Security advisories

medium2024-04-16

CVE-2024-3571-langchain vulnerable to path traversal

langchain-ai/langchain · GHSA-rgp8-pm28-3759

critical2024-04-16

CVE-2024-3271-llama-index-core Command Injection vulnerability

run-llama/llama_index · GHSA-r6gp-rff2-p3hf

critical2024-04-16

CVE-2024-3573-mlflow vulnerable to Path Traversal

mlflow/mlflow · GHSA-hq88-wg7q-gp4g

medium2024-04-16

CVE-2024-3575-Cross-site Scripting (XSS) in mindsdb/mindsdb

mindsdb/mindsdb · GHSA-93c5-rj2p-w52x

high2024-04-16

CVE-2024-1594-mlflow vulnerable to Path Traversal

mlflow/mlflow · GHSA-m49c-5c52-6696

high2024-04-16

CVE-2024-1558-mlflow vulnerable to Path Traversal

mlflow/mlflow · GHSA-j62r-wxqq-f3gf

critical2024-04-16

CVE-2024-2912-Insecure deserialization in BentoML

bentoml/bentoml · GHSA-hvj5-mvw9-93j3

high2024-04-16

CVE-2024-1561-gradio vulnerable to Path Traversal

gradio-app/gradio · GHSA-g9cj-cfpp-4g2x

medium2024-04-16

CVE-2024-2260-zenml Session Fixation vulnerability

zenml-io/zenml · GHSA-g3r5-72hf-p7p2

high2024-04-16

CVE-2024-1593-mlflow vulnerable to Path Traversal

mlflow/mlflow · GHSA-f42m-mvfv-cgw5

critical2024-04-16

CVE-2024-2083-Directory traversal in zenml

zenml-io/zenml · GHSA-6h3f-43vq-53hj

high2024-04-16

CVE-2024-1560-mlflow vulnerable to Path Traversal

mlflow/mlflow · GHSA-5mvj-wmgj-7q8c

high2024-04-16

CVE-2024-1135-Request smuggling leading to endpoint restriction bypass in Gunicorn

benoitc/gunicorn · GHSA-w3h3-4rj7-4ph4

medium2024-04-16

CVE-2024-1183-gradio Server-Side Request Forgery vulnerability

gradio-app/gradio · GHSA-qh6x-j82h-vpf9

high2024-04-16

CVE-2024-1483-mlflow Path Traversal vulnerability

mlflow/mlflow · GHSA-f82r-jj5r-6g97

medium2024-04-15

CVE-2024-32036-SixLabors.ImageSharp vulnerable to data leakage

sixlabors/imagesharp · GHSA-5x7m-6737-26cr

medium2024-04-15

CVE-2024-32035-SixLabors.ImageSharp vulnerable to Memory Allocation with Excessive Size Value

sixlabors/imagesharp · GHSA-g85r-6x2q-45w7

high2024-04-15

CVE-2024-4340-sqlparse parsing heavily nested list leads to Denial of Service

andialbrecht/sqlparse · GHSA-2m57-hf25-phgg

medium2024-04-15

CVE-2024-31990-Argo CD's API server does not enforce project sourceNamespaces

argoproj/argo-cd · GHSA-2gvw-w6fj-7m3c

medium2024-04-15

CVE-2024-32884-gix-transport indirect code execution via malicious username

byron/gitoxide · GHSA-98p4-xjmm-8mfh