Vulnerability DB

VULNERABILITY	AFFECTS	TYPE	PUBLISHED
H Arbitrary Code Injection	smolagents[,1.17.0)	pip	27 Jul 2025
H Insufficient Type Distinction	skops[,0.12.0)	pip	27 Jul 2025
H Insufficient Type Distinction	skops[,0.12.0)	pip	27 Jul 2025
C Relative Path Traversal	assemblyline-service-client[,4.6.0.11)[4.6.1.dev0,4.6.1.dev138)	pip	27 Jul 2025
M Command Injection	calibreweb[0,]	pip	25 Jul 2025
M Regular Expression Denial of Service (ReDoS)	calibreweb[0,]	pip	25 Jul 2025
M Regular Expression Denial of Service (ReDoS)	fastapi-guard[,3.0.2)	pip	24 Jul 2025
M Cross-site Scripting (XSS)	mezzanine[,6.1.1)	pip	24 Jul 2025
M SQL Injection	airda[0,]	pip	23 Jul 2025
H Command Injection	yt-dlp[,2025.7.21)	pip	23 Jul 2025
H Cross-site Scripting (XSS)	cadwyn[,5.4.3)	pip	23 Jul 2025
H Directory Traversal	aim[0,]	pip	23 Jul 2025
M Cross-site Scripting (XSS)	aim[0,]	pip	23 Jul 2025
H Directory Traversal	dagster[,1.10.16)	pip	23 Jul 2025
M Directory Traversal	onnx[0,]	pip	23 Jul 2025
M Cross-site Scripting (XSS)	webssh[,1.6.3)	pip	22 Jul 2025
M Allocation of Resources Without Limits or Throttling	starlette[,0.47.2)	pip	22 Jul 2025
C Improper Preservation of Permissions	pyload-ng[,0.5.0b3.dev90)	pip	21 Jul 2025
H Information Exposure	lollms[0,]	pip	21 Jul 2025
M Allocation of Resources Without Limits or Throttling	libp2p[,0.2.3)	pip	20 Jul 2025
M Information Exposure	indico[2.2,3.3.7)	pip	20 Jul 2025
H External Control of File Name or Path	dbgpt[,0.7.0)	pip	20 Jul 2025
H SQL Injection	dbgpt[,0.7.1)	pip	20 Jul 2025
H Server-side Request Forgery (SSRF)	mobsf[,3.9.7)	pip	20 Jul 2025
M Cross-site Scripting (XSS)	roundup[,2.5.0)	pip	17 Jul 2025
H HTTP Request Smuggling	aiohttp[,3.12.14)	pip	15 Jul 2025
H User Impersonation	django-tenant-users[,2.1.0)	pip	14 Jul 2025
H Uncaught Exception	mcp[,1.9.4)	pip	14 Jul 2025
H Uncaught Exception	mcp[,1.10.0)	pip	14 Jul 2025
M Directory Traversal	lightrag-hku[0,1.4.0)	pip	14 Jul 2025

APPLICATION

OPERATING SYSTEM