Tagged “pip”
CVEs tagged pip, newest first.
5542 CVEsRSS
CVE-2024-8502Critical· 9.8AgentScope Deserialization Vulnerability
AgentScope Deserialization Vulnerability
CVE-2024-8551Critical· 9.1AgentScope path traversal vulnerability in save-workflow
AgentScope path traversal vulnerability in save-workflow
CVE-2024-6829Critical· 9.1Aim External Control of File Name or Path vulnerability
Aim External Control of File Name or Path vulnerability
CVE-2024-9070Critical· 9.8BentoML deserialization vulnerability
BentoML deserialization vulnerability
GHSA-w466-2wfc-8g58High· 7.5Open WebUI has vulnerable dependency on starlette via fastapi
Open WebUI has vulnerable dependency on starlette via fastapi
CVE-2024-8769Critical· 9.1Aim path traversal in LockManager.release_locks
Aim path traversal in LockManager.release_locks
CVE-2024-8019Critical· 9.1PyTorch Lightning path traversal vulnerability
PyTorch Lightning path traversal vulnerability
CVE-2024-9052Critical· 9.8Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2024-9053Critical· 9.8vLLM allows Remote Code Execution by Pickle Deserialization via AsyncEngineRPCServer() RPC server entrypoints
vLLM allows Remote Code Execution by Pickle Deserialization via AsyncEngineRPCServer() RPC server entrypoints
CVE-2024-11041Critical· 9.8vLLM Deserialization of Untrusted Data vulnerability
vLLM Deserialization of Untrusted Data vulnerability
CVE-2024-11958Critical· 9.8LlamaIndex Retrievers Integration: DuckDBRetriever SQL Injection
LlamaIndex Retrievers Integration: DuckDBRetriever SQL Injection
CVE-2024-8613High· 8.8A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240802 allows attackers to access, copy, and delete other users' chat histories. …
A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240802 allows attackers to access, copy, and delete other users' chat histories. This issue arises due to improper handling of session data and lack of access control mechanisms, en…
CVE-2024-6577Medium· 6.3TorchServe script references S3 bucket without ensuring ownership or confirming accessibility
TorchServe script references S3 bucket without ensuring ownership or confirming accessibility
CVE-2024-7959High· 7.7Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2024-12761High· 7.5imaginAIry Denial of Service (DoS) vulnerability
imaginAIry Denial of Service (DoS) vulnerability
CVE-2024-11602High· 7.4Feast Cross-Origin Resource Sharing vulnerability
Feast Cross-Origin Resource Sharing vulnerability
CVE-2024-10549High· 7.5H2O Vulnerable to Denial of Service (DoS) via `/3/Parse` Endpoint
H2O Vulnerable to Denial of Service (DoS) via `/3/Parse` Endpoint
CVE-2024-10572High· 7.5H2O Vulnerable to Denial of Service (DoS) and File Write
H2O Vulnerable to Denial of Service (DoS) and File Write
CVE-2024-7036High· 7.5Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2024-12777Medium· 5.9Aim vulnerable to Synchronous Access of Remote Resource without Timeout
Aim vulnerable to Synchronous Access of Remote Resource without Timeout
CVE-2024-10624High· 7.5Gradio Vulnerable to Denial of Service (DoS) via Crafted HTTP Request
Gradio Vulnerable to Denial of Service (DoS) via Crafted HTTP Request
CVE-2024-12215High· 8.8Kedro allows Remote Code Execution by Pulling Micro Packages
Kedro allows Remote Code Execution by Pulling Micro Packages
CVE-2024-8238Medium· 5.9Aim Improper Access Control
Aim Improper Access Control
CVE-2024-8952Medium· 6.8composio Server-Side Request Forgery (SSRF) vulnerability
composio Server-Side Request Forgery (SSRF) vulnerability
CVE-2024-10907High· 7.5FastChat Uncontrolled Resource Consumption vulnerability
FastChat Uncontrolled Resource Consumption vulnerability
CVE-2024-6838Medium· 5.3MLflow Uncontrolled Resource Consumption vulnerability
MLflow Uncontrolled Resource Consumption vulnerability
CVE-2024-12217Medium· 5.3Gradio Path Traversal vulnerability
Gradio Path Traversal vulnerability
CVE-2024-7039High· 8.3Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2024-10648High· 8.2Gradio Vulnerable to Arbitrary File Deletion
Gradio Vulnerable to Arbitrary File Deletion
CVE-2024-6483Medium· 5.3Aim Relative Path Traversal vulnerability
Aim Relative Path Traversal vulnerability