs via the configuration option spark.acls.enable.
published 2022-07-18 modified 2022-07-25 aliases CVE-2022-33891, GHSA-4x9r-j582-cgr8 affected introduced 0, fixed 3.1.3, introduced 3.2.0, fixed 3.2.2 fixed in 3.2.2 summary The Apache Spark UI offers the possibility to enable ACLs via the configuration option spark.acls.enable.
2022-07-05	PYSEC-2022-230	lxml	4.9.1	NULL Pointer Dereference allows attackers to cause a denial of service (or application crash).
published 2022-07-05 modified 2023-05-25 aliases CVE-2022-2309, GHSA-wrxv-2j5q-m38w affected introduced 0, fixed 86368e9cf70a0ad23cccd5ee32de847149af0c6f; introduced 0, fixed 4.9.1 fixed in 4.9.1 summary NULL Pointer Dereference allows attackers to cause a denial of service (or application crash).
2022-07-04	PYSEC-2022-213	django	4.0.6	An issue was discovered in Django 3.2 before 3.2.14 and 4.0 before 4.0.6.
published 2022-07-04 modified 2022-07-04 aliases CVE-2022-34265, GHSA-p64x-8rxx-wf6q affected introduced 3.2, fixed 3.2.14, introduced 4.0, fixed 4.0.6 fixed in 4.0.6 summary An issue was discovered in Django 3.2 before 3.2.14 and 4.0 before 4.0.6.
2022-06-23	PYSEC-2022-43162 withdrawn	redis		Redis v7.0 was discovered to contain a memory leak via the component streamGetEdgeID.
published 2022-06-23 modified 2024-12-23 withdrawn 2024-11-22 aliases CVE-2022-33105 affected introduced 0, fixed 4a7a4e42db8ff757cdf3f4a824f66426036034ef; introduced 0 summary Redis v7.0 was discovered to contain a memory leak via the component streamGetEdgeID.
2022-06-23	PYSEC-2022-43059 withdrawn	aiohttp		AIOHTTP 3.8.1 can report a "ValueError: Invalid IPv6 URL" outcome, which can lead to a Denial of Service (DoS).
published 2022-06-23 modified 2026-06-10 withdrawn 2023-11-08 aliases CVE-2022-33124, GHSA-rwqr-c348-m5wr affected introduced 0 summary AIOHTTP 3.8.1 can report a "ValueError: Invalid IPv6 URL" outcome, which can lead to a Denial of Service (DoS).
2022-06-14	PYSEC-2022-211	jupyter-server	1.17.0	Jupyter Server provides the backend (i.e.
published 2022-06-14 modified 2022-06-24 aliases CVE-2022-29241, GHSA-q874-g24w-4q9g affected introduced 0, fixed 1.17.0 fixed in 1.17.0 summary Jupyter Server provides the backend (i.e.
2022-06-14	PYSEC-2022-212	notebook	6.4.12	Jupyter Notebook is a web-based notebook environment for interactive computing.
published 2022-06-14 modified 2022-08-24 aliases CVE-2022-29238, GHSA-v7vq-3x77-87vg affected introduced 0, fixed 6.4.12 fixed in 6.4.12 summary Jupyter Notebook is a web-based notebook environment for interactive computing.
2022-05-25	PYSEC-2022-43145	pillow	9.1.1	libImaging/TgaRleDecode.c in Pillow 9.1.0 has a heap buffer overflow in the processing of invalid TGA image files.
published 2022-05-25 modified 2024-11-25 aliases CVE-2022-30595, GHSA-hr8g-f6r6-mr22 affected introduced 9.1.0, fixed 9.1.1 fixed in 9.1.1 summary libImaging/TgaRleDecode.c in Pillow 9.1.0 has a heap buffer overflow in the processing of invalid TGA image files.
2022-05-25	PYSEC-2022-203	werkzeug	2.1.1	DISPUTED Improper parsing of HTTP requests in Pallets Werkzeug v2.1.0 and below allows attackers to perform HTTP Request Smuggling using a crafted HTTP request with multiple requests included i…
published 2022-05-25 modified 2022-06-07 aliases CVE-2022-29361 affected introduced 0, fixed 9a3a981d70d2e9ec3344b5192f86fcaf3210cd85; introduced 0, fixed 2.1.1 fixed in 2.1.1 summary DISPUTED Improper parsing of HTTP requests in Pallets Werkzeug v2.1.0 and below allows attackers to perform HTTP Request Smuggling using a crafted HTTP request with multiple requests included i…
2022-05-24	PYSEC-2022-202	pyjwt	2.4.0	PyJWT is a Python implementation of RFC 7519.
published 2022-05-24 modified 2022-06-07 aliases CVE-2022-29217, GHSA-ffqj-6fqr-9h24 affected introduced 0, fixed 9c528670c455b8d948aff95ed50e22940d1ad3fc; introduced 1.5.0, fixed 2.4.0 fixed in 2.4.0 summary PyJWT is a Python implementation of RFC 7519.
2022-04-28	PYSEC-2022-183	httpx	0.20.0	Encode OSS httpx <=1.0.0.beta0 is affected by improper input validation in `httpx.URL`, `httpx.Client` and some functions using `httpx.URL.copy_with`.
published 2022-04-28 modified 2022-05-17 aliases CVE-2021-41945, GHSA-h8pj-cxx2-jfg2 affected introduced 0, fixed 0.20.0 fixed in 0.20.0 summary Encode OSS httpx <=1.0.0.beta0 is affected by improper input validation in `httpx.URL`, `httpx.Client` and some functions using `httpx.URL.copy_with`.
2022-04-19	PYSEC-2022-43167	selenium	4.0.0	Selenium Server (Grid) before 4 allows CSRF because it permits non-JSON content types such as application/x-www-form-urlencoded, multipart/form-data, and text/plain.
published 2022-04-19 modified 2024-11-21 aliases CVE-2022-28108 affected introduced 0, fixed 4.0.0 fixed in 4.0.0 summary Selenium Server (Grid) before 4 allows CSRF because it permits non-JSON content types such as application/x-www-form-urlencoded, multipart/form-data, and text/plain.
2022-04-18	PYSEC-2022-194	pypdf2	1.27.5	PyPDF2 is an open source python PDF library capable of splitting, merging, cropping, and transforming the pages of PDF files.
published 2022-04-18 modified 2022-05-17 aliases CVE-2022-24859, GHSA-xcjx-m2pj-8g79 affected introduced 0, fixed 1.27.5 fixed in 1.27.5 summary PyPDF2 is an open source python PDF library capable of splitting, merging, cropping, and transforming the pages of PDF files.
2022-04-12	PYSEC-2022-191	django	4.0.4	A SQL injection issue was discovered in QuerySet.explain() in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4.
published 2022-04-12 modified 2022-05-17 aliases CVE-2022-28347, GHSA-w24h-v9qh-8gxj affected introduced 4.0, fixed 4.0.4, introduced 3.2, fixed 3.2.13, introduced 2.2, fixed 2.2.28 fixed in 4.0.4 summary A SQL injection issue was discovered in QuerySet.explain() in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4.
2022-04-12	PYSEC-2022-190	django	4.0.4	An issue was discovered in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4.
published 2022-04-12 modified 2022-05-17 aliases CVE-2022-28346, GHSA-2gwj-7jmv-h26r affected introduced 4.0, fixed 4.0.4, introduced 3.2, fixed 3.2.13, introduced 2.2, fixed 2.2.28 fixed in 4.0.4 summary An issue was discovered in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4.
2022-04-04	PYSEC-2022-195	twisted	22.4.0	Twisted is an event-based framework for internet applications, supporting Python 3.6+.
published 2022-04-04 modified 2022-05-17 aliases CVE-2022-24801, GHSA-c2jg-hw38-jrqq affected introduced 0, fixed 592217e951363d60e9cd99c5bbfd23d4615043ac; introduced 0, fixed 22.4.0 fixed in 22.4.0 summary Twisted is an event-based framework for internet applications, supporting Python 3.6+.
2022-03-31	PYSEC-2022-180	notebook	6.4.10	The Jupyter notebook is a web-based notebook environment for interactive computing.
published 2022-03-31 modified 2022-04-11 aliases CVE-2022-24758, GHSA-m87f-39q9-6f55 affected introduced 0, fixed 6.4.10 fixed in 6.4.10 summary The Jupyter notebook is a web-based notebook environment for interactive computing.
2022-03-28	PYSEC-2022-168	pillow	9.0.1	Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled.
published 2022-03-28 modified 2022-03-28 aliases CVE-2022-24303, GHSA-9j59-75qj-795w affected introduced 0, fixed 9.0.1 fixed in 9.0.1 summary Pillow before 9.0.1 allows attackers to delete files because spaces in temporary pathnames are mishandled.
2022-03-23	PYSEC-2022-179	jupyter-server	1.15.4	The Jupyter Server provides the backend (i.e.
published 2022-03-23 modified 2022-04-11 aliases CVE-2022-24757, GHSA-p737-p57g-4cpr affected introduced 0, fixed a5683aca0b0e412672ac6218d09f74d44ca0de5a; introduced 0, fixed 1.15.4 fixed in 1.15.4 summary The Jupyter Server provides the backend (i.e.
2022-03-21	PYSEC-2022-234	poetry	1.1.9	Poetry v1.1.9 and below was discovered to contain an untrusted search path which causes the application to behave in unexpected ways when users execute Poetry commands in a directory containing malic…
published 2022-03-21 modified 2023-05-25 aliases CVE-2022-26184, GHSA-xr2c-5w89-63pv affected introduced 0, fixed 1.1.9 fixed in 1.1.9 summary Poetry v1.1.9 and below was discovered to contain an untrusted search path which causes the application to behave in unexpected ways when users execute Poetry commands in a directory containing malic…
2022-03-17	PYSEC-2022-166	paramiko	2.10.1	In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could allow unauthorized information disclosure.
published 2022-03-17 modified 2022-05-17 aliases CVE-2022-24302, GHSA-f8q4-jwww-x3wv affected introduced 0, fixed 2.9.3, introduced 2.10.0, fixed 2.10.1 fixed in 2.10.1 summary In Paramiko before 2.10.1, a race condition (between creation and chmod) in the write_private_key_file function could allow unauthorized information disclosure.
2022-03-10	PYSEC-2022-186	pyspark	3.1.3	Apache Spark supports end-to-end encryption of RPC connections via "spark.authenticate" and "spark.network.crypto.enabled".
published 2022-03-10 modified 2022-05-17 aliases CVE-2021-38296, GHSA-9rr6-jpg7-9jg6 affected introduced 0, fixed 3.1.3 fixed in 3.1.3 summary Apache Spark supports end-to-end encryption of RPC connections via "spark.authenticate" and "spark.network.crypto.enabled".
2022-03-03	PYSEC-2022-160	twisted	22.2.0	Twisted is an event-based framework for internet applications, supporting Python 3.6+.
published 2022-03-03 modified 2022-03-10 aliases CVE-2022-21716, GHSA-rv6r-3f5q-9rgx affected introduced 0, fixed 89c395ee794e85a9657b112c4351417850330ef9; introduced 21.7.0, fixed 22.2.0 fixed in 22.2.0 summary Twisted is an event-based framework for internet applications, supporting Python 3.6+.
2022-02-23	PYSEC-2022-28	mlflow	1.23.1	Insecure Temporary File in GitHub repository mlflow/mlflow prior to 1.23.1.
published 2022-02-23 modified 2022-03-02 aliases CVE-2022-0736, GHSA-vqj2-4v8m-8vrq affected introduced 0, fixed 61984e6843d2e59235d82a580c529920cd8f3711; introduced 0, fixed 1.23.1 fixed in 1.23.1 summary Insecure Temporary File in GitHub repository mlflow/mlflow prior to 1.23.1.
2022-02-07	PYSEC-2022-27	twisted	22.1.0	twisted is an event-driven networking engine written in Python.
published 2022-02-07 modified 2022-02-15 aliases CVE-2022-21712, GHSA-92x2-jw7w-xvvx affected introduced 0, fixed af8fe78542a6f2bf2235ccee8158d9c88d31e8e2; introduced 11.1.0, fixed 22.1.0 fixed in 22.1.0 summary twisted is an event-driven networking engine written in Python.
2022-02-03	PYSEC-2022-20	django	4.0.2	An issue was discovered in MultiPartParser in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2.
published 2022-02-03 modified 2022-02-03 aliases CVE-2022-23833, GHSA-6cw3-g6wv-c2xv affected introduced 2.2, fixed 2.2.27, introduced 3.2, fixed 3.2.12, introduced 4.0, fixed 4.0.2 fixed in 4.0.2 summary An issue was discovered in MultiPartParser in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2.
2022-02-03	PYSEC-2022-19	django	4.0.2	The {% debug %} template tag in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2 does not properly encode the current context.
published 2022-02-03 modified 2022-02-03 aliases CVE-2022-22818, GHSA-95rw-fx8r-36v6 affected introduced 2.2, fixed 2.2.27, introduced 3.2, fixed 3.2.12, introduced 4.0, fixed 4.0.2 fixed in 4.0.2 summary The {% debug %} template tag in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2 does not properly encode the current context.
2022-01-26	PYSEC-2022-48	protobuf	3.15.0	Nullptr dereference when a null char is present in a proto symbol.
published 2022-01-26 modified 2022-03-09 aliases CVE-2021-22570, GHSA-77rm-9x9h-xj3g affected introduced 0, fixed 3.15.0 fixed in 3.15.0 summary Nullptr dereference when a null char is present in a proto symbol.
2022-01-25	PYSEC-2022-14	loguru	0.5.3	Improper Privilege Management in Conda loguru prior to 0.5.3.
published 2022-01-25 modified 2022-01-28 aliases CVE-2022-0338, GHSA-39ph-wr67-j4xq affected introduced 0, fixed ea39375e62f9b8f18e2ca798a5c0fb8c972b7eaa; introduced 0, fixed 0.5.3 fixed in 0.5.3 summary Improper Privilege Management in Conda loguru prior to 0.5.3.
2022-01-21	PYSEC-2022-15 withdrawn	loguru		This CVE has been rejected as it was incorrectly assigned.
published 2022-01-21 modified 2022-01-29 withdrawn 2022-02-22 aliases CVE-2022-0329, GHSA-cvp7-c586-cmf4 affected all versions summary This CVE has been rejected as it was incorrectly assigned.
2022-01-19	PYSEC-2022-12	ipython	8.0.1	IPython (Interactive Python) is a command shell for interactive computing in multiple programming languages, originally developed for the Python programming language.
published 2022-01-19 modified 2022-01-26 aliases CVE-2022-21699, GHSA-pq7m-3gw7-gq5x affected introduced 0, fixed 46a51ed69cdf41b4333943d9ceeb945c4ede5668; introduced 0, fixed 6.0.0rc1, introduced 6.0.0, fixed 7.16.3, introduced 7.17.0, fixed 7.31.1, introduced 8.0.0, fixed 8.0.1 fixed in 8.0.1 summary IPython (Interactive Python) is a command shell for interactive computing in multiple programming languages, originally developed for the Python programming language.
2022-01-10	PYSEC-2022-9	pillow	9.0.0	path_getbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization of ImagePath.Path.
published 2022-01-10 modified 2022-01-24 aliases CVE-2022-22816, GHSA-xrcv-f9gm-v42c affected introduced 0, fixed 9.0.0 fixed in 9.0.0 summary path_getbbox in path.c in Pillow before 9.0.0 has a buffer over-read during initialization of ImagePath.Path.
2022-01-10	PYSEC-2022-8	pillow	9.0.0	path_getbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path.
published 2022-01-10 modified 2022-01-24 aliases CVE-2022-22815, GHSA-pw3c-h7wp-cvhx affected introduced 0, fixed 9.0.0 fixed in 9.0.0 summary path_getbbox in path.c in Pillow before 9.0.0 improperly initializes ImagePath.Path.
2022-01-10	PYSEC-2022-10	pillow	9.0.0	PIL.ImageMath.eval in Pillow before 9.0.0 allows evaluation of arbitrary expressions, such as ones that use the Python exec method.
published 2022-01-10 modified 2022-01-24 aliases CVE-2022-22817, GHSA-8vj2-vxx3-667w affected introduced 0, fixed 9.0.0 fixed in 9.0.0 summary PIL.ImageMath.eval in Pillow before 9.0.0 allows evaluation of arbitrary expressions, such as ones that use the Python exec method.
2022-01-05	PYSEC-2022-3	django	4.0.1	Storage.save in Django 2.2 before 2.2.26, 3.2 before 3.2.11, and 4.0 before 4.0.1 allows directory traversal if crafted filenames are directly passed to it.
published 2022-01-05 modified 2022-01-05 aliases CVE-2021-45452, GHSA-jrh2-hc4r-7jwx affected introduced 2.2, fixed 2.2.26, introduced 3.2, fixed 3.2.11, introduced 4.0, fixed 4.0.1 fixed in 4.0.1 summary Storage.save in Django 2.2 before 2.2.26, 3.2 before 3.2.11, and 4.0 before 4.0.1 allows directory traversal if crafted filenames are directly passed to it.
2022-01-05	PYSEC-2022-2	django	4.0.1	An issue was discovered in Django 2.2 before 2.2.26, 3.2 before 3.2.11, and 4.0 before 4.0.1.
published 2022-01-05 modified 2022-01-05 aliases CVE-2021-45116, GHSA-8c5j-9r9f-c6w8 affected introduced 2.2, fixed 2.2.26, introduced 3.2, fixed 3.2.11, introduced 4.0, fixed 4.0.1 fixed in 4.0.1 summary An issue was discovered in Django 2.2 before 2.2.26, 3.2 before 3.2.11, and 4.0 before 4.0.1.
2022-01-05	PYSEC-2022-1	django	4.0.1	An issue was discovered in Django 2.2 before 2.2.26, 3.2 before 3.2.11, and 4.0 before 4.0.1.
published 2022-01-05 modified 2022-01-05 aliases CVE-2021-45115, GHSA-53qw-q765-4fww affected introduced 2.2, fixed 2.2.26, introduced 3.2, fixed 3.2.11, introduced 4.0, fixed 4.0.1 fixed in 4.0.1 summary An issue was discovered in Django 2.2 before 2.2.26, 3.2 before 3.2.11, and 4.0 before 4.0.1.
2022-01-04	PYSEC-2022-5	nltk	3.6.6	nltk is vulnerable to Inefficient Regular Expression Complexity
published 2022-01-04 modified 2022-01-12 aliases CVE-2021-3842, GHSA-rqjh-jp2r-59cj affected introduced 0, fixed 2a50a3edc9d35f57ae42a921c621edc160877f4d; introduced 0, fixed 3.6.6 fixed in 3.6.6 summary nltk is vulnerable to Inefficient Regular Expression Complexity
2022-01-01	PYSEC-2022-25	ujson	5.1.0	UltraJSON (aka ujson) through 5.1.0 has a stack-based buffer overflow in Buffer_AppendIndentUnchecked (called from encode).
published 2022-01-01 modified 2022-02-07 aliases CVE-2021-45958, GHSA-fh56-85cw-5pq6 affected introduced 4.0.2, fixed 5.1.0 fixed in 5.1.0 summary UltraJSON (aka ujson) through 5.1.0 has a stack-based buffer overflow in Buffer_AppendIndentUnchecked (called from encode).
2021-12-29	PYSEC-2021-858	celery	5.2.2	This affects the package celery before 5.2.2.
published 2021-12-29 modified 2021-12-29 aliases CVE-2021-23727, SNYK-PYTHON-CELERY-2314953, GHSA-q4xr-rc97-m4xx affected introduced 0, fixed 5.2.2 fixed in 5.2.2 summary This affects the package celery before 5.2.2.
2021-12-23	PYSEC-2021-859	nltk	3.6.5	NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing.
published 2021-12-23 modified 2022-01-04 aliases CVE-2021-43854, GHSA-f8m6-h2c7-8h9x affected introduced 0, fixed 1405aad979c6b8080dbbc8e0858f89b2e3690341; introduced 0, fixed 3.6.5 fixed in 3.6.5 summary NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing.
2021-12-17	PYSEC-2021-857	numpy	1.19.0	Buffer overflow in the array_from_pyobj function of fortranobject.c in NumPy < 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative val…
published 2021-12-17 modified 2021-12-27 aliases CVE-2021-41496, GHSA-f7c7-j99h-c22f affected introduced 0, fixed 1.19.0 fixed in 1.19.0 summary Buffer overflow in the array_from_pyobj function of fortranobject.c in NumPy < 1.19, which allows attackers to conduct a Denial of Service attacks by carefully constructing an array with negative val…
2021-12-17	PYSEC-2021-856	numpy	1.19.1	Null Pointer Dereference vulnerability exists in numpy.sort in NumPy &lt and 1.19 in the PyArray_DescrNew function due to missing return-value validation, which allows attackers to conduct DoS attack…
published 2021-12-17 modified 2021-12-22 aliases CVE-2021-41495, GHSA-5545-2q6w-2gh6 affected introduced 0, fixed 1.19.1 fixed in 1.19.1 summary Null Pointer Dereference vulnerability exists in numpy.sort in NumPy &lt and 1.19 in the PyArray_DescrNew function due to missing return-value validation, which allows attackers to conduct DoS attack…
2021-12-17	PYSEC-2021-855	numpy	1.10.0	Incomplete string comparison in the numpy.core component in NumPy1.9.x, which allows attackers to fail the APIs via constructing specific string objects.
published 2021-12-17 modified 2021-12-22 aliases CVE-2021-34141, GHSA-fpfv-jqm9-f5jm affected introduced 1.9.0, fixed 1.10.0 fixed in 1.10.0 summary Incomplete string comparison in the numpy.core component in NumPy1.9.x, which allows attackers to fail the APIs via constructing specific string objects.
2021-12-17	PYSEC-2021-854	numpy	1.10.0	A Buffer Overflow vulnerability exists in NumPy 1.9.x in the PyArray_NewFromDescr_int function of ctors.c when specifying arrays of large dimensions (over 32) from Python code, which could let a mali…
published 2021-12-17 modified 2021-12-22 aliases CVE-2021-33430, GHSA-6p56-wp2h-9hxr affected introduced 1.9.0, fixed 1.10.0 fixed in 1.10.0 summary A Buffer Overflow vulnerability exists in NumPy 1.9.x in the PyArray_NewFromDescr_int function of ctors.c when specifying arrays of large dimensions (over 32) from Python code, which could let a mali…
2021-12-13	PYSEC-2021-852	lxml	4.6.5	lxml is a library for processing XML and HTML in the Python language.
published 2021-12-13 modified 2021-12-16 aliases CVE-2021-43818, GHSA-55x5-fj6c-h6m8 affected introduced 0, fixed f2330237440df7e8f39c3ad1b1aa8852be3b27c0, fixed 12fa9669007180a7bb87d990c375cf91ca5b664a; introduced 0, fixed a3eacbc0dcf1de1c822ec29fb7d090a4b1712a9c; introduced 0, fixed 4.6.5 fixed in 4.6.5 summary lxml is a library for processing XML and HTML in the Python language.
2021-12-08	PYSEC-2021-439	django	3.2.10	In Django 2.2 before 2.2.25, 3.1 before 3.1.14, and 3.2 before 3.2.10, HTTP requests for URLs with trailing newlines could bypass upstream access control based on URL paths.
published 2021-12-08 modified 2021-12-08 aliases CVE-2021-44420, GHSA-v6rh-hp5x-86rv affected introduced 2.2, fixed 2.2.25, introduced 3.1, fixed 3.1.14, introduced 3.2, fixed 3.2.10 fixed in 3.2.10 summary In Django 2.2 before 2.2.25, 3.1 before 3.1.14, and 3.2 before 3.2.10, HTTP requests for URLs with trailing newlines could bypass upstream access control based on URL paths.
2021-11-10	PYSEC-2021-437	pip	21.1	A flaw was found in python-pip in the way it handled Unicode separators in git references.
published 2021-11-10 modified 2021-11-29 aliases CVE-2021-3572, GHSA-5xp3-jfq3-5q8x affected introduced 0, fixed 21.1 fixed in 21.1 summary A flaw was found in python-pip in the way it handled Unicode separators in git references.
2021-10-26	PYSEC-2021-387	dask	2021.10.0	An issue was discovered in Dask (aka python-dask) through 2021.09.1.
published 2021-10-26 modified 2021-11-11 aliases CVE-2021-42343, GHSA-j8fq-86c5-5v2r affected introduced 0, fixed 2021.10.0 fixed in 2021.10.0 summary An issue was discovered in Dask (aka python-dask) through 2021.09.1.
2021-10-20	PYSEC-2021-421	babel	2.9.1	Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files (containing serialized Python objects) via directory traversal, leading to code execution.
published 2021-10-20 modified 2021-11-16 aliases CVE-2021-42771, GHSA-h4m5-qpfp-3mpv affected introduced 0, fixed 2.9.1 fixed in 2.9.1 summary Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files (containing serialized Python objects) via directory traversal, leading to code execution.
