Tagged “pip”
CVEs tagged pip, newest first.
5542 CVEsRSS
CVE-2024-10713High· 7.5HyperLPR Denial of Service vulnerability
HyperLPR Denial of Service vulnerability
CVE-2024-7045Medium· 4.3Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2024-8053High· 7.5Open WebUI lacks authentication for the `api/v1/utils/pdf` endpoint
Open WebUI lacks authentication for the `api/v1/utils/pdf` endpoint
CVE-2024-8020High· 7.5PyTorch Lightning denial of service vulnerability
PyTorch Lightning denial of service vulnerability
CVE-2025-1473Medium· 5.4MLflow Cross-Site Request Forgery (CSRF) vulnerability
MLflow Cross-Site Request Forgery (CSRF) vulnerability
CVE-2024-6844Medium· 5.3Flask-CORS allows for inconsistent CORS matching
Flask-CORS allows for inconsistent CORS matching
CVE-2024-10830High· 8.2DB-GPT Path Traversal vulnerability
DB-GPT Path Traversal vulnerability
CVE-2025-0330High· 7.5LiteLLM Has a Leakage of Langfuse API Keys
LiteLLM Has a Leakage of Langfuse API Keys
CVE-2024-7806High· 8.0Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2024-10569High· 7.5Gradio Vulnerable to Denial of Service (DoS) via Crafted Zip Bomb
Gradio Vulnerable to Denial of Service (DoS) via Crafted Zip Bomb
CVE-2024-8021Medium· 5.4PoCGradio Vulnerable to Open Redirect
Gradio Vulnerable to Open Redirect
CVE-2024-6839Medium· 4.3Flask-CORS improper regex path matching vulnerability
Flask-CORS improper regex path matching vulnerability
CVE-2024-10550High· 7.5H2O Vulnerable to Denial of Service (DoS) via `/3/ParseSetup` Endpoint
H2O Vulnerable to Denial of Service (DoS) via `/3/ParseSetup` Endpoint
CVE-2024-10912High· 7.5FastChat Denial of Service vulnerability
FastChat Denial of Service vulnerability
CVE-2024-10908Medium· 6.1PoCFastChat open redirect vulnerability
FastChat open redirect vulnerability
CVE-2024-9701Critical· 9.8Kedro deserialization vulnerability
Kedro deserialization vulnerability
CVE-2024-10829High· 7.5PoCDB-GPT Uncontrolled Resource Consumption vulnerability
DB-GPT Uncontrolled Resource Consumption vulnerability
CVE-2024-8061High· 7.5Aim allows denial of service due to no timeouts for some tracking server endpoints
Aim allows denial of service due to no timeouts for some tracking server endpoints
CVE-2024-7765High· 7.5H2O Vulnerable to Denial of Service (DoS) via Large GZIP Parsing
H2O Vulnerable to Denial of Service (DoS) via Large GZIP Parsing
CVE-2024-12720Medium· 5.3Transformers Regular Expression Denial of Service (ReDoS) vulnerability
Transformers Regular Expression Denial of Service (ReDoS) vulnerability
CVE-2024-8556Medium· 6.1AgentScope stored cross-site scripting (XSS) vulnerability
AgentScope stored cross-site scripting (XSS) vulnerability
CVE-2024-10821High· 7.5PoCInvokeAI has Denial of Service (DoS) vulnerability in `/api/v1/images/upload`
InvokeAI has Denial of Service (DoS) vulnerability in `/api/v1/images/upload`
CVE-2024-8953High· 7.2Composio Eval Injection Vulnerability
Composio Eval Injection Vulnerability
CVE-2024-7983High· 7.5Open WebUI denial of service through endpoint for converting markdown
Open WebUI denial of service through endpoint for converting markdown
CVE-2024-8966High· 7.5Gradio DOS in multipart boundry while uploading the file
Gradio DOS in multipart boundry while uploading the file
CVE-2024-10940Medium· 5.3langchain-core allows unauthorized users to read arbitrary files from the host file system
langchain-core allows unauthorized users to read arbitrary files from the host file system
CVE-2024-8062High· 7.5H2O Vulnerable to Denial of Service (DoS) via `HEAD` Request
H2O Vulnerable to Denial of Service (DoS) via `HEAD` Request
CVE-2024-6825High· 8.8LiteLLM Vulnerable to Remote Code Execution (RCE)
LiteLLM Vulnerable to Remote Code Execution (RCE)
CVE-2024-8183High· 7.6Prefect CORS (Cross-Origin Resource Sharing) misconfiguration
Prefect CORS (Cross-Origin Resource Sharing) misconfiguration
CVE-2024-8859High· 7.5PoCMLflow has a Local File Read/Path Traversal in dbfs
MLflow has a Local File Read/Path Traversal in dbfs