---
title: "Critical PyPI advisories (page 5)"
url: https://erroneo.us/security/ecosystem/pypi/5/
description: "All 451 critical GitHub-reviewed PyPI security advisories since October 2023, newest first, with vulnerable ranges and fixed versions. Page 5 of 5."
type: ecosystem
section: "Security Digest"
date_modified: 2024-03-07
publisher: erroneo.us
author: erroneo.us Security Desk
license: All rights reserved. Quote with attribution and a link.
---

# Critical PyPI advisories (page 5)

- 2024-03-07 [CVE-2024-0818](https://erroneo.us/security/cve/CVE-2024-0818/index.md) PaddlePaddle Path Traversal vulnerability — paddlepaddle <= 2.6.0 → no fix
- 2024-02-28 [CVE-2024-25128](https://erroneo.us/security/cve/CVE-2024-25128/index.md) Flask-AppBuilder vulnerable to incorrect authentication when using auth type OpenID — Flask-AppBuilder < 4.3.11 → 4.3.11
- 2024-02-26 [CVE-2024-27444](https://erroneo.us/security/cve/CVE-2024-27444/index.md) LangChain Experimental vulnerable to arbitrary code execution — langchain-experimental < 0.0.52 → 0.0.52
- 2024-02-23 [CVE-2024-27132](https://erroneo.us/security/cve/CVE-2024-27132/index.md) Cross-site Scripting in MLFlow — mlflow < 2.10.0 → 2.10.0
- 2024-02-23 [CVE-2024-27133](https://erroneo.us/security/cve/CVE-2024-27133/index.md) MLFlow Cross-site Scripting vulnerability leads to client-side Remote Code Execution — mlflow < 2.10.0 → 2.10.0
- 2024-02-21 [CVE-2024-23346](https://erroneo.us/security/cve/CVE-2024-23346/index.md) pymatgen vulnerable to arbitrary code execution when parsing a maliciously crafted JonesFaithfulTransformation transformation_string — pymatgen < 2024.2.20 → 2024.2.20
- 2024-02-20 [CVE-2024-25141](https://erroneo.us/security/cve/CVE-2024-25141/index.md) Improper Certificate Validation in apache airflow mongo hook — apache-airflow-providers-mongo < 4.0.0 → 4.0.0
- 2024-02-08 [CVE-2024-24825](https://erroneo.us/security/cve/CVE-2024-24825/index.md) DIRAC's TokenManager does not check permissions on cached tokens — DIRAC >= 8.0.0, < 8.0.37 → 8.0.37; dirac >= 0, < 8.0.37 → 8.0.37
- 2024-02-07 [CVE-2024-24811](https://erroneo.us/security/cve/CVE-2024-24811/index.md) SQLAlchemyDA unauthenticated arbitrary SQL query execution — Products.SQLAlchemyDA < 2.2 → 2.2
- 2024-02-07 [CVE-2024-24563](https://erroneo.us/security/cve/CVE-2024-24563/index.md) Vyper negative array index bounds checks — vyper < 0.4.0 → 0.4.0
- 2024-02-01 [CVE-2024-24561](https://erroneo.us/security/cve/CVE-2024-24561/index.md) Vyper's bounds check on built-in `slice()` function can be overflowed — vyper <= 0.3.10 → 0.4.0
- 2024-01-26 [CVE-2024-0937](https://erroneo.us/security/cve/CVE-2024-0937/index.md) Deserialization of untrusted data in synthcity — synthcity <= 0.2.9 → no fix
- 2024-01-23 [CVE-2023-49657](https://erroneo.us/security/cve/CVE-2023-49657/index.md) Cross-site Scripting in Apache superset — apache-superset < 3.0.3 → 3.0.3
- 2024-01-21 [CVE-2024-23731](https://erroneo.us/security/cve/CVE-2024-23731/index.md) Code execution in Embedchain — embedchain < 0.1.57 → 0.1.57
- 2024-01-21 [CVE-2024-23752](https://erroneo.us/security/cve/CVE-2024-23752/index.md) Code execution in pandasai — pandasai <= 1.5.17 → no fix
- 2024-01-21 [CVE-2024-23751](https://erroneo.us/security/cve/CVE-2024-23751/index.md) SQL injection in llama-index — llama-index <= 0.9.35 → no fix