2021-09-27	PYSEC-2021-356	nltk	3.6.4	nltk is vulnerable to Inefficient Regular Expression Complexity
published 2021-09-27 modified 2021-10-01 aliases CVE-2021-3828, GHSA-2ww3-fxvq-293j affected introduced 0, fixed 277711ab1dec729e626b27aab6fa35ea5efbd7e6; introduced 0, fixed 3.6.4 fixed in 3.6.4 summary nltk is vulnerable to Inefficient Regular Expression Complexity
2021-09-20	PYSEC-2021-333	sqlparse	0.4.2	sqlparse is a non-validating SQL parser module for Python.
published 2021-09-20 modified 2023-04-09 aliases CVE-2021-32839, GHSA-p5w8-wqhj-9hhf affected introduced 1499cffcd7c4d635b4297b44d48fb4fe94cf988e, fixed 8238a9e450ed1524e40cb3a8b0b3c00606903aeb; introduced 0.4.0, fixed 0.4.2 fixed in 0.4.2 summary sqlparse is a non-validating SQL parser module for Python.
2021-09-03	PYSEC-2021-317	pillow	8.3.2	The package pillow from 0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the getrgb function.
published 2021-09-03 modified 2021-09-03 aliases CVE-2021-23437, SNYK-PYTHON-PILLOW-1319443, GHSA-98vv-pw6r-q6q4 affected introduced 0, fixed 9e08eb8f78fdfd2f476e1b20b7cf38683754866b; introduced 0, fixed 8.3.2 fixed in 8.3.2 summary The package pillow from 0 and before 8.3.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the getrgb function.
2021-08-09	PYSEC-2021-130	jupyterlab	3.1.4	JupyterLab is a user interface for Project Jupyter which will eventually replace the classic Jupyter Notebook.
published 2021-08-09 modified 2021-08-27 aliases CVE-2021-32797, GHSA-4952-p58q-6crx affected introduced 0, fixed 504825938c0abfa2fb8ff8d529308830a5ae42ed; introduced 0, fixed 1.2.21, introduced 2, fixed 2.2.10, introduced 2.3, fixed 2.3.2, introduced 3, fixed 3.0.17, introduced 3.1, fixed 3.1.4 fixed in 3.1.4 summary JupyterLab is a user interface for Project Jupyter which will eventually replace the classic Jupyter Notebook.
2021-08-09	PYSEC-2021-118	notebook	5.7.11	The Jupyter notebook is a web-based notebook environment for interactive computing.
published 2021-08-09 modified 2021-08-17 aliases CVE-2021-32798, GHSA-hwvq-6gjx-j797 affected introduced 0, fixed 79fc76e890a8ec42f73a3d009e44ef84c14ef0d5; introduced 5.7.0, fixed 5.7.11 fixed in 5.7.11 summary The Jupyter notebook is a web-based notebook environment for interactive computing.
2021-07-13	PYSEC-2021-331	pillow	8.3.0	Pillow through 8.2.0 and PIL (aka Python Imaging Library) through 1.1.7 allow an attacker to pass controlled parameters directly into a convert function to trigger a buffer overflow in Convert.c.
published 2021-07-13 modified 2021-09-23 aliases CVE-2021-34552, GHSA-7534-mm45-c74v affected introduced 0, fixed 8.3.0 fixed in 8.3.0 summary Pillow through 8.2.0 and PIL (aka Python Imaging Library) through 1.1.7 allow an attacker to pass controlled parameters directly into a convert function to trigger a buffer overflow in Convert.c.
2021-07-06	PYSEC-2021-112	pywin32	301	An integer overflow exists in pywin32 prior to version b301 when adding an access control entry (ACE) to an access control list (ACL) that would cause the size to be greater than 65535 bytes.
published 2021-07-06 modified 2021-07-08 aliases CVE-2021-32559, GHSA-hwfp-hg2m-9vr2 affected introduced 0, fixed 301 fixed in 301 summary An integer overflow exists in pywin32 prior to version b301 when adding an access control entry (ACE) to an access control list (ACL) that would cause the size to be greater than 65535 bytes.
2021-07-02	PYSEC-2021-109	django	3.2.5	Django 3.1.x before 3.1.13 and 3.2.x before 3.2.5 allows QuerySet.order_by SQL injection if order_by is untrusted input from a client of a web application.
published 2021-07-02 modified 2021-07-08 aliases CVE-2021-35042, GHSA-xpfp-f569-q3p2 affected introduced 3.1, fixed 3.1.13, introduced 3.2, fixed 3.2.5 fixed in 3.2.5 summary Django 3.1.x before 3.1.13 and 3.2.x before 3.2.5 allows QuerySet.order_by SQL injection if order_by is untrusted input from a client of a web application.
2021-06-29	PYSEC-2021-108	urllib3	1.26.5	An issue was discovered in urllib3 before 1.26.5.
published 2021-06-29 modified 2026-10-09 aliases CVE-2021-33503, GHSA-q2q7-5pp4-w6pg affected introduced 5b047b645f5f93900d5e2fc31230848c25eb1f5f, fixed 2d4a3fee6de2fa45eb82169361918f759269b4ec; introduced 1.25.4, fixed 1.26.5 fixed in 1.26.5 summary An issue was discovered in urllib3 before 1.26.5.
2021-06-21	PYSEC-2021-427	mpmath	1.3.0	A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in Mpmath v1.0.0 when the mpmathify function is called.
published 2021-06-21 modified 2023-05-31 aliases CVE-2021-29063, GHSA-f865-m6cq-j9vx affected introduced 0, fixed 46d44c3c8f3244017fe1eb102d564eb4ab8ef750; introduced 0, fixed 1.3.0 fixed in 1.3.0 summary A Regular Expression Denial of Service (ReDOS) vulnerability was discovered in Mpmath v1.0.0 when the mpmathify function is called.
2021-06-09	PYSEC-2021-100	fastapi	0.65.2	FastAPI is a web framework for building APIs with Python 3.6+ based on standard Python type hints.
published 2021-06-09 modified 2021-06-22 aliases CVE-2021-32677, GHSA-8h2j-cgx8-6xv7 affected introduced 0, fixed fa7e3c996edf2d5482fff8f9d890ac2390dede4d; introduced 0, fixed 0.65.2 fixed in 0.65.2 summary FastAPI is a web framework for building APIs with Python 3.6+ based on standard Python type hints.
2021-06-08	PYSEC-2021-99	django	3.2.4	In Django 2.2 before 2.2.24, 3.x before 3.1.12, and 3.2 before 3.2.4, URLValidator, validate_ipv4_address, and validate_ipv46_address do not prohibit leading zero characters in octal literals.
published 2021-06-08 modified 2021-06-22 aliases CVE-2021-33571, GHSA-p99v-5w3c-jqq9 affected introduced 2.2, fixed 2.2.24, introduced 3.0, fixed 3.1.12, introduced 3.2, fixed 3.2.4 fixed in 3.2.4 summary In Django 2.2 before 2.2.24, 3.x before 3.1.12, and 3.2 before 3.2.4, URLValidator, validate_ipv4_address, and validate_ipv46_address do not prohibit leading zero characters in octal literals.
2021-06-08	PYSEC-2021-98	django	3.2.4	Django before 2.2.24, 3.x before 3.1.12, and 3.2.x before 3.2.4 has a potential directory traversal via django.contrib.admindocs.
published 2021-06-08 modified 2021-06-22 aliases CVE-2021-33203, GHSA-68w8-qjq3-2gfm affected introduced 0, fixed 2.2.24, introduced 3.0, fixed 3.1.12, introduced 3.2, fixed 3.2.4 fixed in 3.2.4 summary Django before 2.2.24, 3.x before 3.1.12, and 3.2.x before 3.2.4 has a potential directory traversal via django.contrib.admindocs.
2021-06-06	PYSEC-2021-95	websockets	9.1	The aaugustin websockets library before 9.1 for Python has an Observable Timing Discrepancy on servers when HTTP Basic Authentication is enabled with basic_auth_protocol_factory(credentials=...).
published 2021-06-06 modified 2021-06-09 aliases CVE-2021-33880, GHSA-8ch4-58qp-g3mp affected introduced 0, fixed 547a26b685d08cac0aa64e5e65f7867ac0ea9bc0; introduced 0, fixed 9.1 fixed in 9.1 summary The aaugustin websockets library before 9.1 for Python has an Observable Timing Discrepancy on servers when HTTP Basic Authentication is enabled with basic_auth_protocol_factory(credentials=...).
2021-06-02	PYSEC-2021-94	pillow	8.2.0	An issue was discovered in Pillow before 8.2.0.
published 2021-06-02 modified 2021-06-09 aliases CVE-2021-28678, GHSA-hjfx-8p6c-g7gx affected introduced 0, fixed 8.2.0 fixed in 8.2.0 summary An issue was discovered in Pillow before 8.2.0.
2021-06-02	PYSEC-2021-93	pillow	8.2.0	An issue was discovered in Pillow before 8.2.0.
published 2021-06-02 modified 2021-06-09 aliases CVE-2021-28677, GHSA-q5hq-fp76-qmrc affected introduced 0, fixed 8.2.0 fixed in 8.2.0 summary An issue was discovered in Pillow before 8.2.0.
2021-06-02	PYSEC-2021-92	pillow	8.2.0	An issue was discovered in Pillow before 8.2.0.
published 2021-06-02 modified 2021-06-09 aliases CVE-2021-28676, GHSA-7r7m-5h27-29hp affected introduced 0, fixed 8.2.0 fixed in 8.2.0 summary An issue was discovered in Pillow before 8.2.0.
2021-06-02	PYSEC-2021-138	pillow	8.2.0	An issue was discovered in Pillow before 8.2.0.
published 2021-06-02 modified 2021-08-27 aliases CVE-2021-25288, GHSA-rwv7-3v45-hg29 affected introduced 0, fixed 8.2.0 fixed in 8.2.0 summary An issue was discovered in Pillow before 8.2.0.
2021-06-02	PYSEC-2021-137	pillow	8.2.0	An issue was discovered in Pillow before 8.2.0.
published 2021-06-02 modified 2021-08-27 aliases CVE-2021-25287, GHSA-77gc-v2xv-rvvh affected introduced 0, fixed 8.2.0 fixed in 8.2.0 summary An issue was discovered in Pillow before 8.2.0.
2021-06-02	PYSEC-2021-139	pillow	8.2.0	An issue was discovered in Pillow before 8.2.0.
published 2021-06-02 modified 2021-08-27 aliases CVE-2021-28675, GHSA-g6rj-rv7j-xwp4 affected introduced 0, fixed 8.2.0 fixed in 8.2.0 summary An issue was discovered in Pillow before 8.2.0.
2021-05-13	PYSEC-2021-47	pydantic	1.8.2	Pydantic is a data validation and settings management using Python type hinting.
published 2021-05-13 modified 2021-05-13 aliases CVE-2021-29510, GHSA-5jqp-qgf6-3pvh affected introduced 0, fixed 7e83fdd2563ffac081db7ecdf1affa65ef38c468; introduced 0, fixed 1.6.2, introduced 1.7, fixed 1.7.4, introduced 1.8, fixed 1.8.2 fixed in 1.8.2 summary Pydantic is a data validation and settings management using Python type hinting.
2021-05-06	PYSEC-2021-8	django	3.2.2	In Django 2.2 before 2.2.22, 3.1 before 3.1.10, and 3.2 before 3.2.2 (with Python 3.9.5+), URLValidator does not prohibit newlines and tabs (unless the URLField form field is used).
published 2021-05-06 modified 2021-05-12 aliases CVE-2021-32052, GHSA-qm57-vhq3-3fwf affected introduced 2.2, fixed 2.2.22, introduced 3.1, fixed 3.1.10, introduced 3.2, fixed 3.2.2 fixed in 3.2.2 summary In Django 2.2 before 2.2.22, 3.1 before 3.1.10, and 3.2 before 3.2.2 (with Python 3.9.5+), URLValidator does not prohibit newlines and tabs (unless the URLField form field is used).
2021-05-05	PYSEC-2021-7	django	3.2.1	In Django 2.2 before 2.2.21, 3.1 before 3.1.9, and 3.2 before 3.2.1, MultiPartParser, UploadedFile, and FieldFile allowed directory traversal via uploaded files with suitably crafted file names.
published 2021-05-05 modified 2021-05-13 aliases CVE-2021-31542, GHSA-rxjp-mfm9-w4wr affected introduced 2.2, fixed 2.2.21, introduced 3.1, fixed 3.1.9, introduced 3.2, fixed 3.2.1 fixed in 3.2.1 summary In Django 2.2 before 2.2.21, 3.1 before 3.1.9, and 3.2 before 3.2.1, MultiPartParser, UploadedFile, and FieldFile allowed directory traversal via uploaded files with suitably crafted file names.
2021-04-29	PYSEC-2021-64	django-filter	2.4.0	django-filter is a generic system for filtering Django QuerySets based on user selections.
published 2021-04-29 modified 2021-05-10 aliases CVE-2020-15225, GHSA-x7gm-rfgv-w973 affected introduced 0, fixed 340cf7a23a2b3dcd7183f6a0d6c383e85b130d2b; introduced 0, fixed 2.4.0 fixed in 2.4.0 summary django-filter is a generic system for filtering Django QuerySets based on user selections.
2021-04-06	PYSEC-2021-6	django	3.1.8	In Django 2.2 before 2.2.20, 3.0 before 3.0.14, and 3.1 before 3.1.8, MultiPartParser allowed directory traversal via uploaded files with suitably crafted file names.
published 2021-04-06 modified 2021-05-12 aliases CVE-2021-28658, GHSA-xgxc-v2qg-chmh affected introduced 2.2, fixed 2.2.20, introduced 3.0, fixed 3.0.14, introduced 3.1, fixed 3.1.8 fixed in 3.1.8 summary In Django 2.2 before 2.2.20, 3.0 before 3.0.14, and 3.1 before 3.1.8, MultiPartParser allowed directory traversal via uploaded files with suitably crafted file names.
2021-03-23	PYSEC-2021-140	pygments	2.7.4	An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML (SML) source file, as demonstrated by input that only…
published 2021-03-23 modified 2021-08-27 aliases CVE-2021-20270, GHSA-9w8r-397f-prfh affected introduced 1.5, fixed 2.7.4 fixed in 2.7.4 summary An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML (SML) source file, as demonstrated by input that only…
2021-03-21	PYSEC-2021-19	lxml	4.6.3	An XSS vulnerability was discovered in python-lxml's clean module versions before 4.6.3.
published 2021-03-21 modified 2021-03-30 aliases CVE-2021-28957, GHSA-jq4v-f5q6-mjqq affected introduced 0, fixed a5f9cb52079dc57477c460dbe6ba0f775e14a999; introduced 0, fixed 4.6.3 fixed in 4.6.3 summary An XSS vulnerability was discovered in python-lxml's clean module versions before 4.6.3.
2021-03-19	PYSEC-2021-39	pillow	8.1.1	An issue was discovered in Pillow before 8.1.1.
published 2021-03-19 modified 2021-03-22 aliases CVE-2021-25293, GHSA-p43w-g3c5-g5mq affected introduced 0, fixed 8.1.1 fixed in 8.1.1 summary An issue was discovered in Pillow before 8.1.1.
2021-03-19	PYSEC-2021-38	pillow	8.1.1	An issue was discovered in Pillow before 8.1.1.
published 2021-03-19 modified 2021-03-22 aliases CVE-2021-25292, GHSA-9hx2-hgq2-2g4f affected introduced 0, fixed 8.1.1 fixed in 8.1.1 summary An issue was discovered in Pillow before 8.1.1.
2021-03-19	PYSEC-2021-37	pillow	8.1.1	An issue was discovered in Pillow before 8.1.1.
published 2021-03-19 modified 2021-03-22 aliases CVE-2021-25291, GHSA-mvg9-xffr-p774 affected introduced 0, fixed 8.1.1 fixed in 8.1.1 summary An issue was discovered in Pillow before 8.1.1.
2021-03-19	PYSEC-2021-36	pillow	8.1.1	An issue was discovered in Pillow before 8.1.1.
published 2021-03-19 modified 2021-03-22 aliases CVE-2021-25290, GHSA-8xjq-8fcg-g5hw affected introduced 0, fixed 8.1.1 fixed in 8.1.1 summary An issue was discovered in Pillow before 8.1.1.
2021-03-19	PYSEC-2021-35	pillow	8.1.1	An issue was discovered in Pillow before 8.1.1.
published 2021-03-19 modified 2021-03-26 aliases CVE-2021-25289, GHSA-57h3-9rgr-c24m affected introduced 0, fixed 8.1.1 fixed in 8.1.1 summary An issue was discovered in Pillow before 8.1.1.
2021-03-17	PYSEC-2021-141	pygments	2.7.4	In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions.
published 2021-03-17 modified 2021-08-27 aliases CVE-2021-27291, GHSA-pq64-v7f5-gqh8 affected introduced 0, fixed 2e7e8c4a7b318f4032493773732754e418279a14; introduced 1.1, fixed 2.7.4 fixed in 2.7.4 summary In pygments 1.1+, fixed in 2.7.4, the lexers used to parse programming languages rely heavily on regular expressions.
2021-03-15	PYSEC-2021-59	urllib3	1.26.4	The urllib3 library 1.26.x before 1.26.4 for Python omits SSL certificate validation in some cases involving HTTPS to HTTPS proxies.
published 2021-03-15 modified 2021-03-23 aliases CVE-2021-28363, GHSA-5phf-pp7p-vc2r affected introduced 0, fixed 8d65ea1ecf6e2cdc27d42124e587c1b83a3118b0; introduced 1.26.0, fixed 1.26.4 fixed in 1.26.4 summary The urllib3 library 1.26.x before 1.26.4 for Python omits SSL certificate validation in some cases involving HTTPS to HTTPS proxies.
2021-03-03	PYSEC-2021-42	pillow	8.1.1	Pillow before 8.1.1 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for an ICO container, and thus an attempt…
published 2021-03-03 modified 2021-03-23 aliases CVE-2021-27923, GHSA-95q3-8gr9-gm8w affected introduced 0, fixed 8.1.1 fixed in 8.1.1 summary Pillow before 8.1.1 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for an ICO container, and thus an attempt…
2021-03-03	PYSEC-2021-41	pillow	8.1.1	Pillow before 8.1.1 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for an ICNS container, and thus an attemp…
published 2021-03-03 modified 2021-03-23 aliases CVE-2021-27922, GHSA-3wvg-mj6g-m9cv affected introduced 0, fixed 8.1.1 fixed in 8.1.1 summary Pillow before 8.1.1 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for an ICNS container, and thus an attemp…
2021-03-03	PYSEC-2021-40	pillow	8.1.1	Pillow before 8.1.1 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for a BLP container, and thus an attempte…
published 2021-03-03 modified 2021-03-23 aliases CVE-2021-27921, GHSA-f4w8-cv6p-x6r5 affected introduced 0, fixed 8.1.1 fixed in 8.1.1 summary Pillow before 8.1.1 allows attackers to cause a denial of service (memory consumption) because the reported size of a contained image is not properly checked for a BLP container, and thus an attempte…
2021-02-26	PYSEC-2021-76	aiohttp	3.7.4	aiohttp is an asynchronous HTTP client/server framework for asyncio and Python.
published 2021-02-26 modified 2021-03-26 aliases CVE-2021-21330, GHSA-v6wp-4m6f-gcjg affected introduced 0, fixed 2545222a3853e31ace15d87ae0e2effb7da0c96b; introduced 0, fixed 3.7.4 fixed in 3.7.4 summary aiohttp is an asynchronous HTTP client/server framework for asyncio and Python.
2021-02-18	PYSEC-2021-146	reportlab	3.5.55	All versions of package reportlab are vulnerable to Server-side Request Forgery (SSRF) via img tags.
published 2021-02-18 modified 2021-08-27 aliases CVE-2020-28463, SNYK-PYTHON-REPORTLAB-1022145, GHSA-mpvw-25mg-59vx affected introduced 0, fixed 3.5.55 fixed in 3.5.55 summary All versions of package reportlab are vulnerable to Server-side Request Forgery (SSRF) via img tags.
2021-02-09	PYSEC-2021-142	pyyaml	5.4	A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or…
published 2021-02-09 modified 2021-08-27 aliases CVE-2020-14343, GHSA-8q59-q68h-6hv4 affected introduced 0, fixed 5.4 fixed in 5.4 summary A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or…
2021-02-08	PYSEC-2021-16	httplib2	0.19.0	httplib2 is a comprehensive HTTP client library for Python.
published 2021-02-08 modified 2021-02-12 aliases CVE-2021-21240, GHSA-93xj-8mrv-444m affected introduced 0, fixed bd9ee252c8f099608019709e22c0d705e98d26bc; introduced 0, fixed 0.19.0 fixed in 0.19.0 summary httplib2 is a comprehensive HTTP client library for Python.
2021-02-07	PYSEC-2021-63	cryptography	3.3.2	In the cryptography package before 3.3.2 for Python, certain sequences of update calls to symmetrically encrypt multi-GB values could result in an integer overflow and buffer overflow, as demonstrate…
published 2021-02-07 modified 2021-02-19 aliases CVE-2020-36242, GHSA-rhm9-p9w5-fwm7 affected introduced 3.1, fixed 3.3.2 fixed in 3.3.2 summary In the cryptography package before 3.3.2 for Python, certain sequences of update calls to symmetrically encrypt multi-GB values could result in an integer overflow and buffer overflow, as demonstrate…
2021-02-02	PYSEC-2021-865	bleach	3.3.0	In Mozilla Bleach before 3.3.0, a mutation XSS affects users calling bleach.clean with math or svg; p or br; and style, title, noscript, script, textarea, noframes, iframe, or xmp tags with strip_com…
published 2021-02-02 modified 2022-01-05 aliases CVE-2021-23980, GHSA-vv2x-vrpj-qqpq affected introduced 0, fixed 79b7a3c5e56a09d1d323a5006afa59b56162eb13; introduced 0, fixed 3.3.0 fixed in 3.3.0 summary In Mozilla Bleach before 3.3.0, a mutation XSS affects users calling bleach.clean with math or svg; p or br; and style, title, noscript, script, textarea, noframes, iframe, or xmp tags with strip_com…
2021-02-02	PYSEC-2021-9	django	3.1.6	In Django 2.2 before 2.2.18, 3.0 before 3.0.12, and 3.1 before 3.1.6, the django.utils.archive.extract method (used by "startapp --template" and "startproject --template") allows directory traversal …
published 2021-02-02 modified 2021-03-05 aliases CVE-2021-3281, GHSA-fvgf-6h6h-3322 affected introduced 2.2, fixed 2.2.18, introduced 3.0, fixed 3.0.12, introduced 3.1, fixed 3.1.6 fixed in 3.1.6 summary In Django 2.2 before 2.2.18, 3.0 before 3.0.12, and 3.1 before 3.1.6, the django.utils.archive.extract method (used by "startapp --template" and "startproject --template") allows directory traversal …
2021-02-01	PYSEC-2021-66	jinja2	2.11.3	This affects the package jinja2 from 0.0.0 and before 2.11.3.
published 2021-02-01 modified 2021-03-22 aliases CVE-2020-28493, SNYK-PYTHON-JINJA2-1012994, GHSA-g3rq-g295-4j3m affected introduced 0, fixed 2.11.3 fixed in 2.11.3 summary This affects the package jinja2 from 0.0.0 and before 2.11.3.
2021-01-12	PYSEC-2021-71	pillow	8.1.0	In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted SGI RLE image files because offsets and length tables are mishandled.
published 2021-01-12 modified 2021-01-29 aliases CVE-2020-35655, GHSA-hf64-x4gq-p99h affected introduced 4.3.0, fixed 8.1.0 fixed in 8.1.0 summary In Pillow before 8.1.0, SGIRleDecode has a 4-byte buffer over-read when decoding crafted SGI RLE image files because offsets and length tables are mishandled.
2021-01-12	PYSEC-2021-70	pillow	8.1.0	In Pillow before 8.1.0, TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode.
published 2021-01-12 modified 2021-03-22 aliases CVE-2020-35654, GHSA-vqcj-wrf2-7v73 affected introduced 0, fixed 8.1.0 fixed in 8.1.0 summary In Pillow before 8.1.0, TiffDecode has a heap-based buffer overflow when decoding crafted YCbCr files because of certain interpretation conflicts with LibTIFF in RGBA mode.
2021-01-12	PYSEC-2021-69	pillow	8.1.0	In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file because the user-supplied stride value is trusted for buffer calculations.
published 2021-01-12 modified 2021-01-29 aliases CVE-2020-35653, GHSA-f5g8-5qq7-938w affected introduced 0, fixed 8.1.0 fixed in 8.1.0 summary In Pillow before 8.1.0, PcxDecode has a buffer over-read when decoding a crafted PCX file because the user-supplied stride value is trusted for buffer calculations.
2021-01-11	PYSEC-2021-62	cryptography	3.2.1	python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS#1 v1.5 ciphertext.
published 2021-01-11 modified 2021-01-19 aliases CVE-2020-25659, GHSA-hggm-jpg3-v476 affected introduced 0, fixed 3.2.1 fixed in 3.2.1 summary python-cryptography 3.2 is vulnerable to Bleichenbacher timing attacks in the RSA decryption API, via timed processing of valid PKCS#1 v1.5 ciphertext.
2020-12-21	PYSEC-2020-346 withdrawn	jupyter-server		Withdrawn as duplicate of PYSEC-2020-50.
published 2020-12-21 modified 2026-07-09 withdrawn 2026-07-09 aliases CVE-2020-26275, GHSA-9f66-54xg-pc2c affected all versions summary Withdrawn as duplicate of PYSEC-2020-50.
