Vulnerability DB

VULNERABILITY	AFFECTS	TYPE	PUBLISHED
H Covert Timing Channel	vllm[,0.11.0)	pip	8 Oct 2025
M Missing Authentication for Critical Function	litellm[,1.76.3)	pip	8 Oct 2025
H Incorrect Authorization	litellm[,1.77.1)	pip	8 Oct 2025
M Reliance on Untrusted Inputs in a Security Decision	litestar[,2.18.0)	pip	8 Oct 2025
M Directory Traversal	clearml[,2.0.2)	pip	7 Oct 2025
M Directory Traversal	zenml[,0.84.2)	pip	7 Oct 2025
M CRLF Injection	aioftp[,0.26.3)	pip	6 Oct 2025
L Deserialization of Untrusted Data	datachain[,0.34.2)	pip	6 Oct 2025
M Unintended Proxy or Intermediary ('Confused Deputy')	marimo[0.9.20,0.16.4)	pip	6 Oct 2025
M Cross-site Scripting (XSS)	nicegui[,3.0.0)	pip	6 Oct 2025
M SQL Injection	django[4.2,4.2.25)[5.1,5.1.13)[5.2,5.2.7)	pip	2 Oct 2025
H Relative Path Traversal	django[4.2,4.2.25)[5.1,5.1.13)[5.2,5.2.7)	pip	2 Oct 2025
M Deserialization of Untrusted Data	pyfury[0.2.0a1,]	pip	1 Oct 2025
M Deserialization of Untrusted Data	pyfory[,0.12.3)	pip	1 Oct 2025
M Improper Neutralization of Escape Characters	mkdocs-include-markdown-plugin[,7.1.8)	pip	30 Sept 2025
H Creation of Temporary File With Insecure Permissions	llama-index-core[0, 0.12.50)	pip	29 Sept 2025
M Deserialization of Untrusted Data	lazyllm[0,]	pip	29 Sept 2025
H Arbitrary Code Injection	megatron-core[,0.12.3)[0.13.0rc1, 0.13.1)	pip	29 Sept 2025
M Directory Traversal	ml-logger[0,]	pip	28 Sept 2025
M Directory Traversal	ml-logger[0,]	pip	28 Sept 2025
M Deserialization of Untrusted Data	ml-logger[0,]	pip	28 Sept 2025
C Arbitrary Code Injection	megatron-core[,0.12.3)[0.13.0rc1, 0.13.1)	pip	28 Sept 2025
C Arbitrary Code Injection	megatron-core[,0.12.3)[0.13.0rc1, 0.13.1)	pip	28 Sept 2025
H Arbitrary Code Injection	megatron-core[,0.12.3)[0.13.0rc1, 0.13.1)	pip	28 Sept 2025
M Cross-site Scripting (XSS)	llama-stack[,0.2.20)	pip	28 Sept 2025
H NULL Pointer Dereference	pymupdf[1.24.0,]	pip	26 Sept 2025
M Mismatched Memory Management Routines	ogre-python[0,]	pip	26 Sept 2025
M Heap-based Buffer Overflow	ogre-python[0,]	pip	26 Sept 2025
M NULL Pointer Dereference	ogre-python[0,]	pip	26 Sept 2025
H Information Exposure	apache-airflow-core[3.0.3,3.0.4)	pip	26 Sept 2025

APPLICATION

OPERATING SYSTEM