Tagged “pip”
CVEs tagged pip, newest first.
5541 CVEsRSS
CVE-2025-30370High· 7.4jupyterlab-git has a command injection vulnerability in "Open Git Repository in Terminal"
jupyterlab-git has a command injection vulnerability in "Open Git Repository in Terminal"
CVE-2025-3160Low· 3.3A vulnerability has been found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This vulnerability affects the fu…
A vulnerability has been found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This vulnerability affects the function Assimp::SceneCombiner::AddNodeHashes of the file code/Common/SceneCombiner.cpp of the compone…
CVE-2025-3159High· 7.8A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. This affects the function Assimp:…
A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. This affects the function Assimp::ASE::Parser::ParseLV4MeshBonesVertices of the file code/AssetLib/ASE/ASEParser.cpp of the component…
CVE-2025-3163Medium· 5.3InternLM LMDeploy code injection vulnerability
InternLM LMDeploy code injection vulnerability
CVE-2025-3162Medium· 5.3LMDeploy Improper Input Validation Vulnerability
LMDeploy Improper Input Validation Vulnerability
CVE-2025-3016Medium· 6.5A vulnerability classified as problematic was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affects the function As…
A vulnerability classified as problematic was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affects the function Assimp::MDLImporter::ParseTextureColorData of the file code/AssetLib/MDL/MDLMaterialLoader.cpp of the …
CVE-2025-3015High· 8.8A vulnerability classified as critical has been found in Open Asset Import Library Assimp 5.4.3. This affects the function Assimp::ASEImp…
A vulnerability classified as critical has been found in Open Asset Import Library Assimp 5.4.3. This affects the function Assimp::ASEImporter::BuildUniqueRepresentation of the file code/AssetLib/ASE/ASELoader.cpp of the component ASE Fi…
CVE-2025-3001NoneA vulnerability classified as critical was found in PyTorch 2.6.0. This vulnerability affects the function torch.lstm_cell. The manipulat…
A vulnerability classified as critical was found in PyTorch 2.6.0. This vulnerability affects the function torch.lstm_cell. The manipulation leads to memory corruption. The attack needs to be approached locally. The exploit has been disc…
CVE-2025-3000Medium· 5.3PyTorch is vulnerable to memory corruption through its torch.jit.script function
PyTorch is vulnerable to memory corruption through its torch.jit.script function
CVE-2025-2999NoneA vulnerability was found in PyTorch 2.6.0. It has been rated as critical. Affected by this issue is the function torch.nn.utils.rnn.unpa…
A vulnerability was found in PyTorch 2.6.0. It has been rated as critical. Affected by this issue is the function torch.nn.utils.rnn.unpack_sequence. The manipulation leads to memory corruption. Attacking locally is a requirement. The ex…
CVE-2025-3047Medium· 6.5PoCAWS SAM CLI Path Traversal allows file copy to build container
AWS SAM CLI Path Traversal allows file copy to build container
CVE-2025-3048Medium· 6.5AWS SAM CLI Path Traversal allows file copy to local cache
AWS SAM CLI Path Traversal allows file copy to local cache
CVE-2025-2953Low· 3.3PyTorch susceptible to local Denial of Service
PyTorch susceptible to local Denial of Service
CVE-2025-30355High· 7.1Synapse vulnerable to federation denial of service via malformed events
Synapse vulnerable to federation denial of service via malformed events
CVE-2025-30358High· 8.1Mesop Class Pollution vulnerability leads to DoS and Jailbreak attacks
Mesop Class Pollution vulnerability leads to DoS and Jailbreak attacks
CVE-2025-30217MediumFrappe has possibility of SQL injection due to improper validations
Frappe has possibility of SQL injection due to improper validations
CVE-2025-30213MediumFrappe has Possibility of Remote Code Execution due to improper validation
Frappe has Possibility of Remote Code Execution due to improper validation
CVE-2025-30214HighFrappe vulnerable to information disclosure leading to account takeover
Frappe vulnerable to information disclosure leading to account takeover
CVE-2025-30212MediumFrappe has possibility of SQL injection due to improper validations
Frappe has possibility of SQL injection due to improper validations
CVE-2025-2592High· 8.8A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3. This issue affects the funct…
A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp 5.4.3. This issue affects the function CSMImporter::InternReadFile of the file code/AssetLib/CSM/CSMLoader.cpp. The manipulation leads …
CVE-2024-10553Critical· 9.8H2O Deserialization of Untrusted Data Vulnerability
H2O Deserialization of Untrusted Data Vulnerability
CVE-2024-11042Critical· 9.1PoCInvokeAI Arbitrary File Deletion vulnerability
InvokeAI Arbitrary File Deletion vulnerability
CVE-2024-10190Critical· 9.8Horovod Vulnerable to Command Injection
Horovod Vulnerable to Command Injection
CVE-2024-10902Critical· 9.1DB-GPT vulnerable to Arbitrary File Upload with Path Traversal
DB-GPT vulnerable to Arbitrary File Upload with Path Traversal
CVE-2024-10831Critical· 9.1DB-GPT Absolute Path Traversal vulnerability
DB-GPT Absolute Path Traversal vulnerability
CVE-2024-10833Critical· 9.1DB-GPT Absolute Path Traversal in knowledge/{space_name}/document/upload
DB-GPT Absolute Path Traversal in knowledge/{space_name}/document/upload
CVE-2024-10901Critical· 9.1DB-GPT Arbitrary File Write vulnerability
DB-GPT Arbitrary File Write vulnerability
CVE-2024-10835Critical· 9.1DB-GPT is vulnerable to SQL Injection attacks from unauthenticated users
DB-GPT is vulnerable to SQL Injection attacks from unauthenticated users
CVE-2024-8537Critical· 9.1AgentScope path traversal vulnerability
AgentScope path traversal vulnerability
CVE-2024-8502Critical· 9.8AgentScope Deserialization Vulnerability
AgentScope Deserialization Vulnerability