A command injection vulnerability exists in the gradio-app/gradio repository, specifically within the 'test-functional.yml' workflow. The vulnerability arises due to improper neutralization of special elements used in a command, allowing…

▾ Abyssalgradio · gradioEPSS 1.7%via OSV

CVE-2024-5154High· 8.1

2y ago

malicious container creates symlink "mtab" on the host External

▾ Twilightcri-o · github.com/cri-o/cri-oEPSS 1.2%via OSV

Tagged “osv”

Globus `identity_provider` restriction ignored when used with `allow_all` in JupyterHub 5.0

Traefik has unexpected behavior with IPv4-mapped IPv6 addresses

document-merge-service vulnerable to Remote Code Execution via Server-Side Template Injection

Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability

go-grpc-compression has a zstd decompression bombing vulnerability

`docker cp` allows unexpected chmod of host files in Moby Docker Engine

Docker CLI leaks private registry credentials to registry-1.docker.io

zenml-io/zenml does not expire the session after password reset

ebookmeta XML External Entity vulnerability

Unauthenticated Access to sensitive settings in Argo CD

Argo-cd authenticated users can enumerate clusters by name

Tornado has a CRLF injection in CurlAsyncHTTPClient headers

scikit-learn sensitive data leakage vulnerability

Jupyter server on Windows discloses Windows user password hash

Remote code execution in pytorch lightning

Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') in tornado

Denial of service in langchain-community

Arbitrary system path lookup in h20

Server-Side Request Forgery in langchain-community.retrievers.web_research.WebResearchRetriever

SQL injection in litellm

Server-Side Request Forgery in gradio

SQL injection in litellm

Undefined Behavior in mlflow

Arbitrary file deletion in litellm

LoLLMS Path Traversal vulnerability

Traefik vulnerable to GO issue allowing malformed DNS message to cause infinite loop in github.com/traefik/traefik

Traefik affected by HTTP/2 CONTINUATION flood in net/http in github.com/traefik/traefik

PyMongo Out-of-bounds Read in the bson module

A command injection vulnerability exists in the gradio-app/gradio repository, specifically within the 'test-functional.yml' workflow. The…

malicious container creates symlink "mtab" on the host External