2020-12-17	PYSEC-2020-49	jsonpickle	1.4.2	DISPUTED jsonpickle through 1.4.1 allows remote code execution during deserialization of a malicious payload through the decode() function.
published 2020-12-17 modified 2020-12-23 aliases CVE-2020-22083, GHSA-j66q-qmrc-89rx affected introduced 0, fixed 1.4.2 fixed in 1.4.2 summary DISPUTED jsonpickle through 1.4.1 allows remote code execution during deserialization of a malicious payload through the decode() function.
2020-12-09	PYSEC-2020-92	py	1.10.0	A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying …
published 2020-12-09 modified 2021-01-05 aliases CVE-2020-29651, GHSA-hj5v-574p-mj7c affected introduced 0, fixed 1.10.0 fixed in 1.10.0 summary A denial of service via regular expression in the py.path.svnwc component of py (aka python-py) through 1.9.0 could be used by attackers to cause a compute-time denial of service attack by supplying …
2020-12-03	PYSEC-2020-62	lxml	4.6.2	A XSS vulnerability was discovered in python-lxml's clean module.
published 2020-12-03 modified 2021-03-30 aliases CVE-2020-27783, GHSA-pgww-xf46-h92r affected introduced 1.2, fixed 4.6.2 fixed in 4.6.2 summary A XSS vulnerability was discovered in python-lxml's clean module.
2020-11-24	PYSEC-2020-234	jupyter-server	1.0.6	Jupyter Server before version 1.0.6 has an Open redirect vulnerability.
published 2020-11-24 modified 2021-08-27 aliases CVE-2020-26232, GHSA-grfj-wjv9-4f9v affected introduced 0, fixed 3d83e49090289c431da253e2bdb8dc479cbcb157; introduced 0, fixed 1.0.6 fixed in 1.0.6 summary Jupyter Server before version 1.0.6 has an Open redirect vulnerability.
2020-11-21	PYSEC-2020-108	scikit-learn	0.24.dev0	DISPUTED svm_predict_values in svm.cpp in Libsvm v324, as used in scikit-learn 0.23.2 and other products, allows attackers to cause a denial of service (segmentation fault) via a crafted model …
published 2020-11-21 modified 2020-12-03 aliases CVE-2020-28975, GHSA-jxfp-4rvq-9h9m affected introduced 0, fixed 0.24.dev0 fixed in 0.24.dev0 summary DISPUTED svm_predict_values in svm.cpp in Libsvm v324, as used in scikit-learn 0.23.2 and other products, allows attackers to cause a denial of service (segmentation fault) via a crafted model …
2020-11-18	PYSEC-2020-215	notebook	6.1.5	Jupyter Notebook before version 6.1.5 has an Open redirect vulnerability.
published 2020-11-18 modified 2021-08-11 aliases CVE-2020-26215, GHSA-c7vm-f5p4-8fqh affected introduced 0, fixed 3cec4bbe21756de9f0c4bccf18cf61d840314d74; introduced 0, fixed 6.1.5 fixed in 6.1.5 summary Jupyter Notebook before version 6.1.5 has an Open redirect vulnerability.
2020-11-18	PYSEC-2020-157	werkzeug	0.11.6	Open redirect vulnerability in werkzeug before 0.11.6 via a double slash in the URL.
published 2020-11-18 modified 2020-12-01 aliases CVE-2020-28724, GHSA-3p3h-qghp-hvh2 affected introduced 0, fixed 0.11.6 fixed in 0.11.6 summary Open redirect vulnerability in werkzeug before 0.11.6 via a double slash in the URL.
2020-11-12	PYSEC-2020-100	rsa	4.7	It was found that python-rsa is vulnerable to Bleichenbacher timing attacks.
published 2020-11-12 modified 2021-11-11 aliases CVE-2020-25658, GHSA-xrx6-fmxq-rjj2 affected introduced 2.1, fixed 4.7 fixed in 4.7 summary It was found that python-rsa is vulnerable to Bleichenbacher timing attacks.
2020-09-30	PYSEC-2020-263	djangorestframework	3.11.2	A flaw was found in Django REST Framework versions before 3.12.0 and before 3.11.2.
published 2020-09-30 modified 2021-11-16 aliases CVE-2020-25626, GHSA-fx83-3ph3-9j2q affected introduced 0, fixed 3.11.2 fixed in 3.11.2 summary A flaw was found in Django REST Framework versions before 3.12.0 and before 3.11.2.
2020-09-30	PYSEC-2020-148	urllib3	1.25.9	urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of putrequest().
published 2020-09-30 modified 2020-10-14 aliases CVE-2020-26137, GHSA-wqvq-5m8c-6g24 affected introduced 0, fixed 1dd69c5c5982fae7c87a620d487c2ebf7a6b436b; introduced 0, fixed 1.25.9 fixed in 1.25.9 summary urllib3 before 1.25.9 allows CRLF injection if the attacker controls the HTTP request method, as demonstrated by inserting CR and LF control characters in the first argument of putrequest().
2020-09-15	PYSEC-2020-29	brotli	1.0.8	A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happ…
published 2020-09-15 modified 2020-12-02 aliases CVE-2020-8927, GHSA-5v8v-66v8-mwm7 affected introduced 0, fixed 1.0.8 fixed in 1.0.8 summary A buffer overflow exists in the Brotli library versions prior to 1.0.8 where an attacker controlling the input length of a "one-shot" decompression request to a script can trigger a crash, which happ…
2020-09-04	PYSEC-2020-173	pip	19.2	The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can have ../ in a filename, as demonstrated by overwr…
published 2020-09-04 modified 2021-03-15 aliases CVE-2019-20916, GHSA-gpvv-69j7-gwj8 affected introduced 0, fixed a4c735b14a62f9cb864533808ac63936704f2ace; introduced 0, fixed 19.2 fixed in 19.2 summary The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can have ../ in a filename, as demonstrated by overwr…
2020-09-01	PYSEC-2020-34	django	3.1.1	An issue was discovered in Django 2.2 before 2.2.16, 3.0 before 3.0.10, and 3.1 before 3.1.1 (when Python 3.7+ is used).
published 2020-09-01 modified 2021-01-20 aliases CVE-2020-24584, GHSA-fr28-569j-53c4 affected introduced 2.2, fixed 2.2.16, introduced 3.0, fixed 3.0.10, introduced 3.1, fixed 3.1.1 fixed in 3.1.1 summary An issue was discovered in Django 2.2 before 2.2.16, 3.0 before 3.0.10, and 3.1 before 3.1.1 (when Python 3.7+ is used).
2020-09-01	PYSEC-2020-33	django	3.1.1	An issue was discovered in Django 2.2 before 2.2.16, 3.0 before 3.0.10, and 3.1 before 3.1.1 (when Python 3.7+ is used).
published 2020-09-01 modified 2021-01-20 aliases CVE-2020-24583, GHSA-m6gj-h9gm-gw44 affected introduced 2.2, fixed 2.2.16, introduced 3.0, fixed 3.0.10, introduced 3.1, fixed 3.1.1 fixed in 3.1.1 summary An issue was discovered in Django 2.2 before 2.2.16, 3.0 before 3.0.10, and 3.1 before 3.1.1 (when Python 3.7+ is used).
2020-08-31	PYSEC-2020-43	flask-cors	3.0.9	An issue was discovered in Flask-CORS (aka CORS Middleware for Flask) before 3.0.9.
published 2020-08-31 modified 2020-10-21 aliases CVE-2020-25032, GHSA-xc3p-ff3m-f46v affected introduced 0, fixed 3.0.9 fixed in 3.0.9 summary An issue was discovered in Flask-CORS (aka CORS Middleware for Flask) before 3.0.9.
2020-08-12	PYSEC-2020-24	asyncpg	0.21.0	asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code (on a database client) via a crafted server response, because of access to an uninitialized poi…
published 2020-08-12 modified 2020-09-03 aliases CVE-2020-17446, GHSA-2xpj-f5g2-8p7m affected introduced 0, fixed 0.21.0 fixed in 0.21.0 summary asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code (on a database client) via a crafted server response, because of access to an uninitialized poi…
2020-07-27	PYSEC-2020-151	uvicorn	0.11.7	Uvicorn before 0.11.7 is vulnerable to HTTP response splitting.
published 2020-07-27 modified 2020-07-29 aliases CVE-2020-7695, SNYK-PYTHON-UVICORN-570471, GHSA-f97h-2pfx-f59f affected introduced 0, fixed 0.11.7 fixed in 0.11.7 summary Uvicorn before 0.11.7 is vulnerable to HTTP response splitting.
2020-07-27	PYSEC-2020-150	uvicorn	0.11.7	This affects all versions of package uvicorn.
published 2020-07-27 modified 2020-08-04 aliases CVE-2020-7694, SNYK-PYTHON-UVICORN-575560, GHSA-33c7-2mpw-hg34 affected introduced 0, fixed 0.11.7 fixed in 0.11.7 summary This affects all versions of package uvicorn.
2020-06-25	PYSEC-2020-80	pillow	7.1.0	In libImaging/SgiRleDecode.c in Pillow through 7.0.0, a number of out-of-bounds reads exist in the parsing of SGI image files, a different issue than CVE-2020-5311.
published 2020-06-25 modified 2020-07-27 aliases CVE-2020-11538, GHSA-43fq-w8qq-v88h affected introduced 0, fixed 7.1.0 fixed in 7.1.0 summary In libImaging/SgiRleDecode.c in Pillow through 7.0.0, a number of out-of-bounds reads exist in the parsing of SGI image files, a different issue than CVE-2020-5311.
2020-06-25	PYSEC-2020-79	pillow	7.0.0	In libImaging/Jpeg2KDecode.c in Pillow before 7.1.0, there are multiple out-of-bounds reads via a crafted JP2 file.
published 2020-06-25 modified 2020-07-27 aliases CVE-2020-10994, GHSA-vj42-xq3r-hr3r affected introduced 0, fixed 7.0.0 fixed in 7.0.0 summary In libImaging/Jpeg2KDecode.c in Pillow before 7.1.0, there are multiple out-of-bounds reads via a crafted JP2 file.
2020-06-25	PYSEC-2020-78	pillow	7.1.0	In Pillow before 7.1.0, there are two Buffer Overflows in libImaging/TiffDecode.c.
published 2020-06-25 modified 2020-07-27 aliases CVE-2020-10379, GHSA-8843-m7mw-mxqm affected introduced 0, fixed 46f4a349b88915787fea3fb91348bb1665831bbb; introduced 0, fixed 7.1.0 fixed in 7.1.0 summary In Pillow before 7.1.0, there are two Buffer Overflows in libImaging/TiffDecode.c.
2020-06-25	PYSEC-2020-77	pillow	7.1.0	In libImaging/PcxDecode.c in Pillow before 7.1.0, an out-of-bounds read can occur when reading PCX files where state->shuffle is instructed to read beyond state->buffer.
published 2020-06-25 modified 2020-07-27 aliases CVE-2020-10378, GHSA-3xv8-3j54-hgrp affected introduced 0, fixed 6a83e4324738bb0452fbe8074a995b1c73f08de7; introduced 0, fixed 7.1.0 fixed in 7.1.0 summary In libImaging/PcxDecode.c in Pillow before 7.1.0, an out-of-bounds read can occur when reading PCX files where state->shuffle is instructed to read beyond state->buffer.
2020-06-25	PYSEC-2020-76	pillow	7.1.0	Pillow before 7.1.0 has multiple out-of-bounds reads in libImaging/FliDecode.c.
published 2020-06-25 modified 2020-08-08 aliases CVE-2020-10177, GHSA-cqhg-xjhh-p8hf affected introduced 0, fixed 7.1.0 fixed in 7.1.0 summary Pillow before 7.1.0 has multiple out-of-bounds reads in libImaging/FliDecode.c.
2020-06-23	PYSEC-2020-95	pyspark	2.4.6	In Apache Spark 2.4.5 and earlier, a standalone resource manager's master may be configured to require authentication (spark.authenticate) via a shared secret.
published 2020-06-23 modified 2021-04-02 aliases CVE-2020-9480, GHSA-wgx7-jwwm-cgjv affected introduced 0, fixed 2.4.6 fixed in 2.4.6 summary In Apache Spark 2.4.5 and earlier, a standalone resource manager's master may be configured to require authentication (spark.authenticate) via a shared secret.
2020-06-03	PYSEC-2020-32	django	3.0.7	An issue was discovered in Django 2.2 before 2.2.13 and 3.0 before 3.0.7.
published 2020-06-03 modified 2021-01-20 aliases CVE-2020-13596, GHSA-2m34-jcjv-45xf affected introduced 2.2, fixed 2.2.13, introduced 3.0, fixed 3.0.7 fixed in 3.0.7 summary An issue was discovered in Django 2.2 before 2.2.13 and 3.0 before 3.0.7.
2020-06-03	PYSEC-2020-31	django	3.0.7	An issue was discovered in Django 2.2 before 2.2.13 and 3.0 before 3.0.7.
published 2020-06-03 modified 2021-01-20 aliases CVE-2020-13254, GHSA-wpjr-j57x-wxfw affected introduced 2.2, fixed 2.2.13, introduced 3.0, fixed 3.0.7 fixed in 3.0.7 summary An issue was discovered in Django 2.2 before 2.2.13 and 3.0 before 3.0.7.
2020-06-01	PYSEC-2020-99	rsa	4.1	Python-RSA before 4.1 ignores leading '\0' bytes during decryption of ciphertext.
published 2020-06-01 modified 2020-09-02 aliases CVE-2020-13757, GHSA-537h-rv9q-vvph affected introduced 0, fixed 4.1 fixed in 4.1 summary Python-RSA before 4.1 ignores leading '\0' bytes during decryption of ciphertext.
2020-05-20	PYSEC-2020-46	httplib2	0.18.0	In httplib2 before version 0.18.0, an attacker controlling unescaped part of uri for `httplib2.Http.request()` could change request headers and body, send additional hidden requests to same server.
published 2020-05-20 modified 2020-08-19 aliases CVE-2020-11078, GHSA-gg84-qgv9-w4pq affected introduced 0, fixed a1457cc31f3206cf691d11d2bf34e98865873e9e; introduced 0, fixed 0.18.0 fixed in 0.18.0 summary In httplib2 before version 0.18.0, an attacker controlling unescaped part of uri for `httplib2.Http.request()` could change request headers and body, send additional hidden requests to same server.
2020-05-15	PYSEC-2020-73	pandas	1.0.4	DISPUTED pandas through 1.0.3 can unserialize and execute commands from an untrusted file that is passed to the read_pickle() function, if __reduce__ makes an os.system call.
published 2020-05-15 modified 2020-05-19 aliases CVE-2020-13091 affected introduced 0, fixed 1.0.4 fixed in 1.0.4 summary DISPUTED pandas through 1.0.3 can unserialize and execute commands from an untrusted file that is passed to the read_pickle() function, if __reduce__ makes an os.system call.
2020-05-15	PYSEC-2020-107	scikit-learn	0.23.1	DISPUTED scikit-learn (aka sklearn) through 0.23.0 can unserialize and execute commands from an untrusted file that is passed to the joblib.load() function, if __reduce__ makes an os.system cal…
published 2020-05-15 modified 2020-05-19 aliases CVE-2020-13092, GHSA-jjw5-xxj6-pcv5 affected introduced 0, fixed 0.23.1 fixed in 0.23.1 summary DISPUTED scikit-learn (aka sklearn) through 0.23.0 can unserialize and execute commands from an untrusted file that is passed to the joblib.load() function, if __reduce__ makes an os.system cal…
2020-03-30	PYSEC-2020-340	bleach	3.1.4	In Mozilla Bleach before 3.1.4, `bleach.clean` behavior parsing style attributes could result in a regular expression denial of service (ReDoS).
published 2020-03-30 modified 2022-01-05 aliases CVE-2020-6817, GHSA-vqhp-cxgc-6wmm, SNYK-PYTHON-BLEACH-561754 affected introduced 0, fixed 3.1.4 fixed in 3.1.4 summary In Mozilla Bleach before 3.1.4, `bleach.clean` behavior parsing style attributes could result in a regular expression denial of service (ReDoS).
2020-03-24	PYSEC-2020-28	bleach	3.1.2	In Mozilla Bleach before 3.12, a mutation XSS in bleach.clean when RCDATA and either svg or math tags are whitelisted and the keyword argument strip=False.
published 2020-03-24 modified 2021-03-30 aliases CVE-2020-6816, GHSA-m6xf-fq7q-8743 affected introduced 0, fixed 3.1.2 fixed in 3.1.2 summary In Mozilla Bleach before 3.12, a mutation XSS in bleach.clean when RCDATA and either svg or math tags are whitelisted and the keyword argument strip=False.
2020-03-24	PYSEC-2020-27	bleach	3.1.1	In Mozilla Bleach before 3.11, a mutation XSS affects users calling bleach.clean with noscript and a raw tag in the allowed/whitelisted tags option.
published 2020-03-24 modified 2021-03-30 aliases CVE-2020-6802, GHSA-q65m-pv3f-wr5r affected introduced 0, fixed 3.1.1 fixed in 3.1.1 summary In Mozilla Bleach before 3.11, a mutation XSS affects users calling bleach.clean with noscript and a raw tag in the allowed/whitelisted tags option.
2020-03-24	PYSEC-2020-96	pyyaml	5.3.1	A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method …
published 2020-03-24 modified 2021-03-26 aliases CVE-2020-1747, GHSA-6757-jp84-gxfx affected introduced 5.1, fixed 5.3.1 fixed in 5.3.1 summary A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method …
2020-03-12	PYSEC-2020-260	twisted	20.3.0rc1	In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability.
published 2020-03-12 modified 2021-08-27 aliases CVE-2020-10109, GHSA-p5xh-vx83-mxcj affected introduced 0, fixed 20.3.0rc1 fixed in 20.3.0rc1 summary In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability.
2020-03-12	PYSEC-2020-259	twisted	20.3.0rc1	In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability.
published 2020-03-12 modified 2021-08-27 aliases CVE-2020-10108, GHSA-h96w-mmrf-2h6v affected introduced 0, fixed 20.3.0rc1 fixed in 20.3.0rc1 summary In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability.
2020-03-11	PYSEC-2020-214	twisted	16.3.1	Twisted before 16.3.1 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTP_PR…
published 2020-03-11 modified 2021-07-05 aliases CVE-2016-1000111, GHSA-3gqj-cmxr-p4x2 affected introduced 0, fixed 16.3.1 fixed in 16.3.1 summary Twisted before 16.3.1 does not attempt to address RFC 3875 section 4.1.18 namespace conflicts and therefore does not protect CGI applications from the presence of untrusted client data in the HTTP_PR…
2020-03-06	PYSEC-2020-149	urllib3	1.25.8	The _encode_invalid_chars function in util/url.py in the urllib3 library 1.25.2 through 1.25.7 for Python allows a denial of service (CPU consumption) because of an inefficient algorithm.
published 2020-03-06 modified 2020-03-09 aliases CVE-2020-7212, GHSA-hmv2-79q8-fv6g affected introduced 0, fixed a74c9cfbaed9f811e7563cfc3dce894928e0221a; introduced 1.25.2, fixed 1.25.8 fixed in 1.25.8 summary The _encode_invalid_chars function in util/url.py in the urllib3 library 1.25.2 through 1.25.7 for Python allows a denial of service (CPU consumption) because of an inefficient algorithm.
2020-03-05	PYSEC-2020-345 withdrawn	django	3.0.4	Withdrawn as duplicate of PYSEC-2020-36.
published 2020-03-05 modified 2026-07-09 withdrawn 2026-07-09 aliases CVE-2020-9402 affected introduced 1.11, fixed 1.11.29, introduced 2.2, fixed 2.2.11, introduced 3.0, fixed 3.0.4 fixed in 3.0.4 summary Withdrawn as duplicate of PYSEC-2020-36.
2020-02-19	PYSEC-2020-176	pyyaml	5.2b1	PyYAML 5.1 through 5.1.2 has insufficient restrictions on the load and load_all functions because of a class deserialization issue, e.g., Popen is a class in the subprocess module.
published 2020-02-19 modified 2020-03-01 aliases CVE-2019-20477, GHSA-3pqx-4fqf-j49f affected introduced 5.1, fixed 5.2b1 fixed in 5.2b1 summary PyYAML 5.1 through 5.1.2 has insufficient restrictions on the load and load_all functions because of a class deserialization issue, e.g., Popen is a class in the subprocess module.
2020-02-03	PYSEC-2020-35	django	3.0.3	Django 1.11 before 1.11.28, 2.2 before 2.2.10, and 3.0 before 3.0.3 allows SQL Injection if untrusted data is used as a StringAgg delimiter (e.g., in Django applications that offer downloads of data …
published 2020-02-03 modified 2020-06-19 aliases CVE-2020-7471, GHSA-hmr4-m2h5-33qx affected introduced 0, fixed eb31d845323618d688ad429479c6dda973056136; introduced 1.11, fixed 1.11.28, introduced 2.2, fixed 2.2.10, introduced 3.0, fixed 3.0.3 fixed in 3.0.3 summary Django 1.11 before 1.11.28, 2.2 before 2.2.10, and 3.0 before 3.0.3 allows SQL Injection if untrusted data is used as a StringAgg delimiter (e.g., in Django applications that offer downloads of data …
2020-01-24	PYSEC-2020-213	tornado	3.2.2	Tornado before 3.2.2 sends arbitrary responses that contain a fixed CSRF token and may be sent with HTTP compression, which makes it easier for remote attackers to conduct a BREACH attack and determi…
published 2020-01-24 modified 2021-07-05 aliases CVE-2014-9720, GHSA-8vpw-mgpf-mpvv affected introduced 0, fixed 1c36307463b1e8affae100bf9386948e6c1b2308; introduced 0, fixed 3.2.2 fixed in 3.2.2 summary Tornado before 3.2.2 sends arbitrary responses that contain a fixed CSRF token and may be sent with HTTP compression, which makes it easier for remote attackers to conduct a BREACH attack and determi…
2020-01-05	PYSEC-2020-172	pillow	6.2.2	There is a DoS vulnerability in Pillow before 6.2.2 caused by FpxImagePlugin.py calling the range function on an unvalidated 32-bit integer if the number of bands is large.
published 2020-01-05 modified 2020-08-24 aliases CVE-2019-19911, GHSA-5gm3-px64-rw72 affected introduced 0, fixed 6.2.2 fixed in 6.2.2 summary There is a DoS vulnerability in Pillow before 6.2.2 caused by FpxImagePlugin.py calling the range function on an unvalidated 32-bit integer if the number of bands is large.
2020-01-03	PYSEC-2020-84	pillow	6.2.2	libImaging/FliDecode.c in Pillow before 6.2.2 has an FLI buffer overflow.
published 2020-01-03 modified 2020-02-18 aliases CVE-2020-5313, GHSA-hj69-c76v-86wr affected introduced 0, fixed a09acd0decd8a87ccce939d5ff65dab59e7d365b; introduced 0, fixed 6.2.2 fixed in 6.2.2 summary libImaging/FliDecode.c in Pillow before 6.2.2 has an FLI buffer overflow.
2020-01-03	PYSEC-2020-83	pillow	6.2.2	libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow.
published 2020-01-03 modified 2020-07-10 aliases CVE-2020-5312, GHSA-p49h-hjvm-jg3h affected introduced 0, fixed 93b22b846e0269ee9594ff71a72bec02d2bea8fd; introduced 0, fixed 6.2.2 fixed in 6.2.2 summary libImaging/PcxDecode.c in Pillow before 6.2.2 has a PCX P mode buffer overflow.
2020-01-03	PYSEC-2020-82	pillow	6.2.2	libImaging/SgiRleDecode.c in Pillow before 6.2.2 has an SGI buffer overflow.
published 2020-01-03 modified 2020-07-10 aliases CVE-2020-5311, GHSA-r7rm-8j6h-r933 affected introduced 0, fixed a79b65c47c7dc6fe623aadf09aa6192fc54548f3; introduced 0, fixed 6.2.2 fixed in 6.2.2 summary libImaging/SgiRleDecode.c in Pillow before 6.2.2 has an SGI buffer overflow.
2020-01-03	PYSEC-2020-81	pillow	6.2.2	libImaging/TiffDecode.c in Pillow before 6.2.2 has a TIFF decoding integer overflow, related to realloc.
published 2020-01-03 modified 2020-01-31 aliases CVE-2020-5310, GHSA-vcqg-3p29-xw73 affected introduced 0, fixed 4e2def2539ec13e53a82e06c4b3daf00454100c4; introduced 0, fixed 6.2.2 fixed in 6.2.2 summary libImaging/TiffDecode.c in Pillow before 6.2.2 has a TIFF decoding integer overflow, related to realloc.
2020-01-02	PYSEC-2020-163	ecdsa	0.13.3	A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding.
published 2020-01-02 modified 2020-12-08 aliases CVE-2019-14859, GHSA-8qxj-f9rh-9fg2 affected introduced 0, fixed 0.13.3 fixed in 0.13.3 summary A flaw was found in all python-ecdsa versions before 0.13.3, where it did not correctly verify whether signatures used DER encoding.
2019-12-18	PYSEC-2019-16	django	2.2.9	Django before 1.11.27, 2.x before 2.2.9, and 3.x before 3.0.1 allows account takeover.
published 2019-12-18 modified 2020-01-08 aliases CVE-2019-19844, GHSA-vfq6-hq5r-27r6 affected introduced 0, fixed 1.11.27, introduced 2.2, fixed 2.2.9 fixed in 2.2.9 summary Django before 1.11.27, 2.x before 2.2.9, and 3.x before 3.0.1 allows account takeover.
2019-12-05	PYSEC-2019-134	validators	0.12.6	The validators package 0.12.2 through 0.12.5 for Python enters an infinite loop when validators.domain is called with a crafted domain string.
published 2019-12-05 modified 2020-08-24 aliases CVE-2019-19588, GHSA-5qcg-w2cc-xffw affected introduced 0.12.2, fixed 0.12.6 fixed in 0.12.6 summary The validators package 0.12.2 through 0.12.5 for Python enters an infinite loop when validators.domain is called with a crafted domain string.
2019-12-02	PYSEC-2019-15	django	2.2.8	Django 2.1 before 2.1.15 and 2.2 before 2.2.8 allows unintended model editing.
published 2019-12-02 modified 2020-05-01 aliases CVE-2019-19118, GHSA-hvmf-r92r-27hr affected introduced 2.1, fixed 2.1.15, introduced 2.2, fixed 2.2.8 fixed in 2.2.8 summary Django 2.1 before 2.1.15 and 2.2 before 2.2.8 allows unintended model editing.
2019-11-26	PYSEC-2019-177	ecdsa	0.13.3	An error-handling flaw was found in python-ecdsa before version 0.13.3.
published 2019-11-26 modified 2021-08-27 aliases CVE-2019-14853, GHSA-2mrj-435v-c2cr, GHSA-pwfw-mgfj-7g3g affected introduced 0, fixed 0.13.3 fixed in 0.13.3 summary An error-handling flaw was found in python-ecdsa before version 0.13.3.
2019-11-25	PYSEC-2019-182	keyring	0.10.1	Python keyring has insecure permissions on new databases allowing world-readable files to be created
published 2019-11-25 modified 2021-08-27 aliases CVE-2012-5578, GHSA-8867-vpm3-g98g affected introduced 0, fixed 0.10.1 fixed in 0.10.1 summary Python keyring has insecure permissions on new databases allowing world-readable files to be created
2019-11-12	PYSEC-2019-212	twisted	14.0.1	Python Twisted 14.0 trustRoot is not respected in HTTP client
published 2019-11-12 modified 2021-08-27 aliases CVE-2014-7143, GHSA-3c45-wgjp-7v9r affected introduced 0, fixed 14.0.1 fixed in 14.0.1 summary Python Twisted 14.0 trustRoot is not respected in HTTP client
2019-11-12	PYSEC-2019-41	psutil	5.6.6	psutil (aka python-psutil) through 5.6.5 can have a double free.
published 2019-11-12 modified 2019-11-18 aliases CVE-2019-18874, GHSA-qfc5-mcwq-26q8 affected introduced 0, fixed 5.6.6 fixed in 5.6.6 summary psutil (aka python-psutil) through 5.6.5 can have a double free.
2019-11-08	PYSEC-2019-196	pyarrow	0.15.0	While investigating UBSAN errors in https://github.com/apache/arrow/pull/5365 it was discovered Apache Arrow versions 0.12.0 to 0.14.1, left memory Array data uninitialized when reading RLE null data…
published 2019-11-08 modified 2021-08-27 aliases CVE-2019-12410, GHSA-cjw4-2w9r-r8mv affected introduced 0.12.0, fixed 0.15.0 fixed in 0.15.0 summary While investigating UBSAN errors in https://github.com/apache/arrow/pull/5365 it was discovered Apache Arrow versions 0.12.0 to 0.14.1, left memory Array data uninitialized when reading RLE null data…
2019-11-08	PYSEC-2019-195	pyarrow	0.15.0	It was discovered that the C++ implementation (which underlies the R, Python and Ruby implementations) of Apache Arrow 0.14.0 to 0.14.1 had a uninitialized memory bug when building arrays with null v…
published 2019-11-08 modified 2021-08-27 aliases CVE-2019-12408, GHSA-8cw2-jv5c-c825 affected introduced 0.14.0, fixed 0.15.0 fixed in 0.15.0 summary It was discovered that the C++ implementation (which underlies the R, Python and Ruby implementations) of Apache Arrow 0.14.0 to 0.14.1 had a uninitialized memory bug when building arrays with null v…
2019-11-05	PYSEC-2019-160	pip	1.5	The mirroring support (-M, --use-mirrors) in Python Pip before 1.5 uses insecure DNS querying and authenticity checks which allows attackers to perform man-in-the-middle attacks.
published 2019-11-05 modified 2021-07-15 aliases CVE-2013-5123, GHSA-c5h8-cq4v-cvfm affected introduced 0, fixed 1.5 fixed in 1.5 summary The mirroring support (-M, --use-mirrors) in Python Pip before 1.5 uses insecure DNS querying and authenticity checks which allows attackers to perform man-in-the-middle attacks.
2019-11-04	PYSEC-2019-156	scipy	0.12.1	The scipy.weave component in SciPy before 0.12.1 creates insecure temporary directories.
published 2019-11-04 modified 2021-07-05 aliases CVE-2013-4251, GHSA-xp76-357g-9wqq affected introduced 0, fixed bd296e0336420b840fcd2faabb97084fd252a973; introduced 0, fixed 0.12.1 fixed in 0.12.1 summary The scipy.weave component in SciPy before 0.12.1 creates insecure temporary directories.
2019-10-31	PYSEC-2019-176	docutils	0.6	python-docutils allows insecure usage of temporary files
published 2019-10-31 modified 2021-08-27 aliases CVE-2009-5042, GHSA-cg75-6938-wx58 affected introduced 0.5, fixed 0.6 fixed in 0.6 summary python-docutils allows insecure usage of temporary files
2019-10-31	PYSEC-2019-157	notebook	5.5.0	Jupyter Notebook before 5.5.0 does not use a CSP header to treat served files as belonging to a separate origin.
published 2019-10-31 modified 2021-07-15 aliases CVE-2018-21030, GHSA-jqwc-jm56-wcwj affected introduced 0, fixed 5.5.0 fixed in 5.5.0 summary Jupyter Notebook before 5.5.0 does not use a CSP header to treat served files as belonging to a separate origin.
2019-10-28	PYSEC-2019-181	keyring	0.10	Python keyring lib before 0.10 created keyring files with world-readable permissions.
published 2019-10-28 modified 2021-08-27 aliases CVE-2012-5577, GHSA-p86x-652p-6385 affected introduced 0, fixed 0.10 fixed in 0.10 summary Python keyring lib before 0.10 created keyring files with world-readable permissions.
2019-10-16	PYSEC-2019-117	reportlab	3.5.28	ReportLab through 3.5.26 allows remote code execution because of toColor(eval(arg)) in colors.py, as demonstrated by a crafted XML document with '<span color="' followed by arbitrary Python code.
published 2019-10-16 modified 2020-07-27 aliases CVE-2019-17626, GHSA-qpg2-vx7j-3869 affected introduced 0, fixed 3.5.28 fixed in 3.5.28 summary ReportLab through 3.5.26 allows remote code execution because of toColor(eval(arg)) in colors.py, as demonstrated by a crafted XML document with '<span color="' followed by arbitrary Python code.
2019-10-04	PYSEC-2019-110	pillow	6.2.0	An issue was discovered in Pillow before 6.2.0.
published 2019-10-04 modified 2020-02-18 aliases CVE-2019-16865, GHSA-j7mj-748x-7p78 affected introduced 0, fixed 6.2.0 fixed in 6.2.0 summary An issue was discovered in Pillow before 6.2.0.
2019-08-22	PYSEC-2019-106	nltk	3.4.5	NLTK Downloader before 3.4.5 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ (dot dot slash) in an NLTK package (ZIP archive) that is mishandled during e…
published 2019-08-22 modified 2020-03-27 aliases CVE-2019-14751, GHSA-mr7p-25v2-35wr affected introduced 0, fixed f59d7ed8df2e0e957f7f247fe218032abdbe9a10; introduced 0, fixed 3.4.5 fixed in 3.4.5 summary NLTK Downloader before 3.4.5 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ (dot dot slash) in an NLTK package (ZIP archive) that is mishandled during e…
2019-08-09	PYSEC-2019-140	werkzeug	0.15.3	Pallets Werkzeug before 0.15.3, when used with Docker, has insufficient debugger PIN randomness because Docker containers share the same machine id.
published 2019-08-09 modified 2019-09-11 aliases CVE-2019-14806, GHSA-gq9m-qvpx-68hc affected introduced 0, fixed 00bc43b1672e662e5e3b8cecd79e67fc968fa246; introduced 0, fixed 0.15.3 fixed in 0.15.3 summary Pallets Werkzeug before 0.15.3, when used with Docker, has insufficient debugger PIN randomness because Docker containers share the same machine id.
2019-08-09	PYSEC-2019-13	django	2.2.4	An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4.
published 2019-08-09 modified 2019-08-28 aliases CVE-2019-14234, GHSA-6r97-cj55-9hrq affected introduced 2.1, fixed 2.1.11, introduced 1.11, fixed 1.11.23, introduced 2.2, fixed 2.2.4 fixed in 2.2.4 summary An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4.
2019-08-07	PYSEC-2019-114	pyspark	2.3.3	Prior to Spark 2.3.3, in certain situations Spark would write user data to local disk unencrypted, even if spark.io.encryption.enabled=true.
published 2019-08-07 modified 2020-06-23 aliases CVE-2019-10099, GHSA-fp5j-3fpf-mhj5 affected introduced 0, fixed 2.3.3 fixed in 2.3.3 summary Prior to Spark 2.3.3, in certain situations Spark would write user data to local disk unencrypted, even if spark.io.encryption.enabled=true.
2019-08-02	PYSEC-2019-14	django	2.2.4	An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4.
published 2019-08-02 modified 2020-08-24 aliases CVE-2019-14235, GHSA-v9qg-3j8p-r63v affected introduced 2.2, fixed 2.2.4, introduced 1.11, fixed 1.11.23, introduced 2.1, fixed 2.1.11 fixed in 2.2.4 summary An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4.
2019-08-02	PYSEC-2019-12	django	2.2.4	An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4.
published 2019-08-02 modified 2020-08-24 aliases CVE-2019-14233, GHSA-h5jv-4p7w-64jg affected introduced 2.1, fixed 2.1.11, introduced 2.2, fixed 2.2.4, introduced 1.11, fixed 1.11.23 fixed in 2.2.4 summary An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4.
2019-08-02	PYSEC-2019-11	django	2.2.4	An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4.
published 2019-08-02 modified 2020-08-24 aliases CVE-2019-14232, GHSA-c4qh-4vgv-qc6g affected introduced 1.11, fixed 1.11.23, introduced 2.1, fixed 2.1.11, introduced 2.2, fixed 2.2.4 fixed in 2.2.4 summary An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4.
2019-07-17	PYSEC-2019-179	flask	1.0	The Pallets Project Flask before 1.0 is affected by: unexpected memory usage.
published 2019-07-17 modified 2021-08-27 aliases CVE-2019-1010083, GHSA-5wv5-4vpf-pj6m affected introduced 0, fixed 1.0 fixed in 1.0 summary The Pallets Project Flask before 1.0 is affected by: unexpected memory usage.
2019-07-16	PYSEC-2019-170	python-engineio	3.9.0	An issue was discovered in python-engineio through 3.8.2.
published 2019-07-16 modified 2021-08-25 aliases CVE-2019-13611, GHSA-j3jp-gvr5-7hwq affected introduced 0, fixed 3.9.0 fixed in 3.9.0 summary An issue was discovered in python-engineio through 3.8.2.
2019-07-01	PYSEC-2019-10	django	2.2.3	An issue was discovered in Django 1.11 before 1.11.22, 2.1 before 2.1.10, and 2.2 before 2.2.3.
published 2019-07-01 modified 2020-08-24 aliases CVE-2019-12781, GHSA-6c7v-2f49-8h26 affected introduced 2.1, fixed 2.1.10, introduced 2.2, fixed 2.2.3, introduced 1.11, fixed 1.11.22 fixed in 2.2.3 summary An issue was discovered in Django 1.11 before 1.11.22, 2.1 before 2.1.10, and 2.2 before 2.2.3.
2019-06-16	PYSEC-2019-129	twisted	19.7.0rc1	In words.protocols.jabber.xmlstream in Twisted through 19.2.1, XMPP support did not verify certificates when used with TLS, allowing an attacker to MITM connections.
published 2019-06-16 modified 2019-08-14 aliases CVE-2019-12855, GHSA-65rm-h285-5cc5 affected introduced 0, fixed 19.7.0rc1 fixed in 19.7.0rc1 summary In words.protocols.jabber.xmlstream in Twisted through 19.2.1, XMPP support did not verify certificates when used with TLS, allowing an attacker to MITM connections.
2019-06-10	PYSEC-2019-128	twisted	19.2.1	In Twisted before 19.2.1, twisted.web did not validate or sanitize URIs or HTTP methods, allowing an attacker to inject invalid characters such as CRLF.
published 2019-06-10 modified 2020-08-24 aliases CVE-2019-12387, GHSA-6cc5-2vg4-cc7m affected introduced 0, fixed 6c61fc4503ae39ab8ecee52d10f10ee2c371d7e2; introduced 0, fixed 19.2.1 fixed in 19.2.1 summary In Twisted before 19.2.1, twisted.web did not validate or sanitize URIs or HTTP methods, allowing an attacker to inject invalid characters such as CRLF.
2019-06-06	PYSEC-2019-109	parso	0.5.0	DISPUTED A deserialization vulnerability exists in the way parso through 0.4.0 handles grammar parsing from the cache.
published 2019-06-06 modified 2019-07-05 aliases CVE-2019-12760, GHSA-22mf-97vh-x8rw affected introduced 0, fixed 0.5.0 fixed in 0.5.0 summary DISPUTED A deserialization vulnerability exists in the way parso through 0.4.0 handles grammar parsing from the cache.
2019-06-03	PYSEC-2019-79	django	2.2.2	An issue was discovered in Django 1.11 before 1.11.21, 2.1 before 2.1.9, and 2.2 before 2.2.2.
published 2019-06-03 modified 2019-06-12 aliases CVE-2019-12308, GHSA-7rp2-fm2h-wchj affected introduced 2.1, fixed 2.1.9, introduced 1.11, fixed 1.11.21, introduced 2.2, fixed 2.2.2 fixed in 2.2.2 summary An issue was discovered in Django 1.11 before 1.11.21, 2.1 before 2.1.9, and 2.2 before 2.2.2.
2019-04-18	PYSEC-2019-133	urllib3	1.24.2	The urllib3 library before 1.24.2 for Python mishandles certain cases where the desired set of CA certificates is different from the OS store of CA certificates, which results in SSL connections succ…
published 2019-04-18 modified 2019-09-14 aliases CVE-2019-11324, GHSA-mh33-7rrq-662w affected introduced 0, fixed 1.24.2 fixed in 1.24.2 summary The urllib3 library before 1.24.2 for Python mishandles certain cases where the desired set of CA certificates is different from the OS store of CA certificates, which results in SSL connections succ…
2019-04-15	PYSEC-2019-132	urllib3	1.24.3	In the urllib3 library through 1.24.1 for Python, CRLF injection is possible if the attacker controls the request parameter.
published 2019-04-15 modified 2019-06-13 aliases CVE-2019-11236, GHSA-r64q-w8jr-g9qp affected introduced 0, fixed 1.24.3 fixed in 1.24.3 summary In the urllib3 library through 1.24.1 for Python, CRLF injection is possible if the attacker controls the request parameter.
2019-04-08	PYSEC-2019-220	jinja2	2.8.1	In Pallets Jinja before 2.8.1, str.format allows a sandbox escape.
published 2019-04-08 modified 2021-11-22 aliases CVE-2016-10745, GHSA-hj2j-77xm-mc5v affected introduced 0, fixed 9b53045c34e61013dc8f09b7e52a555fa16bed16; introduced 0, fixed 2.8.1 fixed in 2.8.1 summary In Pallets Jinja before 2.8.1, str.format allows a sandbox escape.
2019-04-07	PYSEC-2019-217	jinja2	2.10.1	In Pallets Jinja before 2.10.1, str.format_map allows a sandbox escape.
published 2019-04-07 modified 2021-11-22 aliases CVE-2019-10906, GHSA-462w-v97r-4m45 affected introduced 0, fixed 2.10.1 fixed in 2.10.1 summary In Pallets Jinja before 2.10.1, str.format_map allows a sandbox escape.
2019-04-04	PYSEC-2019-158	notebook	5.7.8	In Jupyter Notebook before 5.7.8, an open redirect can occur via an empty netloc.
published 2019-04-04 modified 2021-07-15 aliases CVE-2019-10856, GHSA-rcx2-m7jp-p9wj affected introduced 0, fixed 5.7.8 fixed in 5.7.8 summary In Jupyter Notebook before 5.7.8, an open redirect can occur via an empty netloc.
2019-03-12	PYSEC-2019-159	notebook	5.7.6	An XSSI (cross-site inclusion) vulnerability in Jupyter Notebook before 5.7.6 allows inclusion of resources on malicious pages when visited by users who are authenticated with a Jupyter server.
published 2019-03-12 modified 2021-07-15 aliases CVE-2019-9644, GHSA-hhx8-cr55-qcxx affected introduced 0, fixed 5.7.6 fixed in 5.7.6 summary An XSSI (cross-site inclusion) vulnerability in Jupyter Notebook before 5.7.6 allows inclusion of resources on malicious pages when visited by users who are authenticated with a Jupyter server.
2019-02-20	PYSEC-2019-123	sqlalchemy	1.3.0b3	SQLAlchemy before 1.3.0b3 allows SQL Injection via the order_by parameter.
published 2019-02-20 modified 2026-06-09 aliases CVE-2019-7164, GHSA-887w-45rq-vxgf affected introduced 0, fixed 1.3.0b3 fixed in 1.3.0b3 summary SQLAlchemy before 1.3.0b3 allows SQL Injection via the order_by parameter.
2019-02-11	PYSEC-2019-18	django	2.1.7	Django 1.11.x before 1.11.19, 2.0.x before 2.0.11, and 2.1.x before 2.1.6 allows Uncontrolled Memory Consumption via a malicious attacker-supplied value to the django.utils.numberformat.format() func…
published 2019-02-11 modified 2020-08-24 aliases CVE-2019-6975, GHSA-wh4h-v3f2-r2pp affected introduced 1.11, fixed 1.11.19, introduced 2.0, fixed 2.0.12, introduced 2.1, fixed 2.1.7 fixed in 2.1.7 summary Django 1.11.x before 1.11.19, 2.0.x before 2.0.11, and 2.1.x before 2.1.6 allows Uncontrolled Memory Consumption via a malicious attacker-supplied value to the django.utils.numberformat.format() func…
2019-02-06	PYSEC-2019-124	sqlalchemy	1.2.18	SQLAlchemy 1.2.17 has SQL Injection when the group_by parameter can be controlled.
published 2019-02-06 modified 2021-01-20 aliases CVE-2019-7548, GHSA-38fc-9xqv-7f7q affected introduced 0, fixed 1.2.18 fixed in 1.2.18 summary SQLAlchemy 1.2.17 has SQL Injection when the group_by parameter can be controlled.
2019-02-04	PYSEC-2019-169	pyspark	2.3.2	When using PySpark , it's possible for a different local user to connect to the Spark application and impersonate the user running the Spark application.
published 2019-02-04 modified 2021-08-25 aliases CVE-2018-11760, GHSA-fvxv-9xxr-h7wj affected introduced 2.3.0, fixed 2.3.2, introduced 1.0.2, fixed 2.2.3 fixed in 2.3.2 summary When using PySpark , it's possible for a different local user to connect to the Spark application and impersonate the user running the Spark application.
2019-01-16	PYSEC-2019-108	numpy	1.16.1	DISPUTED An issue was discovered in NumPy 1.16.0 and earlier.
published 2019-01-16 modified 2019-10-01 aliases CVE-2019-6446, GHSA-9fq2-x9r6-wfmf affected introduced 0, fixed 1.16.1 fixed in 1.16.1 summary DISPUTED An issue was discovered in NumPy 1.16.0 and earlier.
2019-01-09	PYSEC-2019-17	django	2.1.5	In Django 1.11.x before 1.11.18, 2.0.x before 2.0.10, and 2.1.x before 2.1.5, an Improper Neutralization of Special Elements in Output Used by a Downstream Component issue exists in django.views.defa…
published 2019-01-09 modified 2019-04-23 aliases CVE-2019-3498, GHSA-337x-4q8g-prc5 affected introduced 1.11, fixed 1.11.18, introduced 2.0, fixed 2.0.10, introduced 2.1, fixed 2.1.5 fixed in 2.1.5 summary In Django 1.11.x before 1.11.18, 2.0.x before 2.0.10, and 2.1.x before 2.1.5, an Improper Neutralization of Special Elements in Output Used by a Downstream Component issue exists in django.views.defa…
2018-12-11	PYSEC-2018-32	urllib3	1.23	urllib3 before version 1.23 does not remove the Authorization HTTP header when following a cross-origin redirect (i.e., a redirect that differs in host, port, or scheme).
published 2018-12-11 modified 2021-06-10 aliases CVE-2018-20060, GHSA-www2-v7xj-xrc6 affected introduced 0, fixed 1.23 fixed in 1.23 summary urllib3 before version 1.23 does not remove the Authorization HTTP header when following a cross-origin redirect (i.e., a redirect that differs in host, port, or scheme).
2018-12-02	PYSEC-2018-12	lxml	4.2.5	An issue was discovered in lxml before 4.2.5.
published 2018-12-02 modified 2021-06-16 aliases CVE-2018-19787, GHSA-xp26-p53h-6h2p affected introduced 0, fixed 6be1d081b49c97cfd7b3fbd934a193b668629109; introduced 0, fixed 4.2.5 fixed in 4.2.5 summary An issue was discovered in lxml before 4.2.5.
2018-11-18	PYSEC-2018-18	notebook	5.7.2	Jupyter Notebook before 5.7.2 allows XSS via a crafted directory name because notebook/static/tree/js/notebooklist.js handles certain URLs unsafely.
published 2018-11-18 modified 2021-06-10 aliases CVE-2018-19352, GHSA-3p4q-x8f3-p7vq affected introduced 0, fixed 288b73e1edbf527740e273fcc69b889460871648; introduced 0, fixed 5.7.2 fixed in 5.7.2 summary Jupyter Notebook before 5.7.2 allows XSS via a crafted directory name because notebook/static/tree/js/notebooklist.js handles certain URLs unsafely.
2018-11-18	PYSEC-2018-17	notebook	5.7.1	Jupyter Notebook before 5.7.1 allows XSS via an untrusted notebook because nbconvert responses are considered to have the same origin as the notebook server.
published 2018-11-18 modified 2021-06-10 aliases CVE-2018-19351, GHSA-49qr-xh3w-h436 affected introduced 0, fixed 107a89fce5f413fb5728c1c5d2c7788e1fb17491; introduced 0, fixed 5.7.1 fixed in 5.7.1 summary Jupyter Notebook before 5.7.1 allows XSS via an untrusted notebook because nbconvert responses are considered to have the same origin as the notebook server.
2018-10-09	PYSEC-2018-28	requests	2.20.0	The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to di…
published 2018-10-09 modified 2021-06-16 aliases CVE-2018-18074, GHSA-x84v-xcm2-53pg affected introduced 0, fixed c45d7c49ea75133e52ab22a8e9e13173938e36ff; introduced 0, fixed 2.20.0 fixed in 2.20.0 summary The Requests package before 2.20.0 for Python sends an HTTP Authorization header to an http URI upon receiving a same-hostname https-to-http redirect, which makes it easier for remote attackers to di…
2018-10-08	PYSEC-2018-69	paramiko	2.0.9	Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE.
published 2018-10-08 modified 2021-08-25 aliases CVE-2018-1000805, GHSA-f2j6-wrhh-v25m affected introduced 1.5.1, fixed 2.0.9 fixed in 2.0.9 summary Paramiko version 2.4.1, 2.3.2, 2.2.3, 2.1.5, 2.0.8, 1.18.5, 1.17.6 contains a Incorrect Access Control vulnerability in SSH server that can result in RCE.
2018-10-08	PYSEC-2018-24	pyopenssl	17.5.0	Python Cryptographic Authority pyopenssl version Before 17.5.0 contains a CWE - 401 : Failure to Release Memory Before Removing Last Reference vulnerability in PKCS #12 Store that can result in Denia…
published 2018-10-08 modified 2021-06-10 aliases CVE-2018-1000808, GHSA-2rcm-phc9-3945 affected introduced 0, fixed 17.5.0 fixed in 17.5.0 summary Python Cryptographic Authority pyopenssl version Before 17.5.0 contains a CWE - 401 : Failure to Release Memory Before Removing Last Reference vulnerability in PKCS #12 Store that can result in Denia…
2018-10-08	PYSEC-2018-23	pyopenssl	17.5.0	Python Cryptographic Authority pyopenssl version prior to version 17.5.0 contains a CWE-416: Use After Free vulnerability in X509 object handling that can result in Use after free can lead to possibl…
published 2018-10-08 modified 2021-06-10 aliases CVE-2018-1000807, GHSA-p28m-34f6-967q affected introduced 0, fixed 17.5.0 fixed in 17.5.0 summary Python Cryptographic Authority pyopenssl version prior to version 17.5.0 contains a CWE-416: Use After Free vulnerability in X509 object handling that can result in Use after free can lead to possibl…
2018-10-02	PYSEC-2018-3	django	2.1.2	An issue was discovered in Django 2.1 before 2.1.2, in which unprivileged users can read the password hashes of arbitrary accounts.
published 2018-10-02 modified 2021-06-10 aliases CVE-2018-16984, GHSA-6mx3-3vqg-hpp2 affected introduced 2.1, fixed 2.1.2 fixed in 2.1.2 summary An issue was discovered in Django 2.1 before 2.1.2, in which unprivileged users can read the password hashes of arbitrary accounts.
