GSA Extraction

Certifi removes GLOBALTRUST root certificate

sqlparse: formatting list of tuples leads to denial of service

HuggingFace transformers vulnerable to remote code execution

Werkzeug safe_join() allows Windows special device names

Starlette has possible denial-of-service vector when parsing large files in multipart forms

aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence

Werkzeug debugger vulnerable to remote execution when interacting with attacker controlled domain

Mako vulnerable to path traversal via backslash URI on Windows in TemplateLookup

AIOHTTP has CRLF injection through multipart part content type header construction

urllib3 streaming API improperly handles highly compressed data

Jupyter Core on Windows Has Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

PyTorch susceptible to local Denial of Service

Transformers is vulnerable to ReDoS attack through its DonutProcessor class

Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)

UltraJSON: Malformed/Truncated UTF-8 Accepted and Silently Rewritten in ujson.dumps()

AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS

Tornado: Authorization header forwarded across cross-origin redirects in SimpleAsyncHTTPClient

MLflow allows an unauthenticated remote attacker to read arbitrary files from the server's filesystem

NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File Overwrite

MLflow is vulnerable to an authorization bypass affecting the AJAX endpoint

urllib3 does not control redirects in browsers and Node.js

aiohttp: HTTP/1 Pipelined Requests Queue Without Limit

aiohttp: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections

Hugging Face Transformers vulnerable to Regular Expression Denial of Service (ReDoS) in the AdamWeightDecay optimizer

mlflow Creates of Temporary File in Directory with Insecure Permissions

pip's fallback tar extraction doesn't check symbolic links point to extraction directory

LiteLLM: Authentication Bypass via Host Header Injection

Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching

LiteLLM: Privilege escalation via unrestricted proxy configuration endpoint

PyTorch: `torch.load` with `weights_only=True` leads to remote code execution

AIOHTTP vulnerable to brute-force leak of internal static file path components

pip has an interpretation conflict due to handling both concatenated tar and ZIP files as ZIP files

Hugging Face Transformers is vulnerable to ReDoS through its MarianTokenizer

MLflow: Deterministic sampling in dataset digest enables predictable collisions

setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write

Pillow has a heap buffer overflow with nested list coordinates

AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection/security bypass

aiohttp: C HTTP Parser Bypasses max_line_size for Fragmented Lines

pyasn1 has a DoS vulnerability in decoder

MLflow Has a Server-Side Request Forgery (SSRF) Vulnerability

Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix

NLTK has a Path Traversal issue

Flask session does not add `Vary: Cookie` header when accessed in some ways

AIOHTTP's unicode processing of header values could cause parsing discrepancies

HuggingFace Transformers allows for arbitrary code execution in the `Trainer` class

LiteLLM: Password hash exposure and pass-the-hash authentication bypass

AIOHTTP vulnerable to denial of service through large payloads

AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb