Tagged “pip”
CVEs tagged pip, newest first.
4643 CVEsRSS
CVE-2024-10549High· 7.5H2O Vulnerable to Denial of Service (DoS) via `/3/Parse` Endpoint
H2O Vulnerable to Denial of Service (DoS) via `/3/Parse` Endpoint
CVE-2024-10572High· 7.5H2O Vulnerable to Denial of Service (DoS) and File Write
H2O Vulnerable to Denial of Service (DoS) and File Write
CVE-2024-7036High· 7.5Open WebUI Uncontrolled Resource Consumption vulnerability
Open WebUI Uncontrolled Resource Consumption vulnerability
CVE-2024-12777Medium· 5.9Aim vulnerable to Synchronous Access of Remote Resource without Timeout
Aim vulnerable to Synchronous Access of Remote Resource without Timeout
CVE-2024-10624High· 7.5Gradio Vulnerable to Denial of Service (DoS) via Crafted HTTP Request
Gradio Vulnerable to Denial of Service (DoS) via Crafted HTTP Request
CVE-2024-12215High· 8.8Kedro allows Remote Code Execution by Pulling Micro Packages
Kedro allows Remote Code Execution by Pulling Micro Packages
CVE-2024-8238Medium· 5.9Aim Improper Access Control
Aim Improper Access Control
CVE-2024-8952Medium· 6.8composio Server-Side Request Forgery (SSRF) vulnerability
composio Server-Side Request Forgery (SSRF) vulnerability
CVE-2024-10907High· 7.5FastChat Uncontrolled Resource Consumption vulnerability
FastChat Uncontrolled Resource Consumption vulnerability
CVE-2024-6838Medium· 5.3MLflow Uncontrolled Resource Consumption vulnerability
MLflow Uncontrolled Resource Consumption vulnerability
CVE-2024-12217Medium· 5.3Gradio Path Traversal vulnerability
Gradio Path Traversal vulnerability
CVE-2024-7039High· 8.3Open WebUI Allows Admin Deletion via API Endpoint
Open WebUI Allows Admin Deletion via API Endpoint
CVE-2024-10648High· 8.2Gradio Vulnerable to Arbitrary File Deletion
Gradio Vulnerable to Arbitrary File Deletion
CVE-2024-6483Medium· 5.3Aim Relative Path Traversal vulnerability
Aim Relative Path Traversal vulnerability
CVE-2024-7035Medium· 6.9Open WebUI Vulnerable to Cross-Site Request Forgery (CSRF)
Open WebUI Vulnerable to Cross-Site Request Forgery (CSRF)
CVE-2024-7768High· 7.5H2O Vulnerable to Denial of Service (DoS) via `/3/ImportFiles` Endpoint
H2O Vulnerable to Denial of Service (DoS) via `/3/ImportFiles` Endpoint
CVE-2024-6851High· 7.5Aim Path Traversal vulnerability
Aim Path Traversal vulnerability
CVE-2024-9229High· 7.5Quivr unauthenticated Denial of Service (DoS) via Multipart Boundary
Quivr unauthenticated Denial of Service (DoS) via Multipart Boundary
CVE-2024-12216High· 7.1GluonCV Arbitrary File Write via TarSlip
GluonCV Arbitrary File Write via TarSlip
CVE-2024-6863Medium· 6.5H2O Vulnerable to Execution of Arbitrary Files
H2O Vulnerable to Execution of Arbitrary Files
CVE-2024-7043High· 8.1Open WebUI Allows Arbitrary File Reading and Deletion
Open WebUI Allows Arbitrary File Reading and Deletion
CVE-2024-12911High· 7.1LlamaIndex vulnerable to Creation of Temporary File in Directory with Insecure Permissions
LlamaIndex vulnerable to Creation of Temporary File in Directory with Insecure Permissions
CVE-2024-6982High· 8.4LoLLMS Code Injection vulnerability
LoLLMS Code Injection vulnerability
CVE-2025-0189High· 7.5Aim Uncontrolled Resource Consumption vulnerability
Aim Uncontrolled Resource Consumption vulnerability
CVE-2024-12704High· 7.5LlamaIndex Improper Handling of Exceptional Conditions vulnerability
LlamaIndex Improper Handling of Exceptional Conditions vulnerability
CVE-2024-7044Medium· 6.8Open WebUI Vulnerable to Cross-Site Scripting (XSS) via Chat File Upload
Open WebUI Vulnerable to Cross-Site Scripting (XSS) via Chat File Upload
CVE-2024-9056High· 7.5BentoML Denial of Service (DoS) via Multipart Boundary
BentoML Denial of Service (DoS) via Multipart Boundary
CVE-2024-6827High· 7.5Gunicorn HTTP Request/Response Smuggling vulnerability
Gunicorn HTTP Request/Response Smuggling vulnerability
CVE-2024-11603High· 7.5FastChat Server-Side Request Forgery vulnerability
FastChat Server-Side Request Forgery vulnerability
CVE-2024-10188High· 7.5LiteLLM Vulnerable to Denial of Service (DoS)
LiteLLM Vulnerable to Denial of Service (DoS)