Vulnerability DB

VULNERABILITY	AFFECTS	TYPE	PUBLISHED
H Deserialization of Untrusted Data	mindsdb[23.10.2.0,]	pip	13 Sept 2024
H Deserialization of Untrusted Data	mindsdb[23.10.3.0,]	pip	13 Sept 2024
H Deserialization of Untrusted Data	mindsdb[23.3.2.0,]	pip	13 Sept 2024
H Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')	mindsdb[23.11.4.4a6, 24.7.4.1)	pip	13 Sept 2024
H Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')	mindsdb[23.12.4.0,24.7.4.1)	pip	13 Sept 2024
H Improper Control of Generation of Code ('Code Injection')	refuel-autolabel[0.0.8,]	pip	13 Sept 2024
H Improper Control of Generation of Code ('Code Injection')	refuel-autolabel[0.0.8,]	pip	13 Sept 2024
H Eval Injection	mindsdb[23.10.5.0,24.7.4.1)	pip	13 Sept 2024
H Deserialization of Untrusted Data	cleanlab[2.4.0,]	pip	13 Sept 2024
H Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')	mindsdb[23.10.3.0,24.7.4.1)	pip	13 Sept 2024
H Eval Injection	mindsdb[23.10.5.0,24.7.4.1)	pip	13 Sept 2024
H Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection')	mindsdb[23.10.5.0,24.7.4.1)	pip	13 Sept 2024
M Insertion of Sensitive Information into Log File	sagemaker-training[4.7.0,4.8.0)	pip	12 Sept 2024
M Insertion of Sensitive Information Into Log File	aws-sam-cli[,1.122.0)	pip	12 Sept 2024
M Remote Code Execution (RCE)	dtale[,3.14.1)	pip	11 Sept 2024
C Improper Control of Generation of Code ('Code Injection')	pyload-ng[,0.5.0b3.dev87)	pip	10 Sept 2024
H Execution with Unnecessary Privileges	apache-airflow[,2.10.1)	pip	10 Sept 2024
H Improper Encoding or Escaping of Output	apache-airflow[,2.10.1)	pip	10 Sept 2024
C Malicious Package	netfetcher[0,]	pip	9 Sept 2024
C Malicious Package	pyfetcher[0,]	pip	9 Sept 2024
M Information Exposure	djangorestframework-simplejwt[0,]	pip	9 Sept 2024
H Information Exposure	ironic-python-agent[,9.4.2)[9.5.0,9.7.2)[9.8.0,9.11.1)[9.12.0,9.14.0)	pip	8 Sept 2024
H Information Exposure	ironic[,21.4.3)[22.0.0,23.0.2)[23.1.0,24.1.2)[25.0.0,26.1.0)	pip	8 Sept 2024
C Improper Authentication	pulpcore[0,]	pip	6 Sept 2024
H Server-side Request Forgery (SSRF)	mindsdb[,23.12.4.2)	pip	6 Sept 2024
C Malicious Package	pingdomv3[0,]	pip	5 Sept 2024
M Cross-site Scripting (XSS)	flask-multipass[,0.5.5)	pip	5 Sept 2024
M Improper Control of Generation of Code ('Code Injection')	ethyca-fides[2.19.0,2.44.0)	pip	5 Sept 2024
M Timing Attack	ethyca-fides[,2.44.0)	pip	5 Sept 2024
M Information Exposure Through Browser Caching	flask-appbuilder[,4.5.1)	pip	5 Sept 2024

APPLICATION

OPERATING SYSTEM