Tagged “pip”
CVEs tagged pip, newest first.
5542 CVEsRSS
CVE-2023-41626Medium· 4.8Gradio arbitrary file upload vulnerability
Gradio arbitrary file upload vulnerability
CVE-2023-41267High· 7.8Apache HDFS Provider error message suggested
Apache HDFS Provider error message suggested
CVE-2023-41319High· 8.8Remote Code Execution in Custom Integration Upload
Remote Code Execution in Custom Integration Upload
CVE-2023-41050Medium· 6.8Information disclosure in AccessControl
Information disclosure in AccessControl
CVE-2023-27523Medium· 5.0Apache Superset vulnerable to improper data authorization
Apache Superset vulnerable to improper data authorization
CVE-2023-39265Medium· 6.5PoCApache Superset Improper Input Validation vulnerability
Apache Superset Improper Input Validation vulnerability
CVE-2023-37941Medium· 6.6PoCApache Superset Deserialization of Untrusted Data vulnerability
Apache Superset Deserialization of Untrusted Data vulnerability
CVE-2023-38201Medium· 6.5Keylime registrar and (untrusted) Agent can be bypassed by an attacker
Keylime registrar and (untrusted) Agent can be bypassed by an attacker
CVE-2023-39264Medium· 4.3Apache Superset may expose internal traces on REST API endpoints
Apache Superset may expose internal traces on REST API endpoints
CVE-2023-27526Medium· 4.3Apache Superset users may incorrectly create resources using the import charts feature
Apache Superset users may incorrectly create resources using the import charts feature
CVE-2023-36387Medium· 5.4Apache Superset has improper default REST API permission for Gamma users
Apache Superset has improper default REST API permission for Gamma users
CVE-2023-32672Medium· 4.3Apache Superset has incorrect authorization check
Apache Superset has incorrect authorization check
CVE-2023-36388Medium· 4.3Apache Superset Server Side Request Forgery vulnerability
Apache Superset Server Side Request Forgery vulnerability
CVE-2023-41052Medium· 5.3incorrect order of evaluation of side effects for some builtins
incorrect order of evaluation of side effects for some builtins
CVE-2023-41057Low· 3.3Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in hyper-bump-it
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in hyper-bump-it
CVE-2023-40590High· 7.8GitPython untrusted search path on Windows systems leading to arbitrary code execution
GitPython untrusted search path on Windows systems leading to arbitrary code execution
CVE-2023-39968Medium· 6.1Open Redirect Vulnerability in jupyter-server
Open Redirect Vulnerability in jupyter-server
CVE-2023-40170Medium· 4.6cross-site inclusion (XSSI) of files in jupyter-server
cross-site inclusion (XSSI) of files in jupyter-server
CVE-2023-27604High· 8.8Airflow Sqoop Provider RCE Vulnerability
Airflow Sqoop Provider RCE Vulnerability
CVE-2023-40587Medium· 5.3Pyramid static view path traversal up one directory
Pyramid static view path traversal up one directory
CVE-2023-39441Medium· 5.9Apache Airflow missing Certificate Validation
Apache Airflow missing Certificate Validation
CVE-2023-39660Highpandasai vulnerable to prompt injection
pandasai vulnerable to prompt injection
CVE-2023-40272High· 7.5Apache Airflow Spark Provider Improper Input Validation vulnerability
Apache Airflow Spark Provider Improper Input Validation vulnerability
CVE-2023-40024Medium· 6.1Scancode.io Reflected Cross-Site Scripting (XSS) in license endpoint
Scancode.io Reflected Cross-Site Scripting (XSS) in license endpoint
CVE-2023-39553High· 7.5apache-airflow-providers-apache-drill Improper Input Validation vulnerability
apache-airflow-providers-apache-drill Improper Input Validation vulnerability
CVE-2023-27506Medium· 5.5Authenticated Local Privilege Escalation vulnerability in Intel Optimization for Tensorflow
Authenticated Local Privilege Escalation vulnerability in Intel Optimization for Tensorflow
CVE-2020-35141High· 7.5FaucetSDN Ryu Denial of Service Vulnerability
FaucetSDN Ryu Denial of Service Vulnerability
CVE-2020-35139High· 7.5FaucetSDN Ryu Denial of Service Vulnerability
FaucetSDN Ryu Denial of Service Vulnerability
CVE-2023-39363High· 8.7Vyper has incorrectly allocated named re-entrancy locks
Vyper has incorrectly allocated named re-entrancy locks
CVE-2023-39531Medium· 6.5Sentry vulnerable to incorrect credential validation on OAuth token requests
Sentry vulnerable to incorrect credential validation on OAuth token requests