Security Digest · page 5 of 5
Critical PyPI advisories (page 5)
451 critical advisories for PyPI packages since October 2023, newest first. Check your project with pip-audit (or: pip show <package>).
- PaddlePaddle Path Traversal vulnerability CVE-2024-0818 CVSS 9.1 Critical
paddlepaddle<= 2.6.0 → no fix listed - Flask-AppBuilder vulnerable to incorrect authentication when using auth type OpenID CVE-2024-25128 CVSS 9.1 Critical
Flask-AppBuilder< 4.3.11 → fixed in 4.3.11 - LangChain Experimental vulnerable to arbitrary code execution CVE-2024-27444 CVSS 9.3 Critical
langchain-experimental< 0.0.52 → fixed in 0.0.52 - Cross-site Scripting in MLFlow CVE-2024-27132 CVSS 9.6 Critical
mlflow< 2.10.0 → fixed in 2.10.0 - MLFlow Cross-site Scripting vulnerability leads to client-side Remote Code Execution CVE-2024-27133 CVSS 9.6 Critical
mlflow< 2.10.0 → fixed in 2.10.0 - pymatgen vulnerable to arbitrary code execution when parsing a maliciously crafted JonesFaithfulTransformation transformation_string CVE-2024-23346 CVSS 9.3 Critical
pymatgen< 2024.2.20 → fixed in 2024.2.20 - Improper Certificate Validation in apache airflow mongo hook CVE-2024-25141 CVSS 9.1 Critical
apache-airflow-providers-mongo< 4.0.0 → fixed in 4.0.0 - DIRAC's TokenManager does not check permissions on cached tokens CVE-2024-24825 CVSS 9.1 Critical
DIRAC>= 8.0.0, < 8.0.37 → fixed in 8.0.37;dirac>= 0, < 8.0.37 → fixed in 8.0.37 - SQLAlchemyDA unauthenticated arbitrary SQL query execution CVE-2024-24811 CVSS 9.8 Critical
Products.SQLAlchemyDA< 2.2 → fixed in 2.2 - Vyper negative array index bounds checks CVE-2024-24563 CVSS 9.8 Critical
vyper< 0.4.0 → fixed in 0.4.0 - Vyper's bounds check on built-in `slice()` function can be overflowed CVE-2024-24561 CVSS 9.8 Critical
vyper<= 0.3.10 → fixed in 0.4.0 - Deserialization of untrusted data in synthcity CVE-2024-0937 CVSS 9.8 Critical
synthcity<= 0.2.9 → no fix listed - Cross-site Scripting in Apache superset CVE-2023-49657 CVSS 9.6 Critical
apache-superset< 3.0.3 → fixed in 3.0.3 - Code execution in Embedchain CVE-2024-23731 CVSS 9.8 Critical
embedchain< 0.1.57 → fixed in 0.1.57 - Code execution in pandasai CVE-2024-23752 CVSS 9.8 Critical
pandasai<= 1.5.17 → no fix listed - SQL injection in llama-index CVE-2024-23751 CVSS 9.8 Critical
llama-index<= 0.9.35 → no fix listed - Unsafe yaml deserialization in llama-hub CVE-2024-23730 CVSS 9.8 Critical
llama-hub< 0.0.67 → fixed in 0.0.67 - Code Injection in paddlepaddle CVE-2024-0521 CVSS 9.3 Critical
paddlepaddle< 2.6.0 → fixed in 2.6.0 - Cross-Site Request Forgery on any API call in pyLoad may lead to admin privilege escalation CVE-2024-22416 CVSS 9.4 Critical
pyload-ng< 0.5.0b3.dev78 → fixed in 0.5.0b3.dev78 - Arbitrary Code Execution in Pillow CVE-2023-50447 CVSS 9.3 Critical
Pillow< 10.2.0 → fixed in 10.2.0 - Hyperledger Aries Cloud Agent Python result of presentation verification not checked for LDP-VC CVE-2024-21669 CVSS 9.9 Critical
aries-cloudagent>= 0.7.0, < 0.10.5 → fixed in 0.10.5;aries-cloudagent>= 0.11.0rc1, < 0.11.0 → fixed in 0.11.0 - PaddlePaddle command injection in _wget_download CVE-2023-52311 CVSS 9.6 Critical
PaddlePaddle< 2.6.0 → fixed in 2.6.0 - PaddlePaddle command injection in get_online_pass_interval CVE-2023-52310 CVSS 9.6 Critical
PaddlePaddle< 2.6.0 → fixed in 2.6.0 - PaddlePaddle command injection in convert_shape_compare CVE-2023-52314 CVSS 9.6 Critical
PaddlePaddle< 2.6.0 → fixed in 2.6.0 - MLFlow Path Traversal Vulnerability CVE-2023-6975 CVSS 9.8 Critical
