Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
🏠GNA-1 (CIRCL)
Select from 82 available sources using the dropdown above.
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2025-19 |
9.8 (3.1)
|
picklescan before 0.0.22 only considers standard pickle file extensions in the scope for … | picklescan | 2025-03-03T19:15:34+00:00 | 2027-07-09T15:54:00+00:00 |
| pysec-2024-115 |
9.8 (3.1)
|
A vulnerability in the GraphCypherQAChain class of langchain-ai/langchain-community versi… | langchain-community | 2024-11-05T16:04:14Z | 2027-07-09T15:45:00Z |
| pysec-2025-102 |
6.6 (3.1)
|
Local File Inclusion in dagster._grpc.impl.get_notebook_data in Dagster 1.10.14 allows at… | dagster-ge | 2025-07-22T17:15:33.543Z | 2026-09-11T16:37:55.973297Z |
| pysec-2020-343 |
7.8 (3.1)
|
blosc2.c in Blosc C-Blosc2 through 2.0.0.beta.5 has a heap-based buffer overflow when the… | blosc2 | 2020-11-27T20:15:00Z | 2026-09-11T13:25:25.101309Z |
| pysec-2026-3979 |
5.5 (3.1)
|
libusb before version 1.0.30 contains a one-byte out-of-bounds read vulnerability in pars… | libusb | 2026-05-27T14:17:32.590Z | 2026-09-11T11:34:16.154754Z |
| pysec-2026-3978 |
5.5 (3.1)
|
libusb before version 1.0.30 contains a NULL pointer dereference vulnerability that allow… | libusb | 2026-05-27T14:16:44.170Z | 2026-09-11T11:34:16.071163Z |
| pysec-2026-3977 |
9.3 (3.1)
|
openssl_encrypt versions before 1.4.0 configure CORS with allow_origins set to wildcard a… | openssl-encrypt | 2026-08-17T11:16:42.723Z | 2026-09-11T10:36:37.964147Z |
| pysec-2026-3976 |
5.5 (3.1)
|
openssl_encrypt versions before 1.4.6 contain a key derivation flaw in sequential XOR com… | openssl-encrypt | 2026-08-17T11:16:41.427Z | 2026-09-11T10:36:37.835707Z |
| pysec-2026-3947 |
9.3 (4.0)
|
GitPython 3.1.50 fails to recognize joined short-option forms such as -u<value> (the shor… | gitpython | 2026-08-01T13:17:02.770Z | 2026-09-10T22:15:28Z |
| pysec-2026-2946 |
5.5 (3.1)
|
## Summary The approval system in PraisonAI Agents caches tool approval decisions by too… | praisonaiagents | 2026-07-13T14:36:52.273166Z | 2026-09-10T19:07:53.571489Z |
| pysec-2026-3975 |
9.1 (3.1)
|
A vulnerability in the /v1/runs API endpoint of lightning-ai/pytorch-lightning v2.2.4 all… | pytorch-lightning | 2026-09-10T16:42:38.333094Z | 2026-09-10T16:54:08.953870Z |
| pysec-2026-3974 |
9.8 (3.1)
|
A remote code execution (RCE) vulnerability exists in the lightning-ai/pytorch-lightning … | pytorch-lightning | 2026-09-10T16:42:38.315719Z | 2026-09-10T16:54:08.902721Z |
| pysec-2026-3972 |
7.8 (3.1)
|
PyTorch-Lightning versions 2.6.0 and earlier contain an insecure deserialization vulnerab… | lightning | 2026-09-10T16:42:38.605243Z | 2026-09-10T16:53:59.513247Z |
| pysec-2026-3971 |
7.5 (3.1)
|
A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cau… | lightning | 2026-09-10T16:42:38.491957Z | 2026-09-10T16:53:59.454139Z |
| pysec-2026-3970 |
9.1 (3.1)
|
In lightning-ai/pytorch-lightning version 2.3.2, a vulnerability exists in the `Lightning… | lightning | 2026-09-10T16:42:38.395281Z | 2026-09-10T16:53:59.389371Z |