2018-09-18	PYSEC-2018-67	marshmallow	3.0.0b9	In the marshmallow library before 2.15.1 and 3.x before 3.0.0b9 for Python, the schema "only" option treats an empty list as implying no "only" option, which allows a request that was intended to exp…
published 2018-09-18 modified 2021-09-01 aliases CVE-2018-17175, GHSA-9q2p-fj49-vpxj affected introduced 0, fixed 2.15.1, introduced 3.0a0, fixed 3.0.0b9 fixed in 3.0.0b9 summary In the marshmallow library before 2.15.1 and 3.x before 3.0.0b9 for Python, the schema "only" option treats an empty list as implying no "only" option, which allows a request that was intended to exp…
2018-08-20	PYSEC-2018-66	flask	0.12.3	The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of servi…
published 2018-08-20 modified 2021-08-25 aliases CVE-2018-1000656, GHSA-562c-5r94-xh97 affected introduced 0, fixed 0.12.3 fixed in 0.12.3 summary The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of servi…
2018-08-20	PYSEC-2018-21	pycryptodome	3.6.6	PyCryptodome before 3.6.6 has an integer overflow in the data_len variable in AESNI.c, related to the AESNI_encrypt and AESNI_decrypt functions, leading to the mishandling of messages shorter than 16…
published 2018-08-20 modified 2021-06-10 aliases CVE-2018-15560, GHSA-hgg3-g7gr-66r7 affected introduced 0, fixed 3.6.6 fixed in 3.6.6 summary PyCryptodome before 3.6.6 has an integer overflow in the data_len variable in AESNI.c, related to the AESNI_encrypt and AESNI_decrypt functions, leading to the mishandling of messages shorter than 16…
2018-08-03	PYSEC-2018-2	django	2.0.8	django.middleware.common.CommonMiddleware in Django 1.11.x before 1.11.15 and 2.0.x before 2.0.8 has an Open Redirect.
published 2018-08-03 modified 2021-06-10 aliases CVE-2018-14574, GHSA-5hg3-6c2f-f3wr affected introduced 2.0, fixed 2.0.8, introduced 1.11, fixed 1.11.15 fixed in 2.0.8 summary django.middleware.common.CommonMiddleware in Django 1.11.x before 1.11.15 and 2.0.x before 2.0.8 has an Open Redirect.
2018-07-30	PYSEC-2018-52	cryptography	2.3	A flaw was found in python-cryptography versions between >=1.9.0 and <2.3.
published 2018-07-30 modified 2021-07-15 aliases CVE-2018-10903, GHSA-fcf9-3qw3-gxmj affected introduced 1.9, fixed 2.3 fixed in 2.3 summary A flaw was found in python-cryptography versions between >=1.9.0 and <2.3.
2018-07-12	PYSEC-2018-25	pyspark	2.2.2	In Apache Spark 1.0.0 to 2.1.2, 2.2.0 to 2.2.1, and 2.3.0, when using PySpark or SparkR, it's possible for a different local user to connect to the Spark application and impersonate the user running …
published 2018-07-12 modified 2021-06-16 aliases CVE-2018-1334, GHSA-6mqq-8r44-vmjc affected introduced 2.2.0, fixed 2.2.2, introduced 0, fixed 2.1.3 fixed in 2.2.2 summary In Apache Spark 1.0.0 to 2.1.2, 2.2.0 to 2.2.1, and 2.3.0, when using PySpark or SparkR, it's possible for a different local user to connect to the Spark application and impersonate the user running …
2018-06-27	PYSEC-2018-49	pyyaml	5.1	In PyYAML before 5.1, the yaml.load() API could execute arbitrary code if used with untrusted data.
published 2018-06-27 modified 2021-07-05 aliases CVE-2017-18342, GHSA-rprw-h62v-c2w7 affected introduced 0, fixed 5.1 fixed in 5.1 summary In PyYAML before 5.1, the yaml.load() API could execute arbitrary code if used with untrusted data.
2018-06-26	PYSEC-2018-79	websockets	5.0	aaugustin websockets version 4 contains a CWE-409: Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Servers and clients, unless configured with compression=None that …
published 2018-06-26 modified 2021-08-25 aliases CVE-2018-1000518, GHSA-6g87-ff9q-v847 affected introduced 0, fixed 5.0 fixed in 5.0 summary aaugustin websockets version 4 contains a CWE-409: Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Servers and clients, unless configured with compression=None that …
2018-04-18	PYSEC-2018-55	gunicorn	19.5.0	gunicorn version 19.4.5 contains a CWE-113: Improper Neutralization of CRLF Sequences in HTTP Headers vulnerability in "process_headers" function in "gunicorn/http/wsgi.py" that can result in an atta…
published 2018-04-18 modified 2021-07-15 aliases CVE-2018-1000164, GHSA-32pc-xphx-q4f6 affected introduced 0, fixed 19.5.0 fixed in 19.5.0 summary gunicorn version 19.4.5 contains a CWE-113: Improper Neutralization of CRLF Sequences in HTTP Headers vulnerability in "process_headers" function in "gunicorn/http/wsgi.py" that can result in an atta…
2018-03-18	PYSEC-2018-57	notebook	5.4.1	In Jupyter Notebook before 5.4.1, a maliciously forged notebook file can bypass sanitization to execute JavaScript in the notebook context.
published 2018-03-18 modified 2021-07-15 aliases CVE-2018-8768, GHSA-6cwv-x26c-w2q4 affected introduced 0, fixed 5.4.1 fixed in 5.4.1 summary In Jupyter Notebook before 5.4.1, a maliciously forged notebook file can bypass sanitization to execute JavaScript in the notebook context.
2018-03-13	PYSEC-2018-19	paramiko	2.3.2	transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 d…
published 2018-03-13 modified 2021-06-10 aliases CVE-2018-7750, GHSA-232r-66cg-79px affected introduced 0, fixed fa29bd8446c8eab237f5187d28787727b4610516; introduced 0, fixed 1.17.6, introduced 1.18.0, fixed 1.18.5, introduced 2.0.0, fixed 2.0.8, introduced 2.1.0, fixed 2.1.5, introduced 2.2.0, fixed 2.2.3, introduced 2.3.0, fixed 2.3.2 fixed in 2.3.2 summary transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 d…
2018-03-09	PYSEC-2018-6	django	2.0.3	An issue was discovered in Django 2.0 before 2.0.3, 1.11 before 1.11.11, and 1.8 before 1.8.19.
published 2018-03-09 modified 2021-06-10 aliases CVE-2018-7537, GHSA-2f9x-5v75-3qv4 affected introduced 1.8, fixed 1.8.19, introduced 1.11, fixed 1.11.11, introduced 2.0, fixed 2.0.3 fixed in 2.0.3 summary An issue was discovered in Django 2.0 before 2.0.3, 1.11 before 1.11.11, and 1.8 before 1.8.19.
2018-03-09	PYSEC-2018-5	django	2.0.3	An issue was discovered in Django 2.0 before 2.0.3, 1.11 before 1.11.11, and 1.8 before 1.8.19.
published 2018-03-09 modified 2021-06-16 aliases CVE-2018-7536, GHSA-r28v-mw67-m5p9 affected introduced 1.8, fixed 1.8.19, introduced 1.11, fixed 1.11.11, introduced 2.0, fixed 2.0.3 fixed in 2.0.3 summary An issue was discovered in Django 2.0 before 2.0.3, 1.11 before 1.11.11, and 1.8 before 1.8.19.
2018-03-07	PYSEC-2018-51	bleach	2.1.3	An issue was discovered in Bleach 2.1.x before 2.1.3.
published 2018-03-07 modified 2021-07-15 aliases CVE-2018-7753, GHSA-m9mq-p2f9-cfqv affected introduced 0, fixed c5df5789ec3471a31311f42c2d19fc2cf21b35ef; introduced 2.1, fixed 2.1.3 fixed in 2.1.3 summary An issue was discovered in Bleach 2.1.x before 2.1.3.
2018-02-05	PYSEC-2018-4	django	2.0.2	django.contrib.auth.forms.AuthenticationForm in Django 2.0 before 2.0.2, and 1.11.8 and 1.11.9, allows remote attackers to obtain potentially sensitive information by leveraging data exposure from th…
published 2018-02-05 modified 2021-06-16 aliases CVE-2018-6188, GHSA-rf4j-j272-fj86 affected introduced 2.0, fixed 2.0.2 fixed in 2.0.2 summary django.contrib.auth.forms.AuthenticationForm in Django 2.0 before 2.0.2, and 1.11.8 and 1.11.9, allows remote attackers to obtain potentially sensitive information by leveraging data exposure from th…
2018-01-08	PYSEC-2018-34	numpy	1.8.1	(1) core/tests/test_memmap.py, (2) core/tests/test_multiarray.py, (3) f2py/f2py2e.py, and (4) lib/tests/test_io.py in NumPy before 1.8.1 allow local users to write to arbitrary files via a symlink at…
published 2018-01-08 modified 2021-06-29 aliases CVE-2014-1859, GHSA-2fc2-6r4j-p65h affected introduced 0, fixed 0bb46c1448b0d3f5453d5182a17ea7ac5854ee15; introduced 0, fixed 1.8.1 fixed in 1.8.1 summary (1) core/tests/test_memmap.py, (2) core/tests/test_multiarray.py, (3) f2py/f2py2e.py, and (4) lib/tests/test_io.py in NumPy before 1.8.1 allow local users to write to arbitrary files via a symlink at…
2018-01-08	PYSEC-2018-33	numpy	1.8.1	__init__.py in f2py in NumPy before 1.8.1 allows local users to write to arbitrary files via a symlink attack on a temporary file.
published 2018-01-08 modified 2021-06-29 aliases CVE-2014-1858, GHSA-cw6w-4rcx-xphc affected introduced 0, fixed 0bb46c1448b0d3f5453d5182a17ea7ac5854ee15; introduced 0, fixed 1.8.1 fixed in 1.8.1 summary __init__.py in f2py in NumPy before 1.8.1 allows local users to write to arbitrary files via a symlink attack on a temporary file.
2017-12-29	PYSEC-2017-18	mistune	0.8.1	Cross-site scripting (XSS) vulnerability in the _keyify function in mistune.py in Mistune before 0.8.1 allows remote attackers to inject arbitrary web script or HTML by leveraging failure to escape t…
published 2017-12-29 modified 2021-07-05 aliases CVE-2017-16876, GHSA-98gj-wwxm-cj3h affected introduced 0, fixed 5f06d724bc05580e7f203db2d4a4905fc1127f98; introduced 0, fixed 0.8.1 fixed in 0.8.1 summary Cross-site scripting (XSS) vulnerability in the _keyify function in mistune.py in Mistune before 0.8.1 allows remote attackers to inject arbitrary web script or HTML by leveraging failure to escape t…
2017-10-29	PYSEC-2017-12	dulwich	0.18.5	Dulwich before 0.18.5, when an SSH subprocess is used, allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, a related issue to CVE-2017…
published 2017-10-29 modified 2021-07-05 aliases CVE-2017-16228, GHSA-cwwh-4382-6fwr affected introduced 0, fixed 0.18.5 fixed in 0.18.5 summary Dulwich before 0.18.5, when an SSH subprocess is used, allows remote attackers to execute arbitrary commands via an ssh URL with an initial dash character in the hostname, a related issue to CVE-2017…
2017-10-23	PYSEC-2017-43	werkzeug	0.11.11	Cross-site scripting (XSS) vulnerability in the render_full function in debug/tbtools.py in the debugger in Pallets Werkzeug before 0.11.11 (as used in Pallets Flask and other products) allows remote…
published 2017-10-23 modified 2021-07-05 aliases CVE-2016-10516, GHSA-h2fp-xgx6-xh6f affected introduced 0, fixed 0.11.11 fixed in 0.11.11 summary Cross-site scripting (XSS) vulnerability in the render_full function in debug/tbtools.py in the debugger in Pallets Werkzeug before 0.11.11 (as used in Pallets Flask and other products) allows remote…
2017-10-19	PYSEC-2017-80	mistune	0.8	mistune.py in Mistune 0.7.4 allows XSS via an unexpected newline (such as in java\nscript:) or a crafted email address, related to the escape and autolink functions.
published 2017-10-19 modified 2021-08-25 aliases CVE-2017-15612, GHSA-hpv5-v8g5-c864 affected introduced 0, fixed 0.8 fixed in 0.8 summary mistune.py in Mistune 0.7.4 allows XSS via an unexpected newline (such as in java\nscript:) or a crafted email address, related to the escape and autolink functions.
2017-09-25	PYSEC-2017-150 withdrawn	protobuf	3.1.0.post1	Withdrawn as duplicate of PYSEC-2017-65 protobuf allows remote authenticated attackers to cause a heap-based buffer overflow.
published 2017-09-25 modified 2026-07-09 withdrawn 2026-07-09 aliases CVE-2015-5237 affected introduced 0, fixed 3.1.0.post1 fixed in 3.1.0.post1 summary Withdrawn as duplicate of PYSEC-2017-65 protobuf allows remote authenticated attackers to cause a heap-based buffer overflow.
2017-09-21	PYSEC-2017-45	ipython	3.2.0	Cross-site scripting (XSS) vulnerability in IPython 3.x before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the /api/contents path.
published 2017-09-21 modified 2021-07-15 aliases CVE-2015-4706, GHSA-q326-jhw3-699g affected introduced 0, fixed c2078a53543ed502efd968649fee1125e0eb549c, fixed 7222bd53ad089a65fd610fab4626f9d0ab47dfce; introduced 3.0.0, fixed 3.2.0 fixed in 3.2.0 summary Cross-site scripting (XSS) vulnerability in IPython 3.x before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the /api/contents path.
2017-09-20	PYSEC-2017-46	ipython	3.2.0	Cross-site scripting (XSS) vulnerability in IPython before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the /api/notebooks path.
published 2017-09-20 modified 2021-07-15 aliases CVE-2015-4707, GHSA-66gw-5xpf-gfp5 affected introduced 0, fixed c2078a53543ed502efd968649fee1125e0eb549c, fixed 7222bd53ad089a65fd610fab4626f9d0ab47dfce; introduced 0, fixed 3.2.0 fixed in 3.2.0 summary Cross-site scripting (XSS) vulnerability in IPython before 3.2 allows remote attackers to inject arbitrary web script or HTML via vectors involving JSON error messages and the /api/notebooks path.
2017-09-20	PYSEC-2017-47	ipython	3.2.1	Cross-site request forgery in the REST API in IPython 2 and 3.
published 2017-09-20 modified 2021-07-15 aliases CVE-2015-5607, GHSA-7fc2-rm35-2pp7 affected introduced 0, fixed a05fe052a18810e92d9be8c1185952c13fe4e5b0, fixed 1415a9710407e7c14900531813c15ba6165f0816; introduced 0, fixed 3.2.1 fixed in 3.2.1 summary Cross-site request forgery in the REST API in IPython 2 and 3.
2017-09-13	PYSEC-2017-147	pyspark	2.1.2	In Apache Spark 1.6.0 until 2.1.1, the launcher API performs unsafe deserialization of data received by its socket.
published 2017-09-13 modified 2024-11-25 aliases CVE-2017-12612, GHSA-8rhc-48pp-52gr affected introduced 0, fixed 2.1.2 fixed in 2.1.2 summary In Apache Spark 1.6.0 until 2.1.1, the launcher API performs unsafe deserialization of data received by its socket.
2017-09-07	PYSEC-2017-44	django	1.11.5	In Django 1.10.x before 1.10.8 and 1.11.x before 1.11.5, HTML autoescaping was disabled in a portion of the template for the technical 500 debug page.
published 2017-09-07 modified 2021-07-15 aliases CVE-2017-12794, GHSA-9r8w-6x8c-6jr9 affected introduced 1.10, fixed 1.10.8, introduced 1.11, fixed 1.11.5 fixed in 1.11.5 summary In Django 1.10.x before 1.10.8 and 1.11.x before 1.11.5, HTML autoescaping was disabled in a portion of the template for the technical 500 debug page.
2017-08-24	PYSEC-2017-24	pyjwt	1.5.1	In PyJWT 1.5.0 and below the `invalid_strings` check in `HMACAlgorithm.prepare_key` does not account for all PEM encoded public keys.
published 2017-08-24 modified 2021-07-05 aliases CVE-2017-11424, GHSA-r9jw-mwhq-wp62 affected introduced 0, fixed 1.5.1 fixed in 1.5.1 summary In PyJWT 1.5.0 and below the `invalid_strings` check in `HMACAlgorithm.prepare_key` does not account for all PEM encoded public keys.
2017-08-15	PYSEC-2017-1	numpy	1.13.3	The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation.
published 2017-08-15 modified 2021-06-29 aliases CVE-2017-12852, GHSA-frgw-fgh6-9g52 affected introduced 0, fixed 1.13.3 fixed in 1.13.3 summary The numpy.pad function in Numpy 1.13.1 and older versions is missing input validation.
2017-04-30	PYSEC-2017-101	grpcio	1.3.0	Google gRPC before 2017-03-29 has an out-of-bounds write caused by a heap-based use-after-free related to the grpc_call_destroy function in core/lib/surface/call.c.
published 2017-04-30 modified 2021-12-14 aliases CVE-2017-8359 affected introduced 0, fixed 6544a2d5d9ecdb64214da1d228886a7d15bbf5c7; introduced 0, fixed 1.3.0 fixed in 1.3.0 summary Google gRPC before 2017-03-29 has an out-of-bounds write caused by a heap-based use-after-free related to the grpc_call_destroy function in core/lib/surface/call.c.
2017-04-24	PYSEC-2017-92	pillow	3.1.2	Heap-based buffer overflow in the j2k_encode_entry function in Pillow 2.5.0 through 3.1.1 allows remote attackers to cause a denial of service (memory corruption) via a crafted Jpeg2000 file.
published 2017-04-24 modified 2021-08-27 aliases CVE-2016-3076, GHSA-v9pc-9mvp-x87g affected introduced 2.5.0, fixed 3.1.2 fixed in 3.1.2 summary Heap-based buffer overflow in the j2k_encode_entry function in Pillow 2.5.0 through 3.1.1 allows remote attackers to cause a denial of service (memory corruption) via a crafted Jpeg2000 file.
2017-04-04	PYSEC-2017-9	django	1.10.7	Django 1.10 before 1.10.7, 1.9 before 1.9.13, and 1.8 before 1.8.18 relies on user input in some cases to redirect the user to an "on success" URL.
published 2017-04-04 modified 2021-07-05 aliases CVE-2017-7233, GHSA-37hp-765x-j95x affected introduced 1.10, fixed 1.10.7, introduced 1.9, fixed 1.9.13, introduced 1.8, fixed 1.8.18 fixed in 1.10.7 summary Django 1.10 before 1.10.7, 1.9 before 1.9.13, and 1.8 before 1.8.18 relies on user input in some cases to redirect the user to an "on success" URL.
2017-04-04	PYSEC-2017-10	django	1.10.7	A maliciously crafted URL to a Django (1.10 before 1.10.7, 1.9 before 1.9.13, and 1.8 before 1.8.18) site using the ``django.views.static.serve()`` view could redirect to any other domain, aka an ope…
published 2017-04-04 modified 2021-07-05 aliases CVE-2017-7234, GHSA-h4hv-m4h4-mhwg affected introduced 1.10, fixed 1.10.7, introduced 1.9, fixed 1.9.13, introduced 1.8, fixed 1.8.18 fixed in 1.10.7 summary A maliciously crafted URL to a Django (1.10 before 1.10.7, 1.9 before 1.9.13, and 1.8 before 1.8.18) site using the ``django.views.static.serve()`` view could redirect to any other domain, aka an ope…
2017-03-27	PYSEC-2017-8	cryptography	1.5.3	HKDF in cryptography before 1.5.2 returns an empty byte-string if used with a length less than algorithm.digest_size.
published 2017-03-27 modified 2021-07-05 aliases CVE-2016-9243, GHSA-q3cj-2r34-2cwc affected introduced 0, fixed b924696b2e8731f39696584d12cceeb3aeb2d874; introduced 0, fixed 1.5.3 fixed in 1.5.3 summary HKDF in cryptography before 1.5.2 returns an empty byte-string if used with a length less than algorithm.digest_size.
2017-02-22	PYSEC-2017-15	html5lib	0.999999999	The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting (XSS) attacks by leveraging mishandling of special characters in attribute values, a differen…
published 2017-02-22 modified 2021-07-05 aliases CVE-2016-9910, GHSA-8f6m-gfq9-g33v affected introduced 0, fixed 9b8d8eb5afbc066b7fac9390f5ec75e5e8a7cab7; introduced 0, fixed 0.999999999 fixed in 0.999999999 summary The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting (XSS) attacks by leveraging mishandling of special characters in attribute values, a differen…
2017-02-22	PYSEC-2017-14	html5lib	0.999999999	The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting (XSS) attacks by leveraging mishandling of the < (less than) character in attribute values.
published 2017-02-22 modified 2021-07-05 aliases CVE-2016-9909, GHSA-v9v9-xffq-rwr4 affected introduced 0, fixed 9b8d8eb5afbc066b7fac9390f5ec75e5e8a7cab7; introduced 0, fixed 0.999999999 fixed in 0.999999999 summary The serializer in html5lib before 0.99999999 might allow remote attackers to conduct cross-site scripting (XSS) attacks by leveraging mishandling of the < (less than) character in attribute values.
2017-02-15	PYSEC-2017-48	openpyxl	2.4.1	Openpyxl 2.4.1 resolves external entities by default, which allows remote attackers to conduct XXE attacks via a crafted .xlsx document.
published 2017-02-15 modified 2021-07-15 aliases CVE-2017-5992, GHSA-chqf-hx79-gxc6 affected introduced 0, fixed 2.4.1 fixed in 2.4.1 summary Openpyxl 2.4.1 resolves external entities by default, which allows remote attackers to conduct XXE attacks via a crafted .xlsx document.
2017-01-23	PYSEC-2017-28	python-jose	1.3.2	python-jose before 1.3.2 allows attackers to have unspecified impact by leveraging failure to use a constant time comparison for HMAC keys.
published 2017-01-23 modified 2021-07-05 aliases CVE-2016-7036, GHSA-w799-prg3-cx77 affected introduced 0, fixed 1.3.2 fixed in 1.3.2 summary python-jose before 1.3.2 allows attackers to have unspecified impact by leveraging failure to use a constant time comparison for HMAC keys.
2017-01-19	PYSEC-2017-74	tqdm	4.11.2	The tqdm._version module in tqdm versions 4.4.1 and 4.10 allows local users to execute arbitrary code via a crafted repo with a malicious git log in the current working directory.
published 2017-01-19 modified 2021-07-25 aliases CVE-2016-10075, GHSA-r7q7-xcjw-qx8q affected introduced 0, fixed 4.11.2 fixed in 4.11.2 summary The tqdm._version module in tqdm versions 4.4.1 and 4.10 allows local users to execute arbitrary code via a crafted repo with a malicious git log in the current working directory.
2017-01-11	PYSEC-2017-98	urllib3	1.18.1	Versions 1.17 and 1.18 of the Python urllib3 library suffer from a vulnerability that can cause them, in certain configurations, to not correctly validate TLS certificates.
published 2017-01-11 modified 2021-08-27 aliases CVE-2016-9015, GHSA-v4w5-p2hg-8fh6 affected introduced 1.17, fixed 1.18.1 fixed in 1.18.1 summary Versions 1.17 and 1.18 of the Python urllib3 library suffer from a vulnerability that can cause them, in certain configurations, to not correctly validate TLS certificates.
2017-01-10	PYSEC-2017-87	hpack	2.3.0	A HTTP/2 implementation built using any version of the Python HPACK library between v1.0.0 and v2.2.0 could be targeted for a denial of service attack, specifically a so-called "HPACK Bomb" attack.
published 2017-01-10 modified 2021-08-27 aliases CVE-2016-6581, GHSA-ffq8-576r-v26g affected introduced 0, fixed 2.3.0 fixed in 2.3.0 summary A HTTP/2 implementation built using any version of the Python HPACK library between v1.0.0 and v2.2.0 could be targeted for a denial of service attack, specifically a so-called "HPACK Bomb" attack.
2016-12-21	PYSEC-2016-21	python-docx	0.8.6	python-docx before 0.8.6 allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted document.
published 2016-12-21 modified 2021-07-25 aliases CVE-2016-5851, GHSA-34wj-p5jm-2p96 affected introduced 0, fixed 0.8.6 fixed in 0.8.6 summary python-docx before 0.8.6 allows context-dependent attackers to conduct XML External Entity (XXE) attacks via a crafted document.
