A flaw was found in Jinja. In affected versions, an oversight in how the Jinja sandboxed environment interacts with the `|attr` filter allows an attacker who controls the content of a template to execute arbitrary Python code. To exploit t…

▾ TwilightRed Hat · Quay v3EPSS 0.51%via CSAF

CVE-2025-25362Critical· 9.8

1y ago

Spacy-LLM Server-Side Template Injection (SSTI) vulnerability

▾ Midnightspacy-llm · spacy-llmEPSS 0.80%via OSV

CVE-2025-24023Low· 3.7

1y ago

Flask-AppBuilder Observable Response Discrepancy

▾ Sunlitflask-appbuilder · flask-appbuilderEPSS 0.33%via OSV

CVE-2025-1716Critical· 9.8PoC

1y ago

picklescan before 0.0.22 only considers standard pickle file extensions in the scope for its vulnerability scan. An attacker could craft …

picklescan before 0.0.22 only considers standard pickle file extensions in the scope for its vulnerability scan. An attacker could craft a malicious model that uses Pickle and include a malicious pickle file with a non-standard file exte…

▾ Abyssalpicklescan · picklescanEPSS 1.7%via OSV

CVE-2025-1300Medium· 6.1

1y ago

CodeChecker open redirect when URL contains multiple slashes after the product name

▾ Sunlitcodechecker · codecheckerEPSS 0.27%via OSV

CVE-2025-27154High

1y ago

Spotipy's cache file, containing spotify auth token, is created with overly broad permissions

▾ Twilightspotipy · spotipyEPSS 0.61%via OSV

CVE-2025-27145Low· 3.6

1y ago

copyparty renders unsanitized filenames as HTML when user uploads empty files

▾ Sunlitcopyparty · copypartyEPSS 0.47%via OSV

CVE-2025-1403High· 8.6

1y ago

Malciously crafted QPY files can allows Remote Attackers to Cause Denial of Service in Qiskit

▾ Twilightqiskit · qiskitEPSS 0.72%via OSV

Tagged “pip”

MLflow Uncontrolled Resource Consumption vulnerability

H2O Vulnerable to Arbitrary File Overwrite via File Export

Flask-CORS vulnerable to Improper Handling of Case Sensitivity

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Aim vulnerable to Cross-Site Request Forgery

composio allows Server-Side Request Forgery (SSRF) in BROWSERTOOL

Aim Uncontrolled Resource Consumption vulnerability

SageMaker Workflow component allows possibility of MD5 hash collisions

DB-GPT vulnerable to Cross-Site Request Forgery

vLLM Allows Remote Code Execution via Mooncake Integration

vLLM denial of service via outlines unbounded cache on disk

Apache Airflow MySQL Provider is Vulnerable to SQL Injection

PostQuantum-Feldman-VSS'S Dependency Vulnerability in gmpy2 Leading to Interpreter Crash

Qiskit allows arbitrary code execution decoding QPY format versions < 13

Post-Quantum Secure Feldman's Verifiable Secret Sharing has Inadequate Fault Injection Countermeasures in `secure_redundant_execution`

Post-Quantum Secure Feldman's Verifiable Secret Sharing has Timing Side-Channels in Matrix Operations

XPixelGroup BasicSR Command Injection

Arbitrary Code Execution via Crafted Keras Config for Model Loading

Azure PromptFlow remote code execution related to Jinja templates

Django Vulnerable to Allocation of Resources Without Limits or Throttling

ray vulnerable to Insertion of Sensitive Information into Log File

jinja2: Jinja sandbox breakout through attr filter selecting format method (CVE-2025-27516)

Spacy-LLM Server-Side Template Injection (SSTI) vulnerability

Flask-AppBuilder Observable Response Discrepancy

picklescan before 0.0.22 only considers standard pickle file extensions in the scope for its vulnerability scan. An attacker could craft …

CodeChecker open redirect when URL contains multiple slashes after the product name

Spotipy's cache file, containing spotify auth token, is created with overly broad permissions

copyparty renders unsanitized filenames as HTML when user uploads empty files

Malciously crafted QPY files can allows Remote Attackers to Cause Denial of Service in Qiskit