p PatchFirst

PatchFirst · Свежие уязвимости

Python: уязвимости стека · Страница 149

За последние 30 дней в Python опубликовано уязвимостей: 354; в каталоге KEV: 1.

RSS ↗ JSON ↗
Фильтры уязвимостей
Python

Уязвимостей: 7137

  1. CVE-2025-61677

    Низкий · CVSS 2.5EPSS 0,17%Есть исправление

    DataChain: Deserialization of Untrusted Data from Environment Variables

    DataChain is a Python-based AI-data warehouse for transforming and analyzing unstructured data. Versions 0.34.1 and below allow for deseriaization of untrusted data because of the way the DataChain library reads serialized objects from environment variables (such as DATACHAIN__METASTORE and DATACHAIN__WAREHOUSE) in the loader.py module. An attacker with the ability to set these environment variables can trigger code execution when the application loads. This issue is fixed in version 0.34.2.

    datachain datachainPython
    • Обновитесь до 0.34.2
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  2. CVE-2025-53354

    Средний · CVSS 6.1EPSS 0,2%Есть исправление

    NiceGUI is vulnerable to Reflected XSS attack

    NiceGUI is a Python-based UI framework. Versions 2.24.2 and below are at risk for Cross-Site Scripting (XSS) when developers render unescaped user input into the DOM using ui.html(). NiceGUI did not enforce HTML or JavaScript sanitization, so applications that directly combine components like ui.input() with ui.html() or ui.chat_message with HTML content without escaping may allow attackers to execute arbitrary JavaScript in the user’s browser. Applications that do not pass untrusted input into ui.html() are not affected. This issue is fixed in version 3.0.0.

    nicegui niceguiPython
    • Обновитесь до 3.0.0
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  3. CVE-2025-60787

    Высокий · CVSS 7.2EPSS 18,46%Публичный эксплойтЕсть исправление

    CVE-2025-60787

    MotionEye v0.43.1b4 and before is vulnerable to OS Command Injection in configuration parameters such as image_file_name. Unsanitized user input is written to Motion configuration files, allowing remote authenticated attackers with admin access to achieve code execution when Motion is restarted.

    n/a motioneyePython
    • Обновитесь до 0.43.1b5
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗

  4. CVE-2025-61587

    Низкий · CVSS 2.1EPSS 0,39%Есть исправление

    Weblate integration with Anubis can lead to Open Redirect via redir parameter

    Weblate is a web based localization tool. An open redirect exists in versions 5.13.2 and below via the redir parameter on .within.website when Weblate is configured with Anubis and REDIRECT_DOMAINS is not set. An attacker can craft a URL on the legitimate domain that redirects a victim to an attacker-controlled site. The redirect can also be used to initiate drive-by downloads (redirecting to a URL that serves a malicious file), increasing the risk to end users. This issue is fixed in version 5.13.3.

    weblate weblatePython
    • Обновитесь до 5.13.3
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  5. GHSA-xjv7-6w92-42r7

    Средний · CVSS 6.9Есть исправление

    marimo vulnerable to proxy abuse of /mpl/{port}/

    ### Summary The `/mpl/<port>/<route>` endpoint, which is accessible without authentication on default Marimo installations allows for external attackers to reach internal services and arbitrary ports. ### Details From our understanding, this route is used internally to provide access to interactive matplotlib visualizations. [marimo/marimo/_server/main.py at main · marimo-team/marimo](https://github.com/marimo-team/marimo/blob/main/marimo/_server/main.py) This endpoint functions as an unauthenticated proxy, allowing an attacker to connect to any service running on the local machine via the specified `<port>` and `<route>`. The existence

    marimoPython
    • Обновитесь до 0.16.4
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  6. CVE-2025-61622

    Критический · CVSS 9.8EPSS 45,12%Есть исправление

    Apache Fory, Apache Fory: Python RCE via unguarded pickle fallback serializer in pyfory

    Deserialization of untrusted data in python in pyfory versions 0.12.0 through 0.12.2, or the legacy pyfury versions from 0.1.0 through 0.10.3: allows arbitrary code execution. An application is vulnerable if it reads pyfory serialized data from untrusted sources. An attacker can craft a data stream that selects pickle-fallback serializer during deserialization, leading to the execution of `pickle.loads`, which is vulnerable to remote code execution. Users are recommended to upgrade to pyfory version 0.12.3 or later, which has removed pickle fallback serializer and thus fixes this issue.

    apache fory apache fory pyfory pyfuryPython
    • Обновитесь до 0.12.3
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  7. CVE-2025-59682

    Низкий · CVSS 3.1EPSS 0,93%Есть исправление

    CVE-2025-59682

    An issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13, and 5.2 before 5.2.7. The django.utils.archive.extract() function, used by the "startapp --template" and "startproject --template" commands, allows partial directory traversal via an archive with file paths sharing a common prefix with the target directory.