2016-12-09	PYSEC-2016-18	django	1.10.3	Django before 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3, when settings.DEBUG is True, allow remote attackers to conduct DNS rebinding attacks by leveraging failure to validat…
published 2016-12-09 modified 2021-07-15 aliases CVE-2016-9014, GHSA-3f2c-jm6v-cr35 affected introduced 0, fixed 1.8.16, introduced 1.9, fixed 1.9.11, introduced 1.10, fixed 1.10.3 fixed in 1.10.3 summary Django before 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3, when settings.DEBUG is True, allow remote attackers to conduct DNS rebinding attacks by leveraging failure to validat…
2016-12-09	PYSEC-2016-17	django	1.10.3	Django 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3 use a hardcoded password for a temporary database user created when running tests with an Oracle database, which makes it eas…
published 2016-12-09 modified 2021-07-15 aliases CVE-2016-9013, GHSA-mv8g-fhh6-6267 affected introduced 1.8, fixed 1.8.16, introduced 1.9, fixed 1.9.11, introduced 1.10, fixed 1.10.3 fixed in 1.10.3 summary Django 1.8.x before 1.8.16, 1.9.x before 1.9.11, and 1.10.x before 1.10.3 use a hardcoded password for a temporary database user created when running tests with an Oracle database, which makes it eas…
2016-11-04	PYSEC-2016-9	pillow	3.3.2	Pillow before 3.3.2 allows context-dependent attackers to execute arbitrary code by using the "crafted image file" approach, related to an "Insecure Sign Extension" issue affecting the ImagingNew in …
published 2016-11-04 modified 2021-07-05 aliases CVE-2016-9190, GHSA-w4vg-rf63-f3j3 affected introduced 0, fixed 3.3.2 fixed in 3.3.2 summary Pillow before 3.3.2 allows context-dependent attackers to execute arbitrary code by using the "crafted image file" approach, related to an "Insecure Sign Extension" issue affecting the ImagingNew in …
2016-11-04	PYSEC-2016-8	pillow	3.3.2	Pillow before 3.3.2 allows context-dependent attackers to obtain sensitive information by using the "crafted image file" approach, related to an "Integer Overflow" issue affecting the Image.core.map_…
published 2016-11-04 modified 2021-07-05 aliases CVE-2016-9189, GHSA-rwr3-c2q8-gm56 affected introduced 0, fixed 3.3.2 fixed in 3.3.2 summary Pillow before 3.3.2 allows context-dependent attackers to obtain sensitive information by using the "crafted image file" approach, related to an "Integer Overflow" issue affecting the Image.core.map_…
2016-10-03	PYSEC-2016-3	django	1.9.10	The cookie parsing code in Django before 1.8.15 and 1.9.x before 1.9.10, when used on a site with Google Analytics, allows remote attackers to bypass an intended CSRF protection mechanism by setting …
published 2016-10-03 modified 2021-07-05 aliases CVE-2016-7401, GHSA-crhm-qpjc-cm64 affected introduced 0, fixed 1.8.15, introduced 1.9, fixed 1.9.10 fixed in 1.9.10 summary The cookie parsing code in Django before 1.8.15 and 1.9.x before 1.9.10, when used on a site with Google Analytics, allows remote attackers to bypass an intended CSRF protection mechanism by setting …
2016-09-01	PYSEC-2016-4	jwcrypto	0.4.0	The _Rsa15 class in the RSA 1.5 algorithm implementation in jwa.py in jwcrypto before 0.3.2 lacks the Random Filling protection mechanism, which makes it easier for remote attackers to obtain clearte…
published 2016-09-01 modified 2021-07-05 aliases CVE-2016-6298, GHSA-wg33-x934-3ghh affected introduced 0, fixed eb5be5bd94c8cae1d7f3ba9801377084d8e5a7ba; introduced 0, fixed 0.4.0 fixed in 0.4.0 summary The _Rsa15 class in the RSA 1.5 algorithm implementation in jwa.py in jwcrypto before 0.3.2 lacks the Random Filling protection mechanism, which makes it easier for remote attackers to obtain clearte…
2016-08-05	PYSEC-2016-2	django	1.10rc1	Cross-site scripting (XSS) vulnerability in the dismissChangeRelatedObjectPopup function in contrib/admin/static/admin/js/admin/RelatedObjectLookups.js in Django before 1.8.14, 1.9.x before 1.9.8, an…
published 2016-08-05 modified 2021-09-01 aliases CVE-2016-6186, GHSA-c8c8-9472-w52h affected introduced 0, fixed d03bf6fe4e9bf5b07de62c1a271c4b41a7d3d158, fixed f68e5a99164867ab0e071a936470958ed867479d; introduced 0, fixed 1.8.14, introduced 1.9, fixed 1.9.8, introduced 1.10a0, fixed 1.10rc1 fixed in 1.10rc1 summary Cross-site scripting (XSS) vulnerability in the dismissChangeRelatedObjectPopup function in contrib/admin/static/admin/js/admin/RelatedObjectLookups.js in Django before 1.8.14, 1.9.x before 1.9.8, an…
2016-04-13	PYSEC-2016-7	pillow	3.1.1	Integer overflow in the ImagingResampleHorizontal function in libImaging/Resample.c in Pillow before 3.1.1 allows remote attackers to have unspecified impact via negative values of the new size, whic…
published 2016-04-13 modified 2021-07-05 aliases CVE-2016-4009, GHSA-hvr8-466p-75rh affected introduced 0, fixed 4e0d9b0b9740d258ade40cce248c93777362ac1e; introduced 0, fixed 3.1.1 fixed in 3.1.1 summary Integer overflow in the ImagingResampleHorizontal function in libImaging/Resample.c in Pillow before 3.1.1 allows remote attackers to have unspecified impact via negative values of the new size, whic…
2016-04-13	PYSEC-2016-6	pillow	3.1.1	Buffer overflow in the ImagingFliDecode function in libImaging/FliDecode.c in Pillow before 3.1.1 allows remote attackers to cause a denial of service (crash) via a crafted FLI file.
published 2016-04-13 modified 2021-07-05 aliases CVE-2016-0775, GHSA-8xjv-v9xq-m5h9 affected introduced 0, fixed 893a40850c2d5da41537958e40569c029a6e127b; introduced 0, fixed 3.1.1 fixed in 3.1.1 summary Buffer overflow in the ImagingFliDecode function in libImaging/FliDecode.c in Pillow before 3.1.1 allows remote attackers to cause a denial of service (crash) via a crafted FLI file.
2016-04-13	PYSEC-2016-5	pillow	3.1.1	Buffer overflow in the ImagingLibTiffDecode function in libImaging/TiffDecode.c in Pillow before 3.1.1 allows remote attackers to overwrite memory via a crafted TIFF file.
published 2016-04-13 modified 2021-07-05 aliases CVE-2016-0740, GHSA-hggx-3h72-49ww affected introduced 0, fixed 6dcbf5bd96b717c58d7b642949da8d323099928e; introduced 0, fixed 3.1.1 fixed in 3.1.1 summary Buffer overflow in the ImagingLibTiffDecode function in libImaging/TiffDecode.c in Pillow before 3.1.1 allows remote attackers to overwrite memory via a crafted TIFF file.
2016-04-13	PYSEC-2016-19	pillow	3.1.1	Buffer overflow in the ImagingPcdDecode function in PcdDecode.c in Pillow before 3.1.1 and Python Imaging Library (PIL) 1.1.7 and earlier allows remote attackers to cause a denial of service (crash) …
published 2016-04-13 modified 2021-07-15 aliases CVE-2016-2533, GHSA-3c5c-7235-994j affected introduced 0, fixed 5bdf54b5a76b54fb00bd05f2d733e0a4173eefc9, fixed ae453aa18b66af54e7ff716f4ccb33adca60afd4; introduced 0, fixed 3.1.1 fixed in 3.1.1 summary Buffer overflow in the ImagingPcdDecode function in PcdDecode.c in Pillow before 3.1.1 and Python Imaging Library (PIL) 1.1.7 and earlier allows remote attackers to cause a denial of service (crash) …
2016-04-08	PYSEC-2016-16	django	1.9.3	The password hasher in contrib/auth/hashers.py in Django before 1.8.10 and 1.9.x before 1.9.3 allows remote attackers to enumerate users via a timing attack involving login requests.
published 2016-04-08 modified 2021-07-15 aliases CVE-2016-2513, GHSA-fp6p-5xvw-m74f affected introduced 0, fixed 67b46ba7016da2d259c1ecc7d666d11f5e1cfaab; introduced 0, fixed 1.8.10, introduced 1.9, fixed 1.9.3 fixed in 1.9.3 summary The password hasher in contrib/auth/hashers.py in Django before 1.8.10 and 1.9.x before 1.9.3 allows remote attackers to enumerate users via a timing attack involving login requests.
2016-04-08	PYSEC-2016-15	django	1.9.3	The utils.http.is_safe_url function in Django before 1.8.10 and 1.9.x before 1.9.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks or possibly conduct cr…
published 2016-04-08 modified 2021-07-15 aliases CVE-2016-2512, GHSA-pw27-w7w4-9qc7 affected introduced 0, fixed c5544d289233f501917e25970c03ed444abbd4f0; introduced 0, fixed 1.8.10, introduced 1.9, fixed 1.9.3 fixed in 1.9.3 summary The utils.http.is_safe_url function in Django before 1.8.10 and 1.9.x before 1.9.3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks or possibly conduct cr…
2016-02-08	PYSEC-2016-14	django	1.9.2	Django 1.9.x before 1.9.2, when ModelAdmin.save_as is set to True, allows remote authenticated users to bypass intended access restrictions and create ModelAdmin objects via the "Save as New" option …
published 2016-02-08 modified 2021-07-15 aliases CVE-2016-2048, GHSA-46x4-9jmv-jc8p affected introduced 1.9, fixed 1.9.2 fixed in 1.9.2 summary Django 1.9.x before 1.9.2, when ModelAdmin.save_as is set to True, allows remote authenticated users to bypass intended access restrictions and create ModelAdmin objects via the "Save as New" option …
2016-01-13	PYSEC-2016-10	rsa	3.3	The verify function in the RSA package for Python (Python-RSA) before 3.3 allows attackers to spoof signatures with a small public exponent via crafted signature padding, aka a BERserk attack.
published 2016-01-13 modified 2021-07-05 aliases CVE-2016-1494, GHSA-8rjr-6qq5-pj9p affected introduced 0, fixed 3.3 fixed in 3.3 summary The verify function in the RSA package for Python (Python-RSA) before 3.3 allows attackers to spoof signatures with a small public exponent via crafted signature padding, aka a BERserk attack.
2016-01-08	PYSEC-2016-32	pygments	2.1	The FontManager._get_nix_font_path function in formatters/img.py in Pygments 1.2.2 through 2.0.2 allows remote attackers to execute arbitrary commands via shell metacharacters in a font name.
published 2016-01-08 modified 2021-08-27 aliases CVE-2015-8557, GHSA-fff8-4w9p-7v76 affected introduced 1.2.2, fixed 2.1 fixed in 2.1 summary The FontManager._get_nix_font_path function in formatters/img.py in Pygments 1.2.2 through 2.0.2 allows remote attackers to execute arbitrary commands via shell metacharacters in a font name.
2015-12-07	PYSEC-2015-11	django	1.9rc2	The get_format function in utils/formats.py in Django before 1.7.x before 1.7.11, 1.8.x before 1.8.7, and 1.9.x before 1.9rc2 might allow remote attackers to obtain sensitive application secrets via …
published 2015-12-07 modified 2021-09-01 aliases CVE-2015-8213, GHSA-6wcr-wcqm-3mfh affected introduced 0, fixed 316bc3fc9437c5960c24baceb93c73f1939711e4; introduced 0, fixed 1.7.11, introduced 1.8, fixed 1.8.7, introduced 1.9a0, fixed 1.9rc2 fixed in 1.9rc2 summary The get_format function in utils/formats.py in Django before 1.7.x before 1.7.11, 1.8.x before 1.8.7, and 1.9.x before 1.9rc2 might allow remote attackers to obtain sensitive application secrets via …
2015-09-29	PYSEC-2015-25	ipython	3.2.2	The editor in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to execute arbitrary JavaScript code via a crafted file, which triggers a redirect to files…
published 2015-09-29 modified 2021-07-15 aliases CVE-2015-7337, GHSA-92mr-v722-f48m affected introduced 0, fixed 0a8096adf165e2465550bd5893d7e352544e5967; introduced 0, fixed 3.2.2 fixed in 3.2.2 summary The editor in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to execute arbitrary JavaScript code via a crafted file, which triggers a redirect to files…
2015-09-21	PYSEC-2015-24	ipython	3.2.2	Cross-site scripting (XSS) vulnerability in the file browser in notebook/notebookapp.py in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to inject arbi…
published 2015-09-21 modified 2021-07-15 aliases CVE-2015-6938, GHSA-4vwq-x64q-j4cj affected introduced 0, fixed 3ab41641cf6fce3860c73d5cf4645aa12e1e5892; introduced 0, fixed 3.2.2 fixed in 3.2.2 summary Cross-site scripting (XSS) vulnerability in the file browser in notebook/notebookapp.py in IPython Notebook before 3.2.2 and Jupyter Notebook 4.0.x before 4.0.5 allows remote attackers to inject arbi…
2015-08-24	PYSEC-2015-23	django	1.7.10	The (1) contrib.sessions.backends.base.SessionBase.flush and (2) cache_db.SessionStore.flush functions in Django 1.7.x before 1.7.10, 1.4.x before 1.4.22, and possibly other versions create empty ses…
published 2015-08-24 modified 2021-07-15 aliases CVE-2015-5964, GHSA-x38m-486c-2wr9 affected introduced 1.7, fixed 1.7.10, introduced 1.4, fixed 1.4.22 fixed in 1.7.10 summary The (1) contrib.sessions.backends.base.SessionBase.flush and (2) cache_db.SessionStore.flush functions in Django 1.7.x before 1.7.10, 1.4.x before 1.4.22, and possibly other versions create empty ses…
2015-08-24	PYSEC-2015-22	django	1.8.4	contrib.sessions.middleware.SessionMiddleware in Django 1.8.x before 1.8.4, 1.7.x before 1.7.10, 1.4.x before 1.4.22, and possibly other versions allows remote attackers to cause a denial of service …
published 2015-08-24 modified 2021-07-15 aliases CVE-2015-5963, GHSA-pgxh-wfw4-jx2v affected introduced 1.8, fixed 1.8.4, introduced 1.7, fixed 1.7.10, introduced 1.4, fixed 1.4.22 fixed in 1.8.4 summary contrib.sessions.middleware.SessionMiddleware in Django 1.8.x before 1.8.4, 1.7.x before 1.7.10, 1.4.x before 1.4.22, and possibly other versions allows remote attackers to cause a denial of service …
2015-07-14	PYSEC-2015-21	django	1.8.3	validators.URLValidator in Django 1.8.x before 1.8.3 allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors.
published 2015-07-14 modified 2021-07-15 aliases CVE-2015-5145, GHSA-cqf7-ff9h-7967 affected introduced 1.8, fixed 1.8.3 fixed in 1.8.3 summary validators.URLValidator in Django 1.8.x before 1.8.3 allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors.
2015-07-14	PYSEC-2015-20	django	1.8.3	The session backends in Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 allows remote attackers to cause a denial of service (session store consumption) via mult…
published 2015-07-14 modified 2021-08-11 aliases CVE-2015-5143, GHSA-h582-2pch-3xv3 affected introduced 0, fixed 1.4.21, introduced 1.5, fixed 1.7.9, introduced 1.8, fixed 1.8.3 fixed in 1.8.3 summary The session backends in Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 allows remote attackers to cause a denial of service (session store consumption) via mult…
2015-07-14	PYSEC-2015-10	django	1.8.3	Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 uses an incorrect regular expression, which allows remote attackers to inject arbitrary headers and conduct HTTP …
published 2015-07-14 modified 2021-07-05 aliases CVE-2015-5144, GHSA-q5qw-4364-5hhm affected introduced 0, fixed 1.4.21, introduced 1.5, fixed 1.7.9, introduced 1.8, fixed 1.8.3 fixed in 1.8.3 summary Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 uses an incorrect regular expression, which allows remote attackers to inject arbitrary headers and conduct HTTP …
2015-06-02	PYSEC-2015-19	django	1.8.2	The session.flush function in the cached_db backend in Django 1.8.x before 1.8.2 does not properly flush the session, which allows remote attackers to hijack user sessions via an empty string in the …
published 2015-06-02 modified 2021-07-15 aliases CVE-2015-3982, GHSA-6wgp-fwfm-mxp3 affected introduced 1.8, fixed 1.8.2 fixed in 1.8.2 summary The session.flush function in the cached_db backend in Django 1.8.x before 1.8.2 does not properly flush the session, which allows remote attackers to hijack user sessions via an empty string in the …
2015-05-01	PYSEC-2015-15	pillow	2.5.3	The Jpeg2KImagePlugin plugin in Pillow before 2.5.3 allows remote attackers to cause a denial of service via a crafted image.
published 2015-05-01 modified 2021-07-05 aliases CVE-2014-3598, GHSA-j6f7-g425-4gmx affected introduced 0, fixed 2.5.3 fixed in 2.5.3 summary The Jpeg2KImagePlugin plugin in Pillow before 2.5.3 allows remote attackers to cause a denial of service via a crafted image.
2015-03-31	PYSEC-2015-35	dulwich	0.9.9	Buffer overflow in the C implementation of the apply_delta function in _pack.c in Dulwich before 0.9.9 allows remote attackers to execute arbitrary code via a crafted pack file.
published 2015-03-31 modified 2021-08-27 aliases CVE-2015-0838, GHSA-vjjf-3rvg-gv3v affected introduced 0, fixed 0.9.9 fixed in 0.9.9 summary Buffer overflow in the C implementation of the apply_delta function in _pack.c in Dulwich before 0.9.9 allows remote attackers to execute arbitrary code via a crafted pack file.
2015-03-31	PYSEC-2015-34	dulwich	0.9.9	The build_index_from_tree function in index.py in Dulwich before 0.9.9 allows remote attackers to execute arbitrary code via a commit with a directory path starting with .git/, which is not properly …
published 2015-03-31 modified 2021-08-27 aliases CVE-2014-9706, GHSA-4j5j-58j7-6c3w affected introduced 0, fixed 0.9.9 fixed in 0.9.9 summary The build_index_from_tree function in index.py in Dulwich before 0.9.9 allows remote attackers to execute arbitrary code via a commit with a directory path starting with .git/, which is not properly …
2015-03-25	PYSEC-2015-9	django	1.8c1	The utils.http.is_safe_url function in Django before 1.4.20, 1.5.x, 1.6.x before 1.6.11, 1.7.x before 1.7.7, and 1.8.x before 1.8c1 does not properly validate URLs, which allows remote attackers to c…
published 2015-03-25 modified 2021-09-01 aliases CVE-2015-2317, GHSA-7fq8-4pv5-5w5c affected introduced 0, fixed 1.4.20, introduced 1.5, fixed 1.6.11, introduced 1.7, fixed 1.7.7, introduced 1.8a0, fixed 1.8c1 fixed in 1.8c1 summary The utils.http.is_safe_url function in Django before 1.4.20, 1.5.x, 1.6.x before 1.6.11, 1.7.x before 1.7.7, and 1.8.x before 1.8c1 does not properly validate URLs, which allows remote attackers to c…
2015-03-25	PYSEC-2015-18	django	1.8c1	The utils.html.strip_tags function in Django 1.6.x before 1.6.11, 1.7.x before 1.7.7, and 1.8.x before 1.8c1, when using certain versions of Python, allows remote attackers to cause a denial of servi…
published 2015-03-25 modified 2021-09-01 aliases CVE-2015-2316, GHSA-j3j3-jrfh-cm2w affected introduced 1.6, fixed 1.6.11, introduced 1.7, fixed 1.7.7, introduced 1.8a0, fixed 1.8c1 fixed in 1.8c1 summary The utils.html.strip_tags function in Django 1.6.x before 1.6.11, 1.7.x before 1.7.7, and 1.8.x before 1.8c1, when using certain versions of Python, allows remote attackers to cause a denial of servi…
2015-03-18	PYSEC-2015-17	requests	2.6.0	The resolve_redirects function in sessions.py in requests 2.1.0 through 2.5.3 allows remote attackers to conduct session fixation attacks via a cookie without a host value in a redirect.
published 2015-03-18 modified 2021-07-05 aliases CVE-2015-2296, GHSA-pg2w-x9wp-vw92 affected introduced 0, fixed 3bd8afbff29e50b38f889b2f688785a669b9aafc; introduced 2.1.0, fixed 2.6.0 fixed in 2.6.0 summary The resolve_redirects function in sessions.py in requests 2.1.0 through 2.5.3 allows remote attackers to conduct session fixation attacks via a cookie without a host value in a redirect.
2015-03-12	PYSEC-2015-8	django	1.8b2	Cross-site scripting (XSS) vulnerability in the contents function in admin/helpers.py in Django before 1.7.6 and 1.8 before 1.8b2 allows remote attackers to inject arbitrary web script or HTML via a …
published 2015-03-12 modified 2021-07-05 aliases CVE-2015-2241, GHSA-6565-fg86-6jcx affected introduced 0, fixed 1.7.6, introduced 1.8a1, fixed 1.8b2 fixed in 1.8b2 summary Cross-site scripting (XSS) vulnerability in the contents function in admin/helpers.py in Django before 1.7.6 and 1.8 before 1.8b2 allows remote attackers to inject arbitrary web script or HTML via a …
2015-01-16	PYSEC-2015-7	django	1.7.3	ModelMultipleChoiceField in Django 1.6.x before 1.6.10 and 1.7.x before 1.7.3, when show_hidden_initial is set to True, allows remote attackers to cause a denial of service by submitting duplicate va…
published 2015-01-16 modified 2021-07-05 aliases CVE-2015-0222, GHSA-6g95-x6cj-mg4v affected introduced 0, fixed 1.4.18, introduced 1.5, fixed 1.6.10, introduced 1.7, fixed 1.7.3 fixed in 1.7.3 summary ModelMultipleChoiceField in Django 1.6.x before 1.6.10 and 1.7.x before 1.7.3, when show_hidden_initial is set to True, allows remote attackers to cause a denial of service by submitting duplicate va…
2015-01-16	PYSEC-2015-6	django	1.7.3	The django.views.static.serve view in Django before 1.4.18, 1.6.x before 1.6.10, and 1.7.x before 1.7.3 reads files an entire line at a time, which allows remote attackers to cause a denial of servic…
published 2015-01-16 modified 2021-07-05 aliases CVE-2015-0221, GHSA-jhjg-w2cp-5j44 affected introduced 0, fixed 1.4.18, introduced 1.5, fixed 1.6.10, introduced 1.7, fixed 1.7.3 fixed in 1.7.3 summary The django.views.static.serve view in Django before 1.4.18, 1.6.x before 1.6.10, and 1.7.x before 1.7.3 reads files an entire line at a time, which allows remote attackers to cause a denial of servic…
2015-01-16	PYSEC-2015-5	django	1.7.3	The django.util.http.is_safe_url function in Django before 1.4.18, 1.6.x before 1.6.10, and 1.7.x before 1.7.3 does not properly handle leading whitespaces, which allows remote attackers to conduct c…
published 2015-01-16 modified 2021-07-05 aliases CVE-2015-0220, GHSA-gv98-g628-m9x5 affected introduced 0, fixed 1.4.18, introduced 1.5, fixed 1.6.10, introduced 1.7, fixed 1.7.3 fixed in 1.7.3 summary The django.util.http.is_safe_url function in Django before 1.4.18, 1.6.x before 1.6.10, and 1.7.x before 1.7.3 does not properly handle leading whitespaces, which allows remote attackers to conduct c…
2015-01-16	PYSEC-2015-4	django	1.7.3	Django before 1.4.18, 1.6.x before 1.6.10, and 1.7.x before 1.7.3 allows remote attackers to spoof WSGI headers by using an _ (underscore) character instead of a - (dash) character in an HTTP header,…
published 2015-01-16 modified 2021-07-05 aliases CVE-2015-0219, GHSA-7qfw-j7hp-v45g affected introduced 0, fixed 1.4.18, introduced 1.5, fixed 1.6.10, introduced 1.7, fixed 1.7.3 fixed in 1.7.3 summary Django before 1.4.18, 1.6.x before 1.6.10, and 1.7.x before 1.7.3 allows remote attackers to spoof WSGI headers by using an _ (underscore) character instead of a - (dash) character in an HTTP header,…
2015-01-16	PYSEC-2015-16	pillow	2.7.0	Pillow before 2.7.0 allows remote attackers to cause a denial of service via a compressed text chunk in a PNG image that has a large size when it is decompressed.
published 2015-01-16 modified 2021-07-05 aliases CVE-2014-9601, GHSA-h5rf-vgqx-wjv2 affected introduced 0, fixed 2.7.0 fixed in 2.7.0 summary Pillow before 2.7.0 allows remote attackers to cause a denial of service via a compressed text chunk in a PNG image that has a large size when it is decompressed.
2014-11-24	PYSEC-2014-11	pip	6.0	pip 1.3 through 1.5.6 allows local users to cause a denial of service (prevention of package installation) by creating a /tmp/pip-build-* file for another user.
published 2014-11-24 modified 2021-07-05 aliases CVE-2014-8991, GHSA-53mr-44pp-crf4 affected introduced 1.3, fixed 6.0 fixed in 6.0 summary pip 1.3 through 1.5.6 allows local users to cause a denial of service (prevention of package installation) by creating a /tmp/pip-build-* file for another user.
2014-10-15	PYSEC-2014-14	requests	2.3.0	Requests (aka python-requests) before 2.3.0 allows remote servers to obtain sensitive information by reading the Proxy-Authorization header in a redirected request.
published 2014-10-15 modified 2021-07-05 aliases CVE-2014-1830, GHSA-652x-xj99-gmcc affected introduced 0, fixed 2.3.0 fixed in 2.3.0 summary Requests (aka python-requests) before 2.3.0 allows remote servers to obtain sensitive information by reading the Proxy-Authorization header in a redirected request.
2014-10-15	PYSEC-2014-13	requests	2.3.0	Requests (aka python-requests) before 2.3.0 allows remote servers to obtain a netrc password by reading the Authorization header in a redirected request.
published 2014-10-15 modified 2021-07-05 aliases CVE-2014-1829, GHSA-cfj3-7x9c-4p3h affected introduced 0, fixed 2.3.0 fixed in 2.3.0 summary Requests (aka python-requests) before 2.3.0 allows remote servers to obtain a netrc password by reading the Authorization header in a redirected request.
2014-08-26	PYSEC-2014-7	django	1.6.6	The administrative interface (contrib.admin) in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 does not check if a field represents a relationship be…
published 2014-08-26 modified 2021-07-05 aliases CVE-2014-0483, GHSA-rw75-m7gp-92m3 affected introduced 0, fixed 2b31342cdf14fc20e07c43d258f1e7334ad664a6; introduced 0, fixed 1.4.14, introduced 1.5, fixed 1.5.9, introduced 1.6, fixed 1.6.6 fixed in 1.6.6 summary The administrative interface (contrib.admin) in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 does not check if a field represents a relationship be…
2014-08-26	PYSEC-2014-6	django	1.6.6	The contrib.auth.middleware.RemoteUserMiddleware middleware in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3, when using the contrib.auth.backends.R…
published 2014-08-26 modified 2021-07-05 aliases CVE-2014-0482, GHSA-625g-gx8c-xcmg affected introduced 0, fixed 1.4.14, introduced 1.5, fixed 1.5.9, introduced 1.6, fixed 1.6.6 fixed in 1.6.6 summary The contrib.auth.middleware.RemoteUserMiddleware middleware in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3, when using the contrib.auth.backends.R…
2014-08-26	PYSEC-2014-5	django	1.6.6	The default configuration for the file upload handling system in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 uses a sequential file name generatio…
published 2014-08-26 modified 2021-07-05 aliases CVE-2014-0481, GHSA-296w-6qhq-gf92 affected introduced 0, fixed 1.4.14, introduced 1.5, fixed 1.5.9, introduced 1.6, fixed 1.6.6 fixed in 1.6.6 summary The default configuration for the file upload handling system in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 uses a sequential file name generatio…
2014-08-26	PYSEC-2014-4	django	1.6.6	The core.urlresolvers.reverse function in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 does not properly validate URLs, which allows remote attacke…
published 2014-08-26 modified 2021-07-05 aliases CVE-2014-0480, GHSA-f7cm-ccfp-3q4r affected introduced 0, fixed 1.4.14, introduced 1.5, fixed 1.5.9, introduced 1.6, fixed 1.6.6 fixed in 1.6.6 summary The core.urlresolvers.reverse function in Django before 1.4.14, 1.5.x before 1.5.9, 1.6.x before 1.6.6, and 1.7 before release candidate 3 does not properly validate URLs, which allows remote attacke…
2014-08-25	PYSEC-2014-10	pillow	2.5.2	PIL/IcnsImagePlugin.py in Python Imaging Library (PIL) and Pillow before 2.3.2 and 2.5.x before 2.5.2 allows remote attackers to cause a denial of service via a crafted block size.
published 2014-08-25 modified 2021-07-05 aliases CVE-2014-3589, GHSA-cfmr-38g9-f2h7 affected introduced 0, fixed 205e056f8f9b06ed7b925cf8aa0874bc4aaf8a7d; introduced 0, fixed 2.3.2, introduced 2.5, fixed 2.5.2 fixed in 2.5.2 summary PIL/IcnsImagePlugin.py in Python Imaging Library (PIL) and Pillow before 2.3.2 and 2.5.x before 2.5.2 allows remote attackers to cause a denial of service via a crafted block size.
2014-08-07	PYSEC-2014-21	ipython	1.2.0	IPython Notebook 0.12 through 1.x before 1.2 does not validate the origin of websocket requests, which allows remote attackers to execute arbitrary code by leveraging knowledge of the kernel id and a…
published 2014-08-07 modified 2021-11-10 aliases CVE-2014-3429, GHSA-75cw-5cgv-g853 affected introduced 0.12, fixed 1.2.0 fixed in 1.2.0 summary IPython Notebook 0.12 through 1.x before 1.2 does not validate the origin of websocket requests, which allows remote attackers to execute arbitrary code by leveraging knowledge of the kernel id and a…
2014-05-19	PYSEC-2014-82	jinja2	2.7.3	FileSystemBytecodeCache in Jinja2 2.7.2 does not properly create temporary directories, which allows local users to gain privileges by pre-creating a temporary directory with a user's uid.
published 2014-05-19 modified 2021-08-27 aliases CVE-2014-0012, GHSA-fqh9-2qgg-h84h affected introduced 0, fixed acb672b6a179567632e032f547582f30fa2f4aa7; introduced 0, fixed 2.7.3 fixed in 2.7.3 summary FileSystemBytecodeCache in Jinja2 2.7.2 does not properly create temporary directories, which allows local users to gain privileges by pre-creating a temporary directory with a user's uid.
2014-05-19	PYSEC-2014-8	jinja2	2.7.2	The default configuration for bccache.FileSystemBytecodeCache in Jinja2 before 2.7.2 does not properly create temporary files, which allows local users to gain privileges via a crafted .cache file wi…
published 2014-05-19 modified 2021-07-05 aliases CVE-2014-1402, GHSA-8r7q-cvjq-x353 affected introduced 0, fixed 2.7.2 fixed in 2.7.2 summary The default configuration for bccache.FileSystemBytecodeCache in Jinja2 before 2.7.2 does not properly create temporary files, which allows local users to gain privileges via a crafted .cache file wi…
2014-05-16	PYSEC-2014-20	django	1.7b4	The django.util.http.is_safe_url function in Django 1.4 before 1.4.13, 1.5 before 1.5.8, 1.6 before 1.6.5, and 1.7 before 1.7b4 does not properly validate URLs, which allows remote attackers to condu…
published 2014-05-16 modified 2021-09-01 aliases CVE-2014-3730, GHSA-vq3h-3q7v-9prw affected introduced 1.4, fixed 1.4.13, introduced 1.5, fixed 1.5.8, introduced 1.6, fixed 1.6.5, introduced 1.7a0, fixed 1.7b4 fixed in 1.7b4 summary The django.util.http.is_safe_url function in Django 1.4 before 1.4.13, 1.5 before 1.5.8, 1.6 before 1.6.5, and 1.7 before 1.7b4 does not properly validate URLs, which allows remote attackers to condu…
2014-05-16	PYSEC-2014-19	django	1.7b4	Django 1.4 before 1.4.13, 1.5 before 1.5.8, 1.6 before 1.6.5, and 1.7 before 1.7b4 does not properly include the (1) Vary: Cookie or (2) Cache-Control header in responses, which allows remote attacke…
published 2014-05-16 modified 2021-09-01 aliases CVE-2014-1418, GHSA-q7q2-qf2q-rw3w affected introduced 1.4, fixed 1.4.13, introduced 1.5, fixed 1.5.8, introduced 1.6, fixed 1.6.5, introduced 1.7a0, fixed 1.7b4 fixed in 1.7b4 summary Django 1.4 before 1.4.13, 1.5 before 1.5.8, 1.6 before 1.6.5, and 1.7 before 1.7b4 does not properly include the (1) Vary: Cookie or (2) Cache-Control header in responses, which allows remote attacke…
2014-05-14	PYSEC-2014-9	lxml	3.3.5	Incomplete blacklist vulnerability in the lxml.html.clean module in lxml before 3.3.5 allows remote attackers to conduct cross-site scripting (XSS) attacks via control characters in the link scheme t…
published 2014-05-14 modified 2021-07-05 aliases CVE-2014-3146, GHSA-57qw-cc2g-pv5p affected introduced 0, fixed 3.3.5 fixed in 3.3.5 summary Incomplete blacklist vulnerability in the lxml.html.clean module in lxml before 3.3.5 allows remote attackers to conduct cross-site scripting (XSS) attacks via control characters in the link scheme t…
2014-04-27	PYSEC-2014-87	pillow	2.5.0	Python Image Library (PIL) 1.1.7 and earlier and Pillow 2.3 might allow remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors related to CVE-2014-1932, possib…
published 2014-04-27 modified 2021-08-27 aliases CVE-2014-3007, GHSA-8m9x-pxwq-j236 affected introduced 0, fixed 2.5.0 fixed in 2.5.0 summary Python Image Library (PIL) 1.1.7 and earlier and Pillow 2.3 might allow remote attackers to execute arbitrary commands via shell metacharacters in unspecified vectors related to CVE-2014-1932, possib…
2014-04-23	PYSEC-2014-3	django	1.6.3	The (1) FilePathField, (2) GenericIPAddressField, and (3) IPAddressField model field classes in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 do not proper…
published 2014-04-23 modified 2021-07-05 aliases CVE-2014-0474, GHSA-wqjj-hx84-v449 affected introduced 0, fixed 1.4.11, introduced 1.5, fixed 1.5.6, introduced 1.6, fixed 1.6.3 fixed in 1.6.3 summary The (1) FilePathField, (2) GenericIPAddressField, and (3) IPAddressField model field classes in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 do not proper…
2014-04-23	PYSEC-2014-2	django	1.6.3	The caching framework in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 reuses a cached CSRF token for all anonymous users, which allows remote attackers to…
published 2014-04-23 modified 2021-07-05 aliases CVE-2014-0473, GHSA-89hj-xfx5-7q66 affected introduced 0, fixed 1.4.11, introduced 1.5, fixed 1.5.6, introduced 1.6, fixed 1.6.3 fixed in 1.6.3 summary The caching framework in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 reuses a cached CSRF token for all anonymous users, which allows remote attackers to…
2014-04-23	PYSEC-2014-1	django	1.6.3	The django.core.urlresolvers.reverse function in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 allows remote attackers to import and execute arbitrary Pyth…
published 2014-04-23 modified 2021-07-05 aliases CVE-2014-0472, GHSA-rvq6-mrpv-m6rm affected introduced 0, fixed 1.4.11, introduced 1.5, fixed 1.5.6, introduced 1.6, fixed 1.6.3 fixed in 1.6.3 summary The django.core.urlresolvers.reverse function in Django before 1.4.11, 1.5.x before 1.5.6, 1.6.x before 1.6.3, and 1.7.x before 1.7 beta 2 allows remote attackers to import and execute arbitrary Pyth…
2014-04-17	PYSEC-2014-23	pillow	2.3.1	The (1) JpegImagePlugin.py and (2) EpsImagePlugin.py scripts in Python Image Library (PIL) 1.1.7 and earlier and Pillow before 2.3.1 uses the names of temporary files on the command line, which makes…
published 2014-04-17 modified 2021-07-15 aliases CVE-2014-1933, GHSA-r854-96gq-rfg3 affected introduced 0, fixed 4e9f367dfd3f04c8f5d23f7f759ec12782e10ee7; introduced 0, fixed 2.3.1 fixed in 2.3.1 summary The (1) JpegImagePlugin.py and (2) EpsImagePlugin.py scripts in Python Image Library (PIL) 1.1.7 and earlier and Pillow before 2.3.1 uses the names of temporary files on the command line, which makes…
2014-04-17	PYSEC-2014-22	pillow	2.3.1	The (1) load_djpeg function in JpegImagePlugin.py, (2) Ghostscript function in EpsImagePlugin.py, (3) load function in IptcImagePlugin.py, and (4) _copy function in Image.py in Python Image Library (…
published 2014-04-17 modified 2021-07-15 aliases CVE-2014-1932, GHSA-x895-2wrm-hvp7 affected introduced 0, fixed 4e9f367dfd3f04c8f5d23f7f759ec12782e10ee7; introduced 0, fixed 2.3.1 fixed in 2.3.1 summary The (1) load_djpeg function in JpegImagePlugin.py, (2) Ghostscript function in EpsImagePlugin.py, (3) load function in IptcImagePlugin.py, and (4) _copy function in Image.py in Python Image Library (…
2014-01-18	PYSEC-2014-81	httplib2	0.9	httplib2 0.7.2, 0.8, and earlier, after an initial connection is made, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the …
published 2014-01-18 modified 2021-08-27 aliases CVE-2013-2037, GHSA-q48q-77qv-cf9p affected introduced 0, fixed 0.9 fixed in 0.9 summary httplib2 0.7.2, 0.8, and earlier, after an initial connection is made, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the …
2013-10-04	PYSEC-2013-21	django	1.5.2	The is_safe_url function in utils/http.py in Django 1.4.x before 1.4.6, 1.5.x before 1.5.2, and 1.6 before beta 2 treats a URL's scheme as safe even if it is not HTTP or HTTPS, which might introduce …
published 2013-10-04 modified 2021-07-15 aliases CVE-2013-6044, GHSA-9cwg-mhxf-hh59 affected introduced 0, fixed ec67af0bd609c412b76eaa4cc89968a2a8e5ad6a, fixed ae3535169af804352517b7fea94a42a1c9c4b762, fixed 1a274ccd6bc1afbdac80344c9b6e5810c1162b5f; introduced 1.4, fixed 1.4.6, introduced 1.5, fixed 1.5.2 fixed in 1.5.2 summary The is_safe_url function in utils/http.py in Django 1.4.x before 1.4.6, 1.5.x before 1.5.2, and 1.6 before beta 2 treats a URL's scheme as safe even if it is not HTTP or HTTPS, which might introduce …
2013-10-04	PYSEC-2013-19	django	1.5.2	Cross-site scripting (XSS) vulnerability in the AdminURLFieldWidget widget in contrib/admin/widgets.py in Django 1.5.x before 1.5.2 and 1.6.x before 1.6 beta 2 allows remote attackers to inject arbit…
published 2013-10-04 modified 2021-07-15 aliases CVE-2013-4249, GHSA-4894-5vqc-6r2r affected introduced 0, fixed 90363e388c61874add3f3557ee654a996ec75d78, fixed cbe6d5568f4f5053ed7228ca3c3d0cce77cf9560; introduced 1.5, fixed 1.5.2 fixed in 1.5.2 summary Cross-site scripting (XSS) vulnerability in the AdminURLFieldWidget widget in contrib/admin/widgets.py in Django 1.5.x before 1.5.2 and 1.6.x before 1.6 beta 2 allows remote attackers to inject arbit…
2013-09-30	PYSEC-2013-31	pyopenssl	0.13.1	The X509Extension in pyOpenSSL before 0.13.1 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle a…
published 2013-09-30 modified 2021-08-27 aliases CVE-2013-4314, GHSA-6748-36qp-fx6r affected introduced 0, fixed 0.13.1 fixed in 0.13.1 summary The X509Extension in pyOpenSSL before 0.13.1 does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle a…
2013-09-23	PYSEC-2013-18	django	1.5.4	The authentication framework (django.contrib.auth) in Django 1.4.x before 1.4.8, 1.5.x before 1.5.4, and 1.6.x before 1.6 beta 4 allows remote attackers to cause a denial of service (CPU consumption)…
published 2013-09-23 modified 2021-07-15 aliases CVE-2013-1443, GHSA-4c42-4rxm-x6qf affected introduced 1.4, fixed 1.4.8, introduced 1.5, fixed 1.5.4 fixed in 1.5.4 summary The authentication framework (django.contrib.auth) in Django 1.4.x before 1.4.8, 1.5.x before 1.5.4, and 1.6.x before 1.6 beta 4 allows remote attackers to cause a denial of service (CPU consumption)…
2013-09-16	PYSEC-2013-20	django	1.5.3	Directory traversal vulnerability in Django 1.4.x before 1.4.7, 1.5.x before 1.5.3, and 1.6.x before 1.6 beta 3 allows remote attackers to read arbitrary files via a file path in the ALLOWED_INCLUDE_…
published 2013-09-16 modified 2021-07-15 aliases CVE-2013-4315, GHSA-vjjp-9r83-22rc affected introduced 1.4, fixed 1.4.7, introduced 1.5, fixed 1.5.3 fixed in 1.5.3 summary Directory traversal vulnerability in Django 1.4.x before 1.4.7, 1.5.x before 1.5.3, and 1.6.x before 1.6 beta 3 allows remote attackers to read arbitrary files via a file path in the ALLOWED_INCLUDE_…
2013-08-17	PYSEC-2013-9	pip	1.3	pip before 1.3 allows local users to overwrite arbitrary files via a symlink attack on a file in the /tmp/pip-build temporary directory.
published 2013-08-17 modified 2021-07-05 aliases CVE-2013-1888, GHSA-4gv5-qhvr-36vv affected introduced 0, fixed 1.3 fixed in 1.3 summary pip before 1.3 allows local users to overwrite arbitrary files via a symlink attack on a file in the /tmp/pip-build temporary directory.
2013-08-15	PYSEC-2013-30	pymongo	2.5.2	bson/_cbsonmodule.c in the mongo-python-driver (aka.
published 2013-08-15 modified 2021-08-27 aliases CVE-2013-2132, GHSA-x33v-f3gp-gw2c affected introduced 0, fixed a060c15ef87e0f0e72974c7c0e57fe811bbd06a2; introduced 0, fixed 2.5.2 fixed in 2.5.2 summary bson/_cbsonmodule.c in the mongo-python-driver (aka.
2013-08-06	PYSEC-2013-8	pip	1.3	pip before 1.3 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code v…
published 2013-08-06 modified 2021-07-05 aliases CVE-2013-1629, GHSA-g3p5-fjj9-h8gj affected introduced 0, fixed 1.3 fixed in 1.3 summary pip before 1.3 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to execute arbitrary code v…
2013-08-06	PYSEC-2013-22	setuptools	0.7	easy_install in setuptools before 0.7 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to e…
published 2013-08-06 modified 2021-07-15 aliases CVE-2013-1633, GHSA-27x4-j476-jp5f affected introduced 0, fixed 0.7 fixed in 0.7 summary easy_install in setuptools before 0.7 uses HTTP to retrieve packages from the PyPI repository, and does not perform integrity checks on package contents, which allows man-in-the-middle attackers to e…
2013-05-02	PYSEC-2013-17	django	1.4.4	The form library in Django 1.3.x before 1.3.6, 1.4.x before 1.4.4, and 1.5 before release candidate 2 allows remote attackers to bypass intended resource limits for formsets and cause a denial of ser…
published 2013-05-02 modified 2021-07-15 aliases CVE-2013-0306, GHSA-g8xg-jgj6-49r3 affected introduced 1.3, fixed 1.3.6, introduced 1.4, fixed 1.4.4 fixed in 1.4.4 summary The form library in Django 1.3.x before 1.3.6, 1.4.x before 1.4.4, and 1.5 before release candidate 2 allows remote attackers to bypass intended resource limits for formsets and cause a denial of ser…
2013-05-02	PYSEC-2013-16	django	1.4.4	The administrative interface for Django 1.3.x before 1.3.6, 1.4.x before 1.4.4, and 1.5 before release candidate 2 does not check permissions for the history view, which allows remote authenticated a…
published 2013-05-02 modified 2021-07-15 aliases CVE-2013-0305, GHSA-r7w6-p47g-vj53 affected introduced 1.3, fixed 1.3.6, introduced 1.4, fixed 1.4.4 fixed in 1.4.4 summary The administrative interface for Django 1.3.x before 1.3.6, 1.4.x before 1.4.4, and 1.5 before release candidate 2 does not check permissions for the history view, which allows remote authenticated a…
2012-11-30	PYSEC-2012-8	keyring	0.9.2	Python Keyring 0.9.1 does not securely initialize the cipher when encrypting passwords for CryptedFileKeyring files, which makes it easier for local users to obtain passwords via a brute-force attack.
published 2012-11-30 modified 2021-07-15 aliases CVE-2012-4571, GHSA-p3h7-3c45-qj4v affected introduced 0, fixed 0.9.2 fixed in 0.9.2 summary Python Keyring 0.9.1 does not securely initialize the cipher when encrypting passwords for CryptedFileKeyring files, which makes it easier for local users to obtain passwords via a brute-force attack.
2012-11-18	PYSEC-2012-7	django	1.4.2	The django.http.HttpRequest.get_host function in Django 1.3.x before 1.3.4 and 1.4.x before 1.4.2 allows remote attackers to generate and display arbitrary URLs via crafted username and password Host…
published 2012-11-18 modified 2021-07-15 aliases CVE-2012-4520, GHSA-2655-q453-22f9 affected introduced 0, fixed 9305c0e12d43c4df999c3301a1f0c742264a657e, fixed b45c377f8f488955e0c7069cad3f3dd21910b071, fixed 92d3430f12171f16f566c9050c40feefb830a4a3; introduced 1.3, fixed 1.3.4, introduced 1.4, fixed 1.4.2 fixed in 1.4.2 summary The django.http.HttpRequest.get_host function in Django 1.3.x before 1.3.4 and 1.4.x before 1.4.2 allows remote attackers to generate and display arbitrary URLs via crafted username and password Host…
2012-07-31	PYSEC-2012-4	django	1.4.1	The get_image_dimensions function in the image-handling functionality in Django before 1.3.2 and 1.4.x before 1.4.1 uses a constant chunk size in all attempts to determine dimensions, which allows re…
published 2012-07-31 modified 2021-07-05 aliases CVE-2012-3444, GHSA-5h2q-4hrp-v9rr affected introduced 0, fixed 1.3.2, introduced 1.4, fixed 1.4.1 fixed in 1.4.1 summary The get_image_dimensions function in the image-handling functionality in Django before 1.3.2 and 1.4.x before 1.4.1 uses a constant chunk size in all attempts to determine dimensions, which allows re…
2012-07-31	PYSEC-2012-3	django	1.4.1	The django.forms.ImageField class in the form system in Django before 1.3.2 and 1.4.x before 1.4.1 completely decompresses image data during image validation, which allows remote attackers to cause a…
published 2012-07-31 modified 2021-07-05 aliases CVE-2012-3443, GHSA-59w8-4wm2-4xw8 affected introduced 0, fixed 1.3.2, introduced 1.4, fixed 1.4.1 fixed in 1.4.1 summary The django.forms.ImageField class in the form system in Django before 1.3.2 and 1.4.x before 1.4.1 completely decompresses image data during image validation, which allows remote attackers to cause a…
2012-07-31	PYSEC-2012-2	django	1.4.1	The (1) django.http.HttpResponseRedirect and (2) django.http.HttpResponsePermanentRedirect classes in Django before 1.3.2 and 1.4.x before 1.4.1 do not validate the scheme of a redirect target, which…
published 2012-07-31 modified 2021-07-05 aliases CVE-2012-3442, GHSA-78vx-ggch-wghm affected introduced 0, fixed 1.3.2, introduced 1.4, fixed 1.4.1 fixed in 1.4.1 summary The (1) django.http.HttpResponseRedirect and (2) django.http.HttpResponsePermanentRedirect classes in Django before 1.3.2 and 1.4.x before 1.4.1 do not validate the scheme of a redirect target, which…
2012-06-05	PYSEC-2012-9	sqlalchemy	0.7.0	Multiple SQL injection vulnerabilities in SQLAlchemy before 0.7.0b4, as used in Keystone, allow remote attackers to execute arbitrary SQL commands via the (1) limit or (2) offset keyword to the selec…
published 2012-06-05 modified 2021-07-15 aliases CVE-2012-0805, GHSA-hfg2-wf6j-x53p affected introduced 0, fixed 0.7.0 fixed in 0.7.0 summary Multiple SQL injection vulnerabilities in SQLAlchemy before 0.7.0b4, as used in Keystone, allow remote attackers to execute arbitrary SQL commands via the (1) limit or (2) offset keyword to the selec…
2012-05-23	PYSEC-2012-5	tornado	2.2.1	CRLF injection vulnerability in the tornado.web.RequestHandler.set_header function in Tornado before 2.2.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting…
published 2012-05-23 modified 2021-07-05 aliases CVE-2012-2374, GHSA-f7fv-v9rh-prvc affected introduced 0, fixed 2.2.1 fixed in 2.2.1 summary CRLF injection vulnerability in the tornado.web.RequestHandler.set_header function in Tornado before 2.2.1 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting…
2012-05-21	PYSEC-2012-14	feedparser	5.1.2	Universal Feed Parser (aka feedparser or python-feedparser) before 5.1.2 allows remote attackers to cause a denial of service (memory consumption) via a crafted XML ENTITY declaration in a non-ASCII …
published 2012-05-21 modified 2021-08-27 aliases CVE-2012-2921, GHSA-hjf3-r7gw-9rwg affected introduced 0, fixed 5.1.2 fixed in 5.1.2 summary Universal Feed Parser (aka feedparser or python-feedparser) before 5.1.2 allows remote attackers to cause a denial of service (memory consumption) via a crafted XML ENTITY declaration in a non-ASCII …
2011-12-31	PYSEC-2011-23	virtualenv	1.5	virtualenv.py in virtualenv before 1.5 allows local users to overwrite arbitrary files via a symlink attack on a certain file in /tmp/.
published 2011-12-31 modified 2021-08-27 aliases CVE-2011-4617, GHSA-3jhc-wjqf-5f2c affected introduced 0, fixed 1.5 fixed in 1.5 summary virtualenv.py in virtualenv before 1.5 allows local users to overwrite arbitrary files via a symlink attack on a certain file in /tmp/.