- 2024-01-21 [CVE-2024-23730](https://erroneo.us/security/cve/CVE-2024-23730/index.md) Unsafe yaml deserialization in llama-hub — llama-hub < 0.0.67 → 0.0.67
- 2024-01-20 [CVE-2024-0521](https://erroneo.us/security/cve/CVE-2024-0521/index.md) Code Injection in paddlepaddle — paddlepaddle < 2.6.0 → 2.6.0
- 2024-01-19 [CVE-2024-22416](https://erroneo.us/security/cve/CVE-2024-22416/index.md) Cross-Site Request Forgery on any API call in pyLoad may lead to admin privilege escalation — pyload-ng < 0.5.0b3.dev78 → 0.5.0b3.dev78
- 2024-01-19 [CVE-2023-50447](https://erroneo.us/security/cve/CVE-2023-50447/index.md) Arbitrary Code Execution in Pillow — Pillow < 10.2.0 → 10.2.0
- 2024-01-09 [CVE-2024-21669](https://erroneo.us/security/cve/CVE-2024-21669/index.md) Hyperledger Aries Cloud Agent Python result of presentation verification not checked for LDP-VC — aries-cloudagent >= 0.7.0, < 0.10.5 → 0.10.5; aries-cloudagent >= 0.11.0rc1, < 0.11.0 → 0.11.0
- 2024-01-03 [CVE-2023-52311](https://erroneo.us/security/cve/CVE-2023-52311/index.md) PaddlePaddle command injection in _wget_download — PaddlePaddle < 2.6.0 → 2.6.0
- 2024-01-03 [CVE-2023-52310](https://erroneo.us/security/cve/CVE-2023-52310/index.md) PaddlePaddle command injection in get_online_pass_interval — PaddlePaddle < 2.6.0 → 2.6.0
- 2024-01-03 [CVE-2023-52314](https://erroneo.us/security/cve/CVE-2023-52314/index.md) PaddlePaddle command injection in convert_shape_compare — PaddlePaddle < 2.6.0 → 2.6.0
- 2023-12-19 [CVE-2023-6975](https://erroneo.us/security/cve/CVE-2023-6975/index.md) MLFlow Path Traversal Vulnerability — mlflow < 2.9.2 → 2.9.2
- 2023-12-19 [CVE-2023-6974](https://erroneo.us/security/cve/CVE-2023-6974/index.md) MLflow Server-Side Request Forgery (SSRF) — mlflow < 2.9.2 → 2.9.2
- 2023-12-19 [CVE-2023-6730](https://erroneo.us/security/cve/CVE-2023-6730/index.md) transformers has a Deserialization of Untrusted Data vulnerability — transformers < 4.36.0 → 4.36.0
- 2023-12-14 [CVE-2023-6572](https://erroneo.us/security/cve/CVE-2023-6572/index.md) Gradio Exposure of Sensitive Information to an Unauthorized Actor vulnerability — gradio >= 0, < 4.14.0 → 4.14.0
- 2023-12-14 [CVE-2023-6569](https://erroneo.us/security/cve/CVE-2023-6569/index.md) External Control of File Name or Path in h2oai/h2o-3 — h2o < 3.46.0.1 → 3.46.0.1
- 2023-12-14 [CVE-2023-6831](https://erroneo.us/security/cve/CVE-2023-6831/index.md) Path traversal in MLflow — mlflow < 2.9.2 → 2.9.2
- 2023-12-13 [CVE-2023-50423](https://erroneo.us/security/cve/CVE-2023-50423/index.md) Improper Privilege Management in sap-xssec — sap-xssec < 4.1.0 → 4.1.0
- 2023-11-28 [CVE-2023-48022](https://erroneo.us/security/cve/CVE-2023-48022/index.md) Ray has arbitrary code execution via jobs submission API — ray <= 2.49.2 → no fix
- 2023-11-22 [CVE-2023-37924](https://erroneo.us/security/cve/CVE-2023-37924/index.md) SQL injection in Apache Submarine — apache-submarine >= 0.7.0, < 0.8.0 → 0.8.0
- 2023-11-20 [CVE-2023-46302](https://erroneo.us/security/cve/CVE-2023-46302/index.md) Deserialization of Untrusted Data in apache-submarine — apache-submarine >= 0.7.0, < 0.8.0 → 0.8.0
- 2023-11-17 [GHSA-x563-6hqv-26mr](https://erroneo.us/security/ghsa/GHSA-x563-6hqv-26mr/index.md) Ibis PyArrow dependency allows arbitrary code execution when loading a malicious data file — ibis-framework < 7.1.0 → 7.1.0
