Tagged “pip”
CVEs tagged pip, newest first.
5542 CVEsRSS
CVE-2024-21669Critical· 9.9Hyperledger Aries Cloud Agent Python result of presentation verification not checked for LDP-VC
Hyperledger Aries Cloud Agent Python result of presentation verification not checked for LDP-VC
CVE-2023-45139High· 7.5fonttools XML External Entity Injection (XXE) Vulnerability
fonttools XML External Entity Injection (XXE) Vulnerability
CVE-2024-21644High· 7.5PoCpyload Unauthenticated Flask Configuration Leakage vulnerability
pyload Unauthenticated Flask Configuration Leakage vulnerability
CVE-2024-21645Medium· 5.3PoCpyload Log Injection vulnerability
pyload Log Injection vulnerability
CVE-2023-52323Medium· 5.9pycryptodome: side-channel leakage for OAEP decryption in PyCryptodome and pycryptodomex (CVE-2023-52323)
A flaw was found in PyCryptodome/pycryptodomex which may allow for side-channel leakage when performing OAEP decryption, which could be exploited to carry out a Manger attack.
CVE-2024-21642High· 7.5D-Tale server-side request forgery through Web uploads
D-Tale server-side request forgery through Web uploads
CVE-2023-38674Medium· 4.7PaddlePaddle floating point exception in paddle.nanmedian
PaddlePaddle floating point exception in paddle.nanmedian
CVE-2023-38676Medium· 4.7PaddlePaddle segfault in paddle.dot
PaddlePaddle segfault in paddle.dot
CVE-2023-52308Medium· 4.7PaddlePaddle floating point exception in paddle.amin
PaddlePaddle floating point exception in paddle.amin
CVE-2023-52305Medium· 4.7PaddlePaddle floating point exception in paddle.topk
PaddlePaddle floating point exception in paddle.topk
CVE-2023-52306Medium· 4.7PaddlePaddle floating point exception in paddle.lerp
PaddlePaddle floating point exception in paddle.lerp
CVE-2023-52311Critical· 9.6PaddlePaddle command injection in _wget_download
PaddlePaddle command injection in _wget_download
CVE-2023-52312Medium· 4.7PaddlePaddle nullptr dereference in paddle.crop
PaddlePaddle nullptr dereference in paddle.crop
CVE-2023-38678Medium· 4.7PaddlePaddle segfault in paddle.mode
PaddlePaddle segfault in paddle.mode
CVE-2023-38675Medium· 4.7PaddlePaddle floating point exception in paddle.linalg.matrix_rank
PaddlePaddle floating point exception in paddle.linalg.matrix_rank
CVE-2023-52310Critical· 9.6PaddlePaddle command injection in get_online_pass_interval
PaddlePaddle command injection in get_online_pass_interval
CVE-2023-52307High· 8.2PaddlePaddle stack overflow in paddle.linalg.lu_unpack
PaddlePaddle stack overflow in paddle.linalg.lu_unpack
CVE-2023-38677Medium· 4.7PaddlePaddle floating point exception in paddle.linalg.eig
PaddlePaddle floating point exception in paddle.linalg.eig
CVE-2023-52309High· 8.2PaddlePaddle heap buffer overflow in paddle.repeat_interleave
PaddlePaddle heap buffer overflow in paddle.repeat_interleave
CVE-2023-52302Medium· 4.7PaddlePaddle null pointer dereference in paddle.nextafter
PaddlePaddle null pointer dereference in paddle.nextafter
CVE-2023-52304High· 8.2PaddlePaddle stack overflow in paddle.searchsorted
PaddlePaddle stack overflow in paddle.searchsorted
CVE-2023-52314Critical· 9.6PaddlePaddle command injection in convert_shape_compare
PaddlePaddle command injection in convert_shape_compare
CVE-2023-52303Medium· 4.7PaddlePaddle segfault in paddle.put_along_axis
PaddlePaddle segfault in paddle.put_along_axis
CVE-2023-52313Medium· 4.7PaddlePaddle floating point exception in paddle.argmin and paddle.argmax
PaddlePaddle floating point exception in paddle.argmin and paddle.argmax
CVE-2023-51663Medium· 5.3Hail relies on OIDC email claims to verify the validity of a user's domain.
Hail relies on OIDC email claims to verify the validity of a user's domain.
CVE-2023-51449High· 8.6PoCGradio makes the `/file` secure against file traversal and server-side request forgery attacks
Gradio makes the `/file` secure against file traversal and server-side request forgery attacks
CVE-2023-6976High· 8.8MLflow Path Traversal Vulnerability
MLflow Path Traversal Vulnerability
CVE-2023-6977High· 7.5PoCMLflow Local File Disclosure Vulnerability
MLflow Local File Disclosure Vulnerability
CVE-2023-49736Medium· 6.5Apache Superset SQL injection vulnerability
Apache Superset SQL injection vulnerability
CVE-2023-6940High· 8.8mlflow Command Injection vulnerability
mlflow Command Injection vulnerability