Tagged “pip”
CVEs tagged pip, newest first.
5542 CVEsRSS
CVE-2024-7035Medium· 6.9Open WebUI Vulnerable to Cross-Site Request Forgery (CSRF)
Open WebUI Vulnerable to Cross-Site Request Forgery (CSRF)
CVE-2024-7768High· 7.5H2O Vulnerable to Denial of Service (DoS) via `/3/ImportFiles` Endpoint
H2O Vulnerable to Denial of Service (DoS) via `/3/ImportFiles` Endpoint
CVE-2024-6851High· 7.5Aim Path Traversal vulnerability
Aim Path Traversal vulnerability
CVE-2024-9229High· 7.5Quivr unauthenticated Denial of Service (DoS) via Multipart Boundary
Quivr unauthenticated Denial of Service (DoS) via Multipart Boundary
CVE-2024-12216High· 7.1GluonCV Arbitrary File Write via TarSlip
GluonCV Arbitrary File Write via TarSlip
CVE-2024-6863Medium· 6.5H2O Vulnerable to Execution of Arbitrary Files
H2O Vulnerable to Execution of Arbitrary Files
CVE-2024-7043High· 8.1Open WebUI Allows Arbitrary File Reading and Deletion
Open WebUI Allows Arbitrary File Reading and Deletion
CVE-2024-12911High· 7.1LlamaIndex vulnerable to Creation of Temporary File in Directory with Insecure Permissions
LlamaIndex vulnerable to Creation of Temporary File in Directory with Insecure Permissions
CVE-2024-6982High· 8.4LoLLMS Code Injection vulnerability
LoLLMS Code Injection vulnerability
CVE-2025-0189High· 7.5Aim Uncontrolled Resource Consumption vulnerability
Aim Uncontrolled Resource Consumption vulnerability
CVE-2024-12704High· 7.5llama-index: Denial of Service (DoS) in run-llama/llama_index (CVE-2024-12704)
A flaw was found in the run-llama/llama_index. This vulnerability allows for a denial of service (DoS) attack via improper exception handling in the stream_complete method, which leads to an infinite loop in get_response_gen when the execu…
CVE-2024-7044Medium· 6.8Open WebUI Vulnerable to Cross-Site Scripting (XSS) via Chat File Upload
Open WebUI Vulnerable to Cross-Site Scripting (XSS) via Chat File Upload
CVE-2024-9056High· 7.5BentoML Denial of Service (DoS) via Multipart Boundary
BentoML Denial of Service (DoS) via Multipart Boundary
CVE-2024-6827High· 7.5Gunicorn HTTP Request/Response Smuggling vulnerability
Gunicorn HTTP Request/Response Smuggling vulnerability
CVE-2024-11603High· 7.5FastChat Server-Side Request Forgery vulnerability
FastChat Server-Side Request Forgery vulnerability
CVE-2024-10188High· 7.5LiteLLM Vulnerable to Denial of Service (DoS)
LiteLLM Vulnerable to Denial of Service (DoS)
CVE-2024-7046Medium· 4.3Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2024-7990High· 8.4Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2024-9606High· 7.5LiteLLM Reveals Portion of API Key via a Logging File
LiteLLM Reveals Portion of API Key via a Logging File
CVE-2024-8616High· 8.2H2O Vulnerable to Arbitrary File Overwrite
H2O Vulnerable to Arbitrary File Overwrite
CVE-2024-12376High· 7.5FastChat Server-Side Request Forgery vulnerability
FastChat Server-Side Request Forgery vulnerability
CVE-2024-12534High· 7.5Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2024-10110High· 7.5Aim Vulnerable to Denial of Service (DoS)
Aim Vulnerable to Denial of Service (DoS)
CVE-2025-0190High· 7.5Aim Excessive Data Query Operations in a Large Data Table vulnerability
Aim Excessive Data Query Operations in a Large Data Table vulnerability
CVE-2025-0628High· 8.1LiteLLM Has an Improper Authorization Vulnerability
LiteLLM Has an Improper Authorization Vulnerability
CVE-2024-8984High· 7.5LiteLLM Vulnerable to Denial of Service (DoS) via Crafted HTTP Request
LiteLLM Vulnerable to Denial of Service (DoS) via Crafted HTTP Request
CVE-2024-11043High· 7.5InvokeAI Uncontrolled Resource Consumption vulnerability
InvokeAI Uncontrolled Resource Consumption vulnerability
CVE-2024-8060High· 8.1Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2024-7034Medium· 6.5Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2024-12537High· 7.5PoCRejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.