    django python-django python-django python-django django django django django python-django python-django python-django python-djangoОперационные системы Python
    • Обновитесь до 1.6.11-0ubuntu1.3+esm8
    • Обновитесь до 1.8.7-1ubuntu5.15+esm9
    • Обновитесь до 1:1.11.11-1ubuntu1.21+esm12
    • Обновитесь до 2:2.2.12-1ubuntu0.29+esm4
    • Обновитесь до 2:3.2.12-2ubuntu1.22
    • Обновитесь до 3:3.2.25-0+deb12u1
    • Обновитесь до 3:4.2.11-1ubuntu1.11
    • Обновитесь до 3:4.2.25-1
    • Обновитесь до 3:4.2.27-0+deb13u1
    • Обновитесь до 3:5.2.4-1ubuntu2
    • Обновитесь до 4.2.25
    • Обновитесь до 5.1.13
    • Обновитесь до 5.2.7
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  8. CVE-2025-59681

    Высокий · CVSS 7.1EPSS 0,64%Есть исправление

    CVE-2025-59681

    An issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13, and 5.2 before 5.2.7. QuerySet.annotate(), QuerySet.alias(), QuerySet.aggregate(), and QuerySet.extra() are subject to SQL injection in column aliases, when using a suitably crafted dictionary, with dictionary expansion, as the **kwargs passed to these methods (on MySQL and MariaDB).

    django python-django python-django python-django django django django django python-django python-django python-django python-djangoОперационные системы Python
    • Обновитесь до 1.6.11-0ubuntu1.3+esm8
    • Обновитесь до 1.8.7-1ubuntu5.15+esm9
    • Обновитесь до 1:1.11.11-1ubuntu1.21+esm12
    • Обновитесь до 2:2.2.12-1ubuntu0.29+esm4
    • Обновитесь до 2:3.2.12-2ubuntu1.22
    • Обновитесь до 3:3.2.25-0+deb12u1
    • Обновитесь до 3:4.2.11-1ubuntu1.11
    • Обновитесь до 3:4.2.25-1
    • Обновитесь до 3:4.2.27-0+deb13u1
    • Обновитесь до 3:5.2.4-1ubuntu2
    • Обновитесь до 4.2.25
    • Обновитесь до 5.1.13
    • Обновитесь до 5.2.7
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  10. CVE-2025-59940

    Средний · CVSS 6.5EPSS 0,34%Есть исправление

    mkdocs-include-markdown-plugin susceptible to unvalidated input colliding with substitution placeholders

    mkdocs-include-markdown-plugin is an Mkdocs Markdown includer plugin. In versions 7.1.7 and below, there is a vulnerability where unvalidated input can collide with substitution placeholders. This issue is fixed in version 7.1.8.

    mkdocs-include-markdown-plugin mkdocs-include-markdown-pluginPython
    • Обновитесь до 7.1.8
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  11. CVE-2025-7647

    Высокий · CVSS 7.3EPSS 0,15%Есть исправление

    Insecure Temporary File Handling in run-llama/llama_index

    The llama-index-core package, up to version 0.12.44, contains a vulnerability in the `get_cache_dir()` function where a predictable, hardcoded directory path `/tmp/llama_index` is used on Linux systems without proper security controls. This vulnerability allows attackers on multi-user systems to steal proprietary models, poison cached embeddings, or conduct symlink attacks. The issue affects all Linux deployments where multiple users share the same system. The vulnerability is classified under CWE-379, CWE-377, and CWE-367, indicating insecure temporary file creation and potential race conditions.

    run-llama/llama_index llama-index-corePython
    • Обновитесь до 0.13.0
    • Обновитесь до v0.13.0
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  12. CVE-2025-59842

    Низкий · CVSS 2.1EPSS 0,24%Есть исправление

    JupyterLab LaTeX typesetter links did not enforce `noopener` attribute

    jupyterlab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. Prior to version 4.4.8, links generated with LaTeX typesetters in Markdown files and Markdown cells in JupyterLab and Jupyter Notebook did not include the noopener attribute. This is deemed to have no impact on the default installations. Theoretically users of third-party LaTeX-rendering extensions could find themselves vulnerable to reverse tabnabbing attacks if links generated by those extensions included target=_blank (no such extensions are known at time of writing) and they were to click on a link generated in L

    jupyterlab jupyterlab jupyterlab jupyterlab jupyterlab jupyterlab jupyterlabОперационные системы Python
    • Обновитесь до 4.4.10+ds1+~3.1.0+~0.16.6+~cs1.4.4-3
    • Обновитесь до 4.4.8
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  13. CVE-2025-54831

    Средний · CVSS 6.5EPSS 0,94%Есть исправление

    Apache Airflow: Connection sensitive details exposed to users with READ permissions

    Apache Airflow 3 introduced a change to the handling of sensitive information in Connections. The intent was to restrict access to sensitive connection fields to Connection Editing Users, effectively applying a "write-only" model for sensitive values. In Airflow 3.0.3, this model was unintentionally violated: sensitive connection information could be viewed by users with READ permissions through both the API and the UI. This behavior also bypassed the `AIRFLOW__CORE__HIDE_SENSITIVE_VAR_CONN_FIELDS` configuration option. This issue does not affect Airflow 2.x, where exposing sensitive information to connection editors was the intended and

    apache airflow apache-airflow apache-airflowPython
    • Обновитесь до 3.0.4
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  14. CVE-2025-11000