mlflow< 2.9.2 → fixed in 2.9.2 - MLflow Server-Side Request Forgery (SSRF) CVE-2023-6974 CVSS 9.8 Critical
mlflow< 2.9.2 → fixed in 2.9.2 - transformers has a Deserialization of Untrusted Data vulnerability CVE-2023-6730 CVSS 9.0 Critical
transformers< 4.36.0 → fixed in 4.36.0 - Gradio Exposure of Sensitive Information to an Unauthorized Actor vulnerability CVE-2023-6572 CVSS 9.6 Critical
gradio>= 0, < 4.14.0 → fixed in 4.14.0 - External Control of File Name or Path in h2oai/h2o-3 CVE-2023-6569 CVSS 9.3 Critical
h2o< 3.46.0.1 → fixed in 3.46.0.1 - Path traversal in MLflow CVE-2023-6831 CVSS 10.0 Critical
mlflow< 2.9.2 → fixed in 2.9.2 - Improper Privilege Management in sap-xssec CVE-2023-50423 CVSS 9.3 Critical
sap-xssec< 4.1.0 → fixed in 4.1.0 - Ray has arbitrary code execution via jobs submission API CVE-2023-48022 CVSS 9.8 Critical
ray<= 2.49.2 → no fix listed - SQL injection in Apache Submarine CVE-2023-37924 CVSS 9.8 Critical
apache-submarine>= 0.7.0, < 0.8.0 → fixed in 0.8.0 - Deserialization of Untrusted Data in apache-submarine CVE-2023-46302 CVSS 9.8 Critical
apache-submarine>= 0.7.0, < 0.8.0 → fixed in 0.8.0 - Ibis PyArrow dependency allows arbitrary code execution when loading a malicious data file GHSA-x563-6hqv-26mr
ibis-framework< 7.1.0 → fixed in 7.1.0 - Ray OS Command Injection vulnerability CVE-2023-6019 CVSS 9.8 Critical
ray< 2.8.1 → fixed in 2.8.1 - MLflow allowed arbitrary files to be PUT onto the server CVE-2023-6015 CVSS 10.0 Critical
mlflow< 2.8.1 → fixed in 2.8.1 - Ray Missing Authorization vulnerability CVE-2023-6020 CVSS 9.3 Critical
ray< 2.8.1 → fixed in 2.8.1 - Remote Code Execution due to Full Controled File Write in mlflow CVE-2023-6018 CVSS 10.0 Critical
mlflow<= 2.8.1 → fixed in 2.9.2 - MLflow authentication requirement bypass can allow a user to arbitrarily create an account CVE-2023-6014 CVSS 9.1 Critical
mlflow< 2.8.0 → fixed in 2.8.0 - Ray Path Traversal vulnerability CVE-2023-6021 CVSS 9.3 Critical
ray< 2.8.1 → fixed in 2.8.1 - piccolo SQL Injection via named transaction savepoints CVE-2023-47128 CVSS 9.3 Critical
piccolo< 1.1.1 → fixed in 1.1.1 - Label Studio has Hardcoded Django `SECRET_KEY` that can be Abused to Forge Session Tokens CVE-2023-43791 CVSS 9.8 Critical
label-studio< 1.8.2 → fixed in 1.8.2 - PyArrow: Arbitrary code execution when loading a malicious data file CVE-2023-47248 CVSS 9.3 Critical
pyarrow>= 0.14.0, < 14.0.1 → fixed in 14.0.1 - transmute-core unsafe YAML deserialization vulnerability CVE-2023-47204 CVSS 9.3 Critical
transmute-core>= 0, < 1.13.5 → fixed in 1.13.5 - modoboa Cross-site Scripting vulnerability CVE-2023-5688 CVSS 9.3 Critical
modoboa< 2.2.2 → fixed in 2.2.2 - Langchain SQL Injection vulnerability CVE-2023-32785 CVSS 9.8 Critical
langchain< 0.0.247 → fixed in 0.0.247 - pyminizip affected by zlib's integer overflow/heap based buffer overflow vulnerability due to vulnerable dependency CVE-2023-45853 CVSS 9.8 Critical
pyminizip<= 0.2.6 → no fix listed - langchain_experimental vulnerable to arbitrary code execution via PALChain in the python exec method CVE-2023-44467 CVSS 9.8 Critical
langchain-experimental<= 0.0.14 → no fix listed - TorchServe Server-Side Request Forgery vulnerability CVE-2023-43654 CVSS 9.8 Critical
torchserve>= 0.1.0, < 0.8.2 → fixed in 0.8.2 - TorchServe Pre-Auth Remote Code Execution GHSA-4mqg-h5jf-j9m7 CVSS 9.9 Critical
torchserve>= 0.3.0, < 0.8.2 → fixed in 0.8.2