Vulnerability DB

VULNERABILITY	AFFECTS	TYPE	PUBLISHED
M Directory Traversal	pghoard[0,]	pip	18 Dec 2024
C Out-of-bounds Write	lightgbm[0,]	pip	17 Dec 2024
M Cross-site Scripting (XSS)	dtale[,3.16.1)	pip	15 Dec 2024
H Improper Authorization	apache-superset[,4.1.0rc2)	pip	13 Dec 2024
H Directory Traversal	python-libarchive[0,]	pip	12 Dec 2024
H Authentication Bypass	djoser[,2.3.0)	pip	12 Dec 2024
C Use of Weak Hash	asu[0,]	pip	11 Dec 2024
M Improper Input Validation	sigstore[2.0.0,3.6.0)	pip	11 Dec 2024
M XML External Entity (XXE) Injection	unstructured[,0.14.3)	pip	10 Dec 2024
M SQL Injection	apache-superset[,4.1.0rc2)	pip	10 Dec 2024
H Improper Authorization	apache-superset[2.0.0,4.1.0rc3)	pip	10 Dec 2024
H Arbitrary File Write via Archive Extraction (Zip Slip)	luigi[,3.6.0)	pip	9 Dec 2024
C Malicious Embedded Code	ultralytics[8.3.41,8.3.43)[8.3.45,8.3.47)	pip	8 Dec 2024
H Allocation of Resources Without Limits or Throttling	aiohttp[3.11.0rc2,3.11.10)	pip	8 Dec 2024
M Cross-site Request Forgery (CSRF)	pyspider[0,]	pip	5 Dec 2024
C SQL Injection	django[,4.2.17)[5.0, 5.0.10)[5.1a1, 5.1.4)	pip	5 Dec 2024
H Command Injection	django[,4.2.17)[5.0, 5.0.10)[5.1a1, 5.1.4)	pip	5 Dec 2024
M Cross-site Scripting (XSS)	mobsf[0,]	pip	4 Dec 2024
H Improper Input Validation	matrix-synapse[,1.120.2)	pip	4 Dec 2024
H Allocation of Resources Without Limits or Throttling	matrix-synapse[,1.106.0)	pip	4 Dec 2024
M Missing Authentication for Critical Function	matrix-synapse[,1.106.0)	pip	4 Dec 2024
M Exposure of Sensitive System Information to an Unauthorized Control Sphere	matrix-synapse[1.113.0rc1,1.120.2)	pip	4 Dec 2024
H Arbitrary File Upload	matrix-synapse[,1.120.2)	pip	4 Dec 2024
H Allocation of Resources Without Limits or Throttling	matrix-synapse[,1.120.2)	pip	4 Dec 2024
H Allocation of Resources Without Limits or Throttling	python-multipart[,0.0.18)	pip	3 Dec 2024
L Incorrect Comparison	pyjwt[2.10.0,2.10.1)	pip	3 Dec 2024
L Incorrect Comparison	pyjwt[2.10.0,2.10.1)	pip	3 Dec 2024
H XML External Entity (XXE) Injection	youtube-transcript-api[,0.6.3)	pip	2 Dec 2024
H Race Condition	pyfftw[,0.14.0)	pip	2 Dec 2024
M Directory Traversal	preqs[,0.1.0b4)	pip	2 Dec 2024

APPLICATION

OPERATING SYSTEM