    Средний · CVSS 4.8EPSS 0,25%Есть исправление

    Open Babel PQSformat.cpp ReadMolecule null pointer dereference

    A vulnerability was determined in Open Babel up to 3.1.1. This affects the function PQSFormat::ReadMolecule of the file /src/formats/PQSformat.cpp. This manipulation causes null pointer dereference. The attack is restricted to local execution. The exploit has been publicly disclosed and may be utilized.

    open babel openbabel openbabel openbabel openbabel openbabel openbabel openbabel openbabel openbabel openbabel openbabelОперационные системы Python
    • Обновитесь до 3.2.0
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  15. CVE-2025-10999

    Средний · CVSS 4.8EPSS 0,25%Есть исправление

    Open Babel cacaoformat.cpp SetHilderbrandt null pointer dereference

    A vulnerability was found in Open Babel up to 3.1.1. The impacted element is the function CacaoFormat::SetHilderbrandt of the file /src/formats/cacaoformat.cpp. The manipulation results in null pointer dereference. The attack is only possible with local access. The exploit has been made public and could be used.

    open babel openbabel openbabel openbabel openbabel openbabel openbabel openbabel openbabel openbabel openbabel openbabelОперационные системы Python
    • Обновитесь до 3.2.0
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  16. CVE-2025-10998

    Средний · CVSS 4.8EPSS 0,21%Есть исправление

    Open Babel chemkinformat.cpp ReadReactionQualifierLines null pointer dereference

    A vulnerability has been found in Open Babel up to 3.1.1. The affected element is the function ChemKinFormat::ReadReactionQualifierLines of the file /src/formats/chemkinformat.cpp. The manipulation leads to null pointer dereference. The attack can only be performed from a local environment. The exploit has been disclosed to the public and may be used.

    open babel openbabel openbabel openbabel openbabel openbabel openbabel openbabel openbabel openbabel openbabel openbabelОперационные системы Python
    • Обновитесь до 3.2.0
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  17. CVE-2025-10997

    Средний · CVSS 4.8EPSS 0,29%Есть исправление

    Open Babel chemkinformat.cpp CheckSpecies heap-based overflow

    A flaw has been found in Open Babel up to 3.1.1. Impacted is the function ChemKinFormat::CheckSpecies of the file /src/formats/chemkinformat.cpp. Executing manipulation can lead to heap-based buffer overflow. The attack can only be executed locally. The exploit has been published and may be used.

    open babel openbabel openbabel openbabel openbabel openbabel openbabel openbabel openbabel openbabel openbabel openbabelОперационные системы Python
    • Обновитесь до 3.2.0
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  18. CVE-2025-10996

    Средний · CVSS 4.8EPSS 0,29%Есть исправление

    Open Babel smilesformat.cpp ParseSmiles heap-based overflow

    A vulnerability was detected in Open Babel up to 3.1.1. This issue affects the function OBSmilesParser::ParseSmiles of the file /src/formats/smilesformat.cpp. Performing manipulation results in heap-based buffer overflow. The attack needs to be approached locally. The exploit is now public and may be used.

    open babel openbabel openbabel openbabel openbabel openbabel openbabel openbabel openbabel openbabel openbabel openbabelОперационные системы Python
    • Обновитесь до 3.2.0
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  19. CVE-2025-10995

    Средний · CVSS 4.8EPSS 0,26%Есть исправление

    Open Babel zipstreamimpl.h underflow memory corruption

    A security vulnerability has been detected in Open Babel up to 3.1.1. This vulnerability affects the function zlib_stream::basic_unzip_streambuf::underflow in the library /src/zipstreamimpl.h. Such manipulation leads to memory corruption. Local access is required to approach this attack. The exploit has been disclosed publicly and may be used.

    open babel openbabel openbabel openbabel openbabel openbabel openbabel openbabel openbabel openbabel openbabel openbabelОперационные системы Python
    • Обновитесь до 3.2.0
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

  20. CVE-2025-10994

    Средний · CVSS 4.8EPSS 0,25%Есть исправление

    Open Babel gamessformat.cpp ReadMolecule use after free

    A weakness has been identified in Open Babel up to 3.1.1. This affects the function GAMESSOutputFormat::ReadMolecule of the file gamessformat.cpp. This manipulation causes use after free. It is possible to launch the attack on the local host. The exploit has been made available to the public and could be exploited.

    open babel openbabel openbabel openbabel openbabel openbabel openbabel openbabel openbabel openbabel openbabel openbabelОперационные системы Python
    • Обновитесь до 3.2.0
    Опубликовано Обновлено
    Исходное сообщение 1 ↗Исходное сообщение 2 ↗Исходное сообщение 3 ↗

Проверьте свой сервер

Сопоставьте установленный стек и версии со свежими базами уязвимостей.

Проверьте свой сервер →