2011-12-05	PYSEC-2011-17	celery	2.4.4	Celery 2.1 and 2.2 before 2.2.8, 2.3 before 2.3.4, and 2.4 before 2.4.4 changes the effective id but not the real id during processing of the --uid and --gid arguments to celerybeat, celeryd_detach, …
published 2011-12-05 modified 2021-08-27 aliases CVE-2011-4356, GHSA-rpc6-h455-3rx5 affected introduced 2.1, fixed 2.2.8, introduced 2.3, fixed 2.3.4, introduced 2.4, fixed 2.4.4 fixed in 2.4.4 summary Celery 2.1 and 2.2 before 2.2.8, 2.3 before 2.3.4, and 2.4 before 2.4.4 changes the effective id but not the real id during processing of the --uid and --gid arguments to celerybeat, celeryd_detach, …
2011-10-19	PYSEC-2011-5	django	1.3.1	The CSRF protection mechanism in Django through 1.2.7 and 1.3.x through 1.3.1 does not properly handle web-server configurations supporting arbitrary HTTP Host headers, which allows remote attackers …
published 2011-10-19 modified 2021-07-05 aliases CVE-2011-4140, GHSA-h95j-h2rv-qrg4 affected introduced 0, fixed 1.2.7, introduced 1.3, fixed 1.3.1 fixed in 1.3.1 summary The CSRF protection mechanism in Django through 1.2.7 and 1.3.x through 1.3.1 does not properly handle web-server configurations supporting arbitrary HTTP Host headers, which allows remote attackers …
2011-10-19	PYSEC-2011-4	django	1.3.1	Django before 1.2.7 and 1.3.x before 1.3.1 uses a request's HTTP Host header to construct a full URL in certain circumstances, which allows remote attackers to conduct cache poisoning attacks via a c…
published 2011-10-19 modified 2021-07-05 aliases CVE-2011-4139, GHSA-rm2j-x595-q9cj affected introduced 0, fixed 1.2.7, introduced 1.3, fixed 1.3.1 fixed in 1.3.1 summary Django before 1.2.7 and 1.3.x before 1.3.1 uses a request's HTTP Host header to construct a full URL in certain circumstances, which allows remote attackers to conduct cache poisoning attacks via a c…
2011-10-19	PYSEC-2011-3	django	1.3.1	The verify_exists functionality in the URLField implementation in Django before 1.2.7 and 1.3.x before 1.3.1 originally tests a URL's validity through a HEAD request, but then uses a GET request for …
published 2011-10-19 modified 2021-07-05 aliases CVE-2011-4138, GHSA-wxg3-mfph-qg9w affected introduced 0, fixed 1.2.7, introduced 1.3, fixed 1.3.1 fixed in 1.3.1 summary The verify_exists functionality in the URLField implementation in Django before 1.2.7 and 1.3.x before 1.3.1 originally tests a URL's validity through a HEAD request, but then uses a GET request for …
2011-10-19	PYSEC-2011-2	django	1.3.1	The verify_exists functionality in the URLField implementation in Django before 1.2.7 and 1.3.x before 1.3.1 relies on Python libraries that attempt access to an arbitrary URL with no timeout, which …
published 2011-10-19 modified 2021-07-05 aliases CVE-2011-4137, GHSA-3jqw-crqj-w8qw affected introduced 0, fixed 1.2.7, introduced 1.3, fixed 1.3.1 fixed in 1.3.1 summary The verify_exists functionality in the URLField implementation in Django before 1.2.7 and 1.3.x before 1.3.1 relies on Python libraries that attempt access to an arbitrary URL with no timeout, which …
2011-10-19	PYSEC-2011-1	django	1.3.1	django.contrib.sessions in Django before 1.2.7 and 1.3.x before 1.3.1, when session data is stored in the cache, uses the root namespace for both session identifiers and application-data keys, which …
published 2011-10-19 modified 2021-07-05 aliases CVE-2011-4136, GHSA-x88j-93vc-wpmp affected introduced 0, fixed 1.2.7, introduced 1.3, fixed 1.3.1 fixed in 1.3.1 summary django.contrib.sessions in Django before 1.2.7 and 1.3.x before 1.3.1, when session data is stored in the cache, uses the root namespace for both session identifiers and application-data keys, which …
2011-04-11	PYSEC-2011-21	feedparser	5.0.1	Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) 5.x before 5.0.1 allows remote attackers to inject arbitrary web script or HTM…
published 2011-04-11 modified 2021-08-27 aliases CVE-2011-1158, GHSA-4m72-rmm9-2qjr affected introduced 0, fixed 5.0.1 fixed in 5.0.1 summary Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) 5.x before 5.0.1 allows remote attackers to inject arbitrary web script or HTM…
2011-04-11	PYSEC-2011-20	feedparser	5.0.1	Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) 5.x before 5.0.1 allows remote attackers to inject arbitrary web script or HTM…
published 2011-04-11 modified 2021-08-27 aliases CVE-2011-1157, GHSA-2p78-8hh6-96xc affected introduced 0, fixed 5.0.1 fixed in 5.0.1 summary Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) 5.x before 5.0.1 allows remote attackers to inject arbitrary web script or HTM…
2011-04-11	PYSEC-2011-19	feedparser	5.0.1	feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) before 5.0.1 allows remote attackers to cause a denial of service (application crash) via a malformed DOCTYPE declaration.
published 2011-04-11 modified 2021-08-27 aliases CVE-2011-1156, GHSA-6h52-4vmh-8x4f affected introduced 0, fixed 5.0.1 fixed in 5.0.1 summary feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) before 5.0.1 allows remote attackers to cause a denial of service (application crash) via a malformed DOCTYPE declaration.
2011-04-11	PYSEC-2011-18	feedparser	5.0	Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) before 5.0 allows remote attackers to inject arbitrary web script or HTML via …
published 2011-04-11 modified 2021-08-27 aliases CVE-2009-5065, GHSA-3mwg-gp5g-fv3q affected introduced 0, fixed 5.0 fixed in 5.0 summary Cross-site scripting (XSS) vulnerability in feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) before 5.0 allows remote attackers to inject arbitrary web script or HTML via …
2011-02-14	PYSEC-2011-12	django	1.2.5	Directory traversal vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 on Windows might allow remote attackers to read or execute files via a / (slash) character in a key in a session …
published 2011-02-14 modified 2021-07-15 aliases CVE-2011-0698, GHSA-7g9h-c88w-r7h2 affected introduced 1.1, fixed 1.1.4, introduced 1.2, fixed 1.2.5 fixed in 1.2.5 summary Directory traversal vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 on Windows might allow remote attackers to read or execute files via a / (slash) character in a key in a session …
2011-02-14	PYSEC-2011-11	django	1.2.5	Cross-site scripting (XSS) vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 might allow remote attackers to inject arbitrary web script or HTML via a filename associated with a file …
published 2011-02-14 modified 2021-07-15 aliases CVE-2011-0697, GHSA-8m3r-rv5g-fcpq affected introduced 1.1, fixed 1.1.4, introduced 1.2, fixed 1.2.5 fixed in 1.2.5 summary Cross-site scripting (XSS) vulnerability in Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 might allow remote attackers to inject arbitrary web script or HTML via a filename associated with a file …
2011-02-14	PYSEC-2011-10	django	1.2.5	Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 does not properly validate HTTP requests that contain an X-Requested-With header, which makes it easier for remote attackers to conduct cross-site req…
published 2011-02-14 modified 2021-07-15 aliases CVE-2011-0696, GHSA-5j2h-h5hg-3wf8 affected introduced 1.1, fixed 1.1.4, introduced 1.2, fixed 1.2.5 fixed in 1.2.5 summary Django 1.1.x before 1.1.4 and 1.2.x before 1.2.5 does not properly validate HTTP requests that contain an X-Requested-With header, which makes it easier for remote attackers to conduct cross-site req…
2011-01-10	PYSEC-2011-29 withdrawn	django	1.2.4	The password reset functionality in django.contrib.auth in Django before 1.1.3, 1.2.x before 1.2.4, and 1.3.x before 1.3 beta 1 does not validate the length of a string representing a base36 timestam…
published 2011-01-10 modified 2026-06-28 withdrawn 2026-06-28 aliases CVE-2010-4535 affected introduced 0, fixed 1.1.3; introduced 1.2, fixed 1.2.4 fixed in 1.2.4 summary The password reset functionality in django.contrib.auth in Django before 1.1.3, 1.2.x before 1.2.4, and 1.3.x before 1.3 beta 1 does not validate the length of a string representing a base36 timestam…
2011-01-10	PYSEC-2011-28 withdrawn	django	1.2.4	The administrative interface in django.contrib.admin in Django before 1.1.3, 1.2.x before 1.2.4, and 1.3.x before 1.3 beta 1 does not properly restrict use of the query string to perform certain obje…
published 2011-01-10 modified 2026-06-28 withdrawn 2026-06-28 aliases CVE-2010-4534 affected introduced 0, fixed 1.1.3; introduced 1.2, fixed 1.2.4 fixed in 1.2.4 summary The administrative interface in django.contrib.admin in Django before 1.1.3, 1.2.x before 1.2.4, and 1.3.x before 1.3 beta 1 does not properly restrict use of the query string to perform certain obje…
2010-09-14	PYSEC-2010-12	django	1.2.2	Cross-site scripting (XSS) vulnerability in Django 1.2.x before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via a csrfmiddlewaretoken (aka csrf_token) cookie.
published 2010-09-14 modified 2021-07-15 aliases CVE-2010-3082, GHSA-fxpg-gg9g-76gj affected introduced 1.2, fixed 1.2.2 fixed in 1.2.2 summary Cross-site scripting (XSS) vulnerability in Django 1.2.x before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via a csrfmiddlewaretoken (aka csrf_token) cookie.
2010-07-02	PYSEC-2010-1	mako	0.3.4	Mako before 0.3.4 relies on the cgi.escape function in the Python standard library for cross-site scripting (XSS) protection, which makes it easier for remote attackers to conduct XSS attacks via vec…
published 2010-07-02 modified 2021-07-05 aliases CVE-2010-2480, GHSA-7q8x-38mc-p84f affected introduced 0, fixed 0.3.4 fixed in 0.3.4 summary Mako before 0.3.4 relies on the cgi.escape function in the Python standard library for cross-site scripting (XSS) protection, which makes it easier for remote attackers to conduct XSS attacks via vec…
2009-10-13	PYSEC-2009-4	django	1.1.1	Algorithmic complexity vulnerability in the forms library in Django 1.0 before 1.0.4 and 1.1 before 1.1.1 allows remote attackers to cause a denial of service (CPU consumption) via a crafted (1) Emai…
published 2009-10-13 modified 2021-07-15 aliases CVE-2009-3695, GHSA-p6m5-h7pp-v2x5 affected introduced 1.0, fixed 1.0.4, introduced 1.1, fixed 1.1.1 fixed in 1.1.1 summary Algorithmic complexity vulnerability in the forms library in Django 1.0 before 1.0.4 and 1.1 before 1.1.1 allows remote attackers to cause a denial of service (CPU consumption) via a crafted (1) Emai…
2009-08-04	PYSEC-2009-3	django	1.1	The Admin media handler in core/servers/basehttp.py in Django 1.0 and 0.96 does not properly map URL requests to expected "static media files," which allows remote attackers to conduct directory trav…
published 2009-08-04 modified 2021-07-15 aliases CVE-2009-2659, GHSA-9xg7-gg9m-rmq9 affected introduced 0, fixed 1.1 fixed in 1.1 summary The Admin media handler in core/servers/basehttp.py in Django 1.0 and 0.96 does not properly map URL requests to expected "static media files," which allows remote attackers to conduct directory trav…
2008-09-04	PYSEC-2008-2	django	1.1	The administration application in Django 0.91, 0.95, and 0.96 stores unauthenticated HTTP POST requests and processes them after successful authentication occurs, which allows remote attackers to con…
published 2008-09-04 modified 2021-07-15 aliases CVE-2008-3909, GHSA-r5cj-wv24-92p5 affected introduced 0, fixed 1.1 fixed in 1.1 summary The administration application in Django 0.91, 0.95, and 0.96 stores unauthenticated HTTP POST requests and processes them after successful authentication occurs, which allows remote attackers to con…
2008-05-23	PYSEC-2008-1	django	1.1	Cross-site scripting (XSS) vulnerability in the login form in the administration application in Django 0.91 before 0.91.2, 0.95 before 0.95.3, and 0.96 before 0.96.2 allows remote attackers to inject…
published 2008-05-23 modified 2021-07-15 aliases CVE-2008-2302, GHSA-54qj-48vx-cr9f affected introduced 0, fixed 1.1 fixed in 1.1 summary Cross-site scripting (XSS) vulnerability in the login form in the administration application in Django 0.91 before 0.91.2, 0.95 before 0.95.3, and 0.96 before 0.96.2 allows remote attackers to inject…
2008-01-16	PYSEC-2008-8	paramiko	1.7.2	common.py in Paramiko 1.7.1 and earlier, when using threads or forked processes, does not properly use RandomPool, which allows one session to obtain sensitive information from another session by pre…
published 2008-01-16 modified 2021-08-27 aliases CVE-2008-0299, GHSA-wqmm-q65g-2hqr affected introduced 0, fixed 1.7.2 fixed in 1.7.2 summary common.py in Paramiko 1.7.1 and earlier, when using threads or forked processes, does not properly use RandomPool, which allows one session to obtain sensitive information from another session by pre…
2007-10-30	PYSEC-2007-1	django	1.1	The internationalization (i18n) framework in Django 0.91, 0.95, 0.95.1, and 0.96, and as used in other products such as PyLucid, when the USE_I18N option and the i18n component are enabled, allows re…
published 2007-10-30 modified 2021-07-15 aliases CVE-2007-5712, GHSA-9v8h-57gv-qch6 affected introduced 0, fixed 1.1 fixed in 1.1 summary The internationalization (i18n) framework in Django 0.91, 0.95, 0.95.1, and 0.96, and as used in other products such as PyLucid, when the USE_I18N option and the i18n component are enabled, allows re…

Open slots 190

A package is open when it has known advisories but no version of it is admitted in algobank. An unalgobanked (not on algobank) package is open for codegens (coding agents, bots and human developers) to analyze and run algobank on. Algobanking generates a report saved in algobank for the package, making it an algobanked package.

package	advisories	latest fix	in the bank
litellm	1 malicious 39 vulnerabilities	1.96.2	open
mistralai	1 malicious 0 vulnerabilities		open
django	159 vulnerabilities	6.0.8	open
mlflow	80 vulnerabilities	3.15.0	open
pillow	75 vulnerabilities	12.3.0	open
nltk	53 vulnerabilities	3.10.3	open
pypdf	50 vulnerabilities	6.19.0	admitted 6.21.2
aiohttp	46 vulnerabilities	3.14.3	open
gitpython	35 vulnerabilities	3.1.60	open
transformers	32 vulnerabilities	5.10.0	open
torch	31 vulnerabilities	2.10.0	open
pyjwt	24 vulnerabilities	2.15.0	open
opencv-python	22 vulnerabilities	4.8.1.78	open
urllib3	22 vulnerabilities	2.8.0	open
mistune	20 vulnerabilities	3.3.3	open
cryptography	18 vulnerabilities	50.0.0	open
langchain	17 vulnerabilities	0.1.0	open
jupyter-server	15 vulnerabilities	2.21.0	open
jupyterlab	15 vulnerabilities	4.6.4	open
twisted	15 vulnerabilities	26.4.0	open
werkzeug	15 vulnerabilities	3.1.9	open
pydantic-ai-slim	14 vulnerabilities	2.53.0	open
tornado	14 vulnerabilities	6.5.8	open
datamodel-code-generator	13 vulnerabilities	0.81.0	open
pip	13 vulnerabilities	26.2	open
authlib	12 vulnerabilities	1.6.12	open
pyspark	12 vulnerabilities	3.5.8	open
notebook	11 vulnerabilities	6.4.12	open
jinja2	10 vulnerabilities	3.1.6	open
opencv-python-headless	10 vulnerabilities	4.8.1.78	open
starlette	10 vulnerabilities	1.3.1	open
langchain-core	9 vulnerabilities	1.3.3	open
dulwich	8 vulnerabilities	1.2.5	open
ipython	8 vulnerabilities	8.10.0	open
numpy	8 vulnerabilities	1.19.1	open
python-multipart	8 vulnerabilities	0.0.31	open
requests	8 vulnerabilities	2.33.0	open
snowflake-connector-python	8 vulnerabilities	4.7.3	open
sqlparse	8 vulnerabilities	0.6.0	open
langchain-community	7 vulnerabilities	0.3.27	open
lxml	7 vulnerabilities	6.1.0	open
sagemaker	7 vulnerabilities	3.8.0	open
ujson	7 vulnerabilities	5.13.0	open
virtualenv	7 vulnerabilities	21.7.13	open
fastmcp	6 vulnerabilities	3.2.0	open
grpcio	6 vulnerabilities	1.56.2	open
mcp	6 vulnerabilities	1.28.1	open
paramiko	6 vulnerabilities	3.4.0	open
pymongo	6 vulnerabilities	4.18.2	open
bleach	5 vulnerabilities	3.3.0	open
feedparser	5 vulnerabilities	5.1.2	open
flask	5 vulnerabilities	3.1.3	open
flask-cors	5 vulnerabilities	6.0.0	open
jwcrypto	5 vulnerabilities	1.5.7	open
mako	5 vulnerabilities	1.4.2	open
poetry	5 vulnerabilities	2.3.4	open
pyarrow	5 vulnerabilities	23.0.1	open
pyasn1	5 vulnerabilities	0.6.4	open
pygments	5 vulnerabilities	2.20.0	open
pymdown-extensions	5 vulnerabilities	11.0.1	open
pyopenssl	5 vulnerabilities	26.0.0	open
python-jose	5 vulnerabilities	3.4.0	open
setuptools	5 vulnerabilities	83.0.0	open
streamlit	5 vulnerabilities	1.54.0	open
weasyprint	5 vulnerabilities	70.0	open
cbor2	4 vulnerabilities	5.9.0	open
certifi	4 vulnerabilities	2026.10.19	open
djangorestframework	4 vulnerabilities	3.17.2	open
ecdsa	4 vulnerabilities	0.19.2	open
httplib2	4 vulnerabilities	0.32.0	open
httpx2	4 vulnerabilities	2.12.0	open
joserfc	4 vulnerabilities	1.6.8	open
lxml-html-clean	4 vulnerabilities	0.4.5	open
nbconvert	4 vulnerabilities	7.17.1	open
protobuf	4 vulnerabilities	6.33.5	open
pyyaml	4 vulnerabilities	5.4	open
reportlab	4 vulnerabilities	3.6.13	open
skops	4 vulnerabilities	0.13.0	open
soupsieve	4 vulnerabilities	2.9.0	admitted 3.0.4
uv	4 vulnerabilities	0.13.4	open
anyio	3 vulnerabilities	4.14.2	open
black	3 vulnerabilities	26.3.1	open
brotli	3 vulnerabilities	1.2.1	open
duckdb	3 vulnerabilities	1.4.2	open
gunicorn	3 vulnerabilities	22.0.0	open
keyring	3 vulnerabilities	0.10.1	open
langgraph-checkpoint	3 vulnerabilities	4.1.1	open
mysql-connector-python	3 vulnerabilities	9.1.0	open
oauthlib	3 vulnerabilities	4.0.0	open
pypdf2	3 vulnerabilities	2.10.6	open
python-engineio	3 vulnerabilities	4.13.2	open
redshift-connector	3 vulnerabilities	2.1.14	open
rsa	3 vulnerabilities	4.7	open
scikit-learn	3 vulnerabilities	1.5.0	open
scipy	3 vulnerabilities	1.10.0	open
sqlalchemy	3 vulnerabilities	1.3.0b3	open
thrift	3 vulnerabilities	0.24.0	open
anthropic	2 vulnerabilities	0.87.0	open
awscli	2 vulnerabilities	1.45.28	open
celery	2 vulnerabilities	5.2.2	open
dbt-core	2 vulnerabilities	1.8.1	open
deepdiff	2 vulnerabilities	8.6.2	open
fastapi	2 vulnerabilities	0.109.1	open
filelock	2 vulnerabilities	3.20.3	open
fonttools	2 vulnerabilities	4.60.2	open
google-cloud-aiplatform	2 vulnerabilities	1.133.0	open
h2	2 vulnerabilities	4.4.1	open
hpack	2 vulnerabilities	4.2.0	open
html5lib	2 vulnerabilities	0.999999999	open
idna	2 vulnerabilities	3.15	open
jupyter-core	2 vulnerabilities	5.8.1	open
kafka-python	2 vulnerabilities	2.3.2	open
langchain-text-splitters	2 vulnerabilities	1.1.2	open
langgraph-sdk	2 vulnerabilities	0.4.4	open
langsmith	2 vulnerabilities	0.7.31	open
markdown-it-py	2 vulnerabilities	2.2.0	open
marshmallow	2 vulnerabilities	4.1.2	open
orjson	2 vulnerabilities	3.11.5	open
pdfminer-six	2 vulnerabilities	20251230	open
pycryptodome	2 vulnerabilities	3.19.1	open
pydantic	2 vulnerabilities	2.4.0	open
python-socketio	2 vulnerabilities	5.16.2	open
redis	2 vulnerabilities	4.5.4	open
selenium	2 vulnerabilities	4.14.0	open
sentry-sdk	2 vulnerabilities	2.8.0	open
tqdm	2 vulnerabilities	4.66.3	open
uvicorn	2 vulnerabilities	0.11.7	open
websockets	2 vulnerabilities	9.1	open
wheel	2 vulnerabilities	0.46.2	open
accelerate	1 vulnerabilities		open
apache-airflow-providers-common-sql	1 vulnerabilities	1.24.1	open
apscheduler	1 vulnerabilities		open
asyncpg	1 vulnerabilities	0.21.0	open
azure-core	1 vulnerabilities	1.38.0	open
azure-identity	1 vulnerabilities	1.16.1	open
azure-storage-blob	1 vulnerabilities	12.13.0	open
babel	1 vulnerabilities	2.9.1	open
cleo	1 vulnerabilities	2.0.0	open
curl-cffi	1 vulnerabilities	0.15.0	open
dask	1 vulnerabilities	2021.10.0	open
datasets	1 vulnerabilities	5.0.1	open
dbt-common	1 vulnerabilities	1.37.3	open
ddtrace	1 vulnerabilities	4.8.2	open
diskcache	1 vulnerabilities		open
django-filter	1 vulnerabilities	2.4.0	open
dnspython	1 vulnerabilities	2.6.1	open
docutils	1 vulnerabilities	0.6	open
fsspec	1 vulnerabilities	2026.6.0	open
future	1 vulnerabilities	0.18.3	open
geopandas	1 vulnerabilities	1.1.2	open
gevent	1 vulnerabilities	23.9.0	open
h11	1 vulnerabilities	0.16.0	open
httpcore2	1 vulnerabilities	2.10.0	open
httpx	1 vulnerabilities	0.20.0	open
jaraco-context	1 vulnerabilities	6.1.0	open
joblib	1 vulnerabilities	1.2.0	open
jsonpickle	1 vulnerabilities	1.4.2	open
jupyter-lsp	1 vulnerabilities	2.2.2	open
langchain-anthropic	1 vulnerabilities	1.4.6	open
langchain-classic	1 vulnerabilities	1.0.7	open
langchain-openai	1 vulnerabilities	1.1.14	open
langgraph	1 vulnerabilities	1.0.10rc1	open
lightgbm	1 vulnerabilities	4.6.0	open
loguru	1 vulnerabilities	0.5.3	open
lupa	1 vulnerabilities		open
mammoth	1 vulnerabilities	1.11.0	admitted 1.13.0
markdown	1 vulnerabilities		open
markdownify	1 vulnerabilities	0.14.1	open
mpmath	1 vulnerabilities	1.3.0	open
msgpack	1 vulnerabilities	1.2.1	open
multidict	1 vulnerabilities	6.9.1	open
openpyxl	1 vulnerabilities	2.4.1	open
opentelemetry-instrumentation	1 vulnerabilities	0.41b0	open
pandas	1 vulnerabilities	1.0.4	open
parso	1 vulnerabilities	0.5.0	open
pg8000	1 vulnerabilities	1.31.5	open
pillow-heif	1 vulnerabilities	1.3.0	open
psutil	1 vulnerabilities	5.6.6	open
py	1 vulnerabilities	1.10.0	open
pymupdf	1 vulnerabilities	1.26.7	open
pymysql	1 vulnerabilities	1.1.1	open
pynacl	1 vulnerabilities	1.6.2	open
pytest	1 vulnerabilities	9.0.3	open
python-docx	1 vulnerabilities	0.8.6	open
python-dotenv	1 vulnerabilities	1.2.2	open
pywin32	1 vulnerabilities	301	open
sentence-transformers	1 vulnerabilities	5.6.0	open
sentencepiece	1 vulnerabilities	0.2.1	open
simplejson	1 vulnerabilities	2.6.1	open
snowflake-sqlalchemy	1 vulnerabilities	1.11.0	open
validators	1 vulnerabilities	0.12.6	open
zeep	1 vulnerabilities	4.3.3	open
zipp	1 vulnerabilities	3.19.1	open