| pysec-2026-3973 |
9.8 (3.1)
9.3 (4.0)
|
# Security Advisory: Compromise of PyTorch Lightning PyPI Package Versions **Published:… | lightning | 2026-09-10T16:42:38.534688Z | 2026-09-10T16:42:38.534688Z |
| pysec-2026-3968 |
|
pytorch-lightning is vulnerable to Deserialization of Untrusted Data | lightning | 2026-09-10T16:42:38.525571Z | 2026-09-10T16:42:38.525571Z |
| pysec-2026-3969 |
|
Code Injection in GitHub repository pytorchlightning/pytorch-lightning prior to 1.6.0. | lightning | 2026-09-10T16:42:38.429529Z | 2026-09-10T16:42:38.429529Z |
| pysec-2026-3967 |
8.4 (4.0)
|
PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code executio… | pytorch-lightning | 2026-07-15T18:16:48.743Z | 2026-09-10T12:38:55.732647Z |
| pysec-2026-3966 |
6.1 (3.1)
|
There is a lack of XSS escaping in the Spark History Server prior to 3.5.8 which allows a… | pyspark | 2026-09-02T11:17:20.173Z | 2026-09-10T12:38:55.649074Z |
| pysec-2026-3965 |
6.9 (4.0)
|
openssl_encrypt before 1.4.9 fails to validate the memory_cost parameter from identity fi… | openssl-encrypt | 2026-08-27T17:21:02.477Z | 2026-09-10T12:38:49.389448Z |
| pysec-2026-3964 |
8.7 (4.0)
|
openssl_encrypt (pip package openssl-encrypt) versions <= 1.4.8 do not redact the keyserv… | openssl-encrypt | 2026-08-27T17:21:01.733Z | 2026-09-10T12:38:49.334120Z |
| pysec-2026-3963 |
8.7 (4.0)
|
openssl_encrypt versions before 1.4.9 contain a weak key derivation vulnerability in the … | openssl-encrypt | 2026-08-27T17:21:00.993Z | 2026-09-10T12:38:49.279159Z |
| pysec-2026-3962 |
9.3 (4.0)
|
openssl_encrypt before 1.4.9 fails to re-derive and validate fingerprints when loading id… | openssl-encrypt | 2026-08-27T17:21:00.680Z | 2026-09-10T12:38:49.224680Z |
| pysec-2026-3961 |
8.7 (4.0)
|
openssl_encrypt versions before 1.4.9 fail to properly validate key derivation function c… | openssl-encrypt | 2026-08-27T17:21:00.217Z | 2026-09-10T12:38:49.145673Z |
| pysec-2026-3960 |
9.3 (4.0)
|
openssl-encrypt (pip package, versions <= 1.4.8) fails to sanitize filenames read from un… | openssl-encrypt | 2026-08-27T17:20:59.447Z | 2026-09-10T12:38:49.093396Z |
| pysec-2026-3959 |
8.7 (4.0)
|
openssl_encrypt versions before 1.4.9 derive the remote-pepper wrap key using unsalted HK… | openssl-encrypt | 2026-08-27T17:20:58.697Z | 2026-09-10T12:38:49.042058Z |
| pysec-2026-3958 |
6.9 (4.0)
|
In openssl_encrypt (pip package openssl-encrypt) versions <= 1.4.8, the desktop GUI passe… | openssl-encrypt | 2026-08-27T17:20:57.957Z | 2026-09-10T12:38:48.988858Z |
| pysec-2026-3957 |
5.3 (3.1)
|
openssl_encrypt versions before 1.4.9 fail to authenticate recovery-slot presence in enve… | openssl-encrypt | 2026-08-27T17:20:57.300Z | 2026-09-10T12:38:48.927488Z |
| pysec-2026-3956 |
8.7 (4.0)
|
openssl_encrypt (pip) versions <= 1.4.7 contain an information exposure vulnerability whe… | openssl-encrypt | 2026-08-17T11:16:41.293Z | 2026-09-10T12:38:48.872999Z |