Tagged “pip”
CVEs tagged pip, newest first.
5542 CVEsRSS
CVE-2023-35797Critical· 9.8Apache Airflow Hive Provider Beeline remote code execution with Principal
Apache Airflow Hive Provider Beeline remote code execution with Principal
CVE-2023-37365Medium· 6.5hnswlib Double Free vulnerability
hnswlib Double Free vulnerability
CVE-2023-36810Medium· 6.2PyPDF2 quadratic runtime with malformed PDF missing xref marker
PyPDF2 quadratic runtime with malformed PDF missing xref marker
CVE-2023-36807Medium· 6.2PyPDF2 vulnerable to possible Infinite Loop when reading malformed objects
PyPDF2 vulnerable to possible Infinite Loop when reading malformed objects
CVE-2023-36464Medium· 6.2pypdf and PyPDF2 possible Infinite Loop when a comment isn't followed by a character
pypdf and PyPDF2 possible Infinite Loop when a comment isn't followed by a character
CVE-2023-22886High· 8.8Apache Airflow JDBC Provider Improper Input Validation vulnerability
Apache Airflow JDBC Provider Improper Input Validation vulnerability
CVE-2023-35798Medium· 4.3Apache Airflow ODBC Provider, Apache Airflow MSSQL Provider Improper Input Validation vulnerability
Apache Airflow ODBC Provider, Apache Airflow MSSQL Provider Improper Input Validation vulnerability
CVE-2023-34395High· 7.8Apache Airflow ODBC Provider Argument Injection vulnerability
Apache Airflow ODBC Provider Argument Injection vulnerability
GHSA-hj8m-9fhf-v7jpCritical· 10.0fief-server Server-Side Template Injection vulnerability
fief-server Server-Side Template Injection vulnerability
CVE-2023-35932High· 7.1jcvi vulnerable to Configuration Injection due to unsanitized user input
jcvi vulnerable to Configuration Injection due to unsanitized user input
CVE-2023-34239High· 7.3Gradio vulnerable to arbitrary file read and proxying of arbitrary URLs
Gradio vulnerable to arbitrary file read and proxying of arbitrary URLs
CVE-2023-32682Medium· 5.4Synapse has improper checks for deactivated users during login
Synapse has improper checks for deactivated users during login
CVE-2023-33977High· 8.1PoCkiwitcms vulnerable to stored cross-site scripting via unrestricted file upload
kiwitcms vulnerable to stored cross-site scripting via unrestricted file upload
CVE-2023-33733High· 7.8PoCReportlab vulnerable to remote code execution
Reportlab vulnerable to remote code execution
GHSA-5cpq-8wj7-hf2vLowVulnerable OpenSSL included in cryptography wheels
Vulnerable OpenSSL included in cryptography wheels
CVE-2023-2970Low· 3.5MindSpore vulnerable to memory corruption
MindSpore vulnerable to memory corruption
CVE-2023-32321Critical· 9.8Ckan remote code execution and private information access via crafted resource ids
Ckan remote code execution and private information access via crafted resource ids
CVE-2023-33185Medium· 4.6Incorrect signature verification in django-ses
Incorrect signature verification in django-ses
CVE-2023-32681Medium· 6.1PoCUnintended leak of Proxy-Authorization header in requests
Unintended leak of Proxy-Authorization header in requests
CVE-2023-32686Medium· 5.4kiwitcms vulnerable to stored XSS via unrestricted files upload
kiwitcms vulnerable to stored XSS via unrestricted files upload
CVE-2023-29159Low· 3.7Starlette has Path Traversal vulnerability in StaticFiles
Starlette has Path Traversal vulnerability in StaticFiles
CVE-2023-32309High· 7.5PoCAny file can be included with the pymdown-snippets extension
Any file can be included with the pymdown-snippets extension
CVE-2023-32758High· 7.5git-url-parse Regular Expression Denial of Service
git-url-parse Regular Expression Denial of Service
CVE-2023-32059High· 7.5Vyper vulnerable to incorrect ordering of arguments for kwargs passed to internal calls
Vyper vulnerable to incorrect ordering of arguments for kwargs passed to internal calls
CVE-2023-32058High· 7.5Vyper vulnerable to integer overflow in loop
Vyper vulnerable to integer overflow in loop
CVE-2023-31146High· 7.5Vyper vulnerable to OOB DynArray access when array is on both LHS and RHS of an assignment
Vyper vulnerable to OOB DynArray access when array is on both LHS and RHS of an assignment
CVE-2023-30837High· 7.5vyper vulnerable to storage allocator overflow
vyper vulnerable to storage allocator overflow
CVE-2023-30861High· 7.5PoCFlask vulnerable to possible disclosure of permanent session cookie due to missing Vary: Cookie header
Flask vulnerable to possible disclosure of permanent session cookie due to missing Vary: Cookie header
CVE-2023-30629High· 7.5Incorrect success value returned in vyper
Incorrect success value returned in vyper
CVE-2023-30613High· 7.7Unrestricted file upload in kiwi TCMS
Unrestricted file upload in kiwi TCMS