Retrieval Evaluation

Certifi removes GLOBALTRUST root certificate

fsspec: Server-Side Template Injection in ReferenceFileSystem leads to Remote Code Execution

HuggingFace transformers vulnerable to remote code execution

Hydra: hydra.utils.instantiate with untrusted config can lead to code execution

aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence

NLTK network URL validation permits SSRF to RFC 6598 shared-address-space hosts

AIOHTTP has CRLF injection through multipart part content type header construction

Soup Sieve has Memory Exhaustion via Large Comma-Separated Selector Lists

urllib3 streaming API improperly handles highly compressed data

PyTorch susceptible to local Denial of Service

Hugging Face Datasets folder-based builders allow path traversal through file_name metadata

Transformers is vulnerable to ReDoS attack through its DonutProcessor class

Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)

NLTK: Corpus Reader Sandbox Bypass

NLTK: SSRF Fail-Open in validate_network_url() via DNS Resolution Failure

NLTK: Symlink-based arbitrary file read in IPIPANCorpusReader, bypasses nltk.pathsec entirely

AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS

Marshmallow has DoS in Schema.load(many)

Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading

NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File Overwrite

urllib3 does not control redirects in browsers and Node.js

aiohttp: HTTP/1 Pipelined Requests Queue Without Limit

aiohttp: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections

Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer

Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path

pydantic-settings: NestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing secrets_dir_max_size

Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching

PyTorch: `torch.load` with `weights_only=True` leads to remote code execution

AIOHTTP vulnerable to brute-force leak of internal static file path components

Multidict: Reference leak in CIMultiDict/MultiDict items-view union and subtraction

Banks: Symlink traversal and arbitrary file disclosure/overwrite in DirectoryPromptRegistry

NLTK: Stable FrameNet and NKJP readers parse outside-root XML

virtualenv Has TOCTOU Vulnerabilities in Directory Creation

Hugging Face Transformers is vulnerable to ReDoS through its MarianTokenizer

NLTK AllowlistUnpickler dotted-name validation bypass allows remote code execution

AnyIO process-pool workers can block indefinitely on undrained stderr

setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write

Python-Markdown has an Uncaught Exception

NLTK: Missing Post-Download Integrity Verification Allows Malicious Package Injection

Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`

Pillow has a heap buffer overflow with nested list coordinates

Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)

AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection/security bypass

aiohttp: C HTTP Parser Bypasses max_line_size for Fragmented Lines

pyasn1 has a DoS vulnerability in decoder

Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix

NLTK has a Path Traversal issue

AIOHTTP's unicode processing of header values could cause parsing discrepancies