- 2023-11-16 [CVE-2023-6019](https://erroneo.us/security/cve/CVE-2023-6019/index.md) Ray OS Command Injection vulnerability — ray < 2.8.1 → 2.8.1
- 2023-11-16 [CVE-2023-6015](https://erroneo.us/security/cve/CVE-2023-6015/index.md) MLflow allowed arbitrary files to be PUT onto the server — mlflow < 2.8.1 → 2.8.1
- 2023-11-16 [CVE-2023-6020](https://erroneo.us/security/cve/CVE-2023-6020/index.md) Ray Missing Authorization vulnerability — ray < 2.8.1 → 2.8.1
- 2023-11-16 [CVE-2023-6018](https://erroneo.us/security/cve/CVE-2023-6018/index.md) Remote Code Execution due to Full Controled File Write in mlflow — mlflow <= 2.8.1 → 2.9.2
- 2023-11-16 [CVE-2023-6014](https://erroneo.us/security/cve/CVE-2023-6014/index.md) MLflow authentication requirement bypass can allow a user to arbitrarily create an account — mlflow < 2.8.0 → 2.8.0
- 2023-11-16 [CVE-2023-6021](https://erroneo.us/security/cve/CVE-2023-6021/index.md) Ray Path Traversal vulnerability — ray < 2.8.1 → 2.8.1
- 2023-11-12 [CVE-2023-47128](https://erroneo.us/security/cve/CVE-2023-47128/index.md) piccolo SQL Injection via named transaction savepoints — piccolo < 1.1.1 → 1.1.1
- 2023-11-09 [CVE-2023-43791](https://erroneo.us/security/cve/CVE-2023-43791/index.md) Label Studio has Hardcoded Django `SECRET_KEY` that can be Abused to Forge Session Tokens — label-studio < 1.8.2 → 1.8.2
- 2023-11-09 [CVE-2023-47248](https://erroneo.us/security/cve/CVE-2023-47248/index.md) PyArrow: Arbitrary code execution when loading a malicious data file — pyarrow >= 0.14.0, < 14.0.1 → 14.0.1
- 2023-11-01 [CVE-2023-47204](https://erroneo.us/security/cve/CVE-2023-47204/index.md) transmute-core unsafe YAML deserialization vulnerability — transmute-core >= 0, < 1.13.5 → 1.13.5
- 2023-10-20 [CVE-2023-5688](https://erroneo.us/security/cve/CVE-2023-5688/index.md) modoboa Cross-site Scripting vulnerability — modoboa < 2.2.2 → 2.2.2
- 2023-10-20 [CVE-2023-32785](https://erroneo.us/security/cve/CVE-2023-32785/index.md) Langchain SQL Injection vulnerability — langchain < 0.0.247 → 0.0.247
- 2023-10-13 [CVE-2023-45853](https://erroneo.us/security/cve/CVE-2023-45853/index.md) pyminizip affected by zlib's integer overflow/heap based buffer overflow vulnerability due to vulnerable dependency — pyminizip <= 0.2.6 → no fix
- 2023-10-09 [CVE-2023-44467](https://erroneo.us/security/cve/CVE-2023-44467/index.md) langchain_experimental vulnerable to arbitrary code execution via PALChain in the python exec method — langchain-experimental <= 0.0.14 → no fix
- 2023-10-02 [CVE-2023-43654](https://erroneo.us/security/cve/CVE-2023-43654/index.md) TorchServe Server-Side Request Forgery vulnerability — torchserve >= 0.1.0, < 0.8.2 → 0.8.2
- 2023-10-02 [GHSA-4mqg-h5jf-j9m7](https://erroneo.us/security/ghsa/GHSA-4mqg-h5jf-j9m7/index.md) TorchServe Pre-Auth Remote Code Execution — torchserve >= 0.3.0, < 0.8.2 → 0.8.2

Pages: https://erroneo.us/security/ecosystem/pypi/index.md · https://erroneo.us/security/ecosystem/pypi/2/index.md · https://erroneo.us/security/ecosystem/pypi/3/index.md · https://erroneo.us/security/ecosystem/pypi/4/index.md · https://erroneo.us/security/ecosystem/pypi/5/index.md

---
Source page: https://erroneo.us/security/ecosystem/pypi/5/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt