Schwachstellen im Stack Python · Seite 160

Nautobot vulnerable to secrets exposure and data manipulation through Jinja2 templating

Nautobot is a Network Source of Truth and Network Automation Platform. All users of Nautobot versions prior to 2.4.10 or prior to 1.6.32 are potentially affected. Due to insufficient security configuration of the Jinja2 templating feature used in computed fields, custom links, etc. in Nautobot, a malicious user could configure this feature set in ways that could expose the value of Secrets defined in Nautobot when the templated content is rendered or that could call Python APIs to modify data within Nautobot when the templated content is rendered, bypassing the object permissions assigned to the viewing user. Nautobot versions 1.6.32 and 2.4.

• Auf 1.6.32 aktualisieren
• Auf 2.4.10 aktualisieren

OctoPrint Vulnerable to Denial of Service through malformed HTTP request

OctoPrint versions up until and including 1.11.1 contain a vulnerability that allows any unauthenticated attacker to send a manipulated broken multipart/form-data request to OctoPrint and through that make the web server component become unresponsive. The issue can be triggered by a broken multipart/form-data request lacking an end boundary to any of OctoPrint's endpoints implemented through the octoprint.server.util.tornado.UploadStorageFallbackHandler request handler. The request handler will get stuck in an endless busy loop, looking for a part of the request that will never come. As Tornado is single-threaded, that will effectively block

• Auf 1.11.2 aktualisieren

OctoPrint vulnerable to possible file extraction via upload endpoints

OctoPrint provides a web interface for controlling consumer 3D printers. OctoPrint versions up until and including 1.11.1 contain a vulnerability that allows an attacker with the FILE_UPLOAD permission to exfiltrate files from the host that OctoPrint has read access to, by moving them into the upload folder where they then can be downloaded from. This vulnerability is fixed in 1.11.2.

• Auf 1.11.2 aktualisieren

Requests vulnerable to .netrc credentials leak via malicious URLs

Requests is a HTTP library. Due to a URL parsing issue, Requests releases prior to 2.32.4 may leak .netrc credentials to third parties for specific maliciously-crafted URLs. Users should upgrade to version 2.32.4 to receive a fix. For older versions of Requests, use of the .netrc file can be disabled with `trust_env=False` on one's Requests Session.

• Auf 2.18.4-2ubuntu0.1+esm2 aktualisieren
• Auf 2.2.1-1ubuntu0.4+esm1 aktualisieren
• Auf 2.22.0-2ubuntu1.1+esm1 aktualisieren
• Auf 2.25.1+dfsg-2ubuntu0.3 aktualisieren
• Auf 2.31.0+dfsg-1ubuntu1.1 aktualisieren
• Auf 2.32.3+dfsg-5+deb13u1 aktualisieren
• Auf 2.32.3+dfsg-5ubuntu2 aktualisieren
• Auf 2.32.4 aktualisieren
• Auf 2.32.4+dfsg-1 aktualisieren
• Auf 2.9.1-3ubuntu0.1+esm2 aktualisieren
• Auf 22.0.2+dfsg-1ubuntu0.7 aktualisieren
• Auf 24.0+dfsg-1ubuntu1.3 aktualisieren

Exposure of sensitive Information allows account takeover

Exposure of sensitive data in active sessions in Lablup's BackendAI allows attackers to retrieve credentials for users on the management platform.

Improper access control allows arbitrary account creation

Missing Authentication in the registration feature of Lablup's BackendAI allows arbitrary users to create user accounts that can access private data even when registration is disabled.

• Auf 25.15.6 aktualisieren
• Auf 25.19.0rc1 aktualisieren

Missing Authorization for Interactive Sessions

Missing Authorization in Lablup's BackendAI allows attackers to takeover all active sessions; Accessing, stealing, or altering any data accessible in the session. This vulnerability exists in all current versions of BackendAI.

CVE-2025-49619

Skyvern through 0.1.85 is vulnerable to server-side template injection (SSTI) in the Prompt field of workflow blocks such as the Navigation v2 Block. Improper sanitization of Jinja2 template input allows authenticated users to inject crafted expressions that are evaluated on the server, leading to blind remote code execution (RCE).

SQL Injection in run-llama/llama_index

Multiple vector store integrations in run-llama/llama_index version v0.12.21 have SQL injection vulnerabilities. These vulnerabilities allow an attacker to read and write data using SQL, potentially leading to unauthorized access to data of other users depending on the usage of the llama-index library in a web application.

• Auf 0.12.28 aktualisieren

CVE-2025-48432

An issue was discovered in Django 5.2 before 5.2.3, 5.1 before 5.1.11, and 4.2 before 4.2.23. Internal HTTP response logging does not escape request.path, which allows remote attackers to potentially manipulate log output via crafted URLs. This may lead to log injection or forgery when logs are viewed in terminals or processed by external systems.

• Auf 2:2.2.12-1ubuntu0.29+esm2 aktualisieren
• Auf 2:3.2.12-2ubuntu1.20 aktualisieren
• Auf 3:3.2.25-0+deb12u1 aktualisieren
• Auf 3:4.2.11-1ubuntu1.9 aktualisieren
• Auf 3:4.2.23-1 aktualisieren
• Auf 3:5.2.4-1 aktualisieren
• Auf 4.2.22 aktualisieren
• Auf 4.2.23 aktualisieren
• Auf 5.1.10 aktualisieren
• Auf 5.1.11 aktualisieren
• Auf 5.2.2 aktualisieren
• Auf 5.2.3 aktualisieren

Jupyter Core on Windows Has Uncontrolled Search Path Element Local Privilege Escalation Vulnerability

Jupyter Core is a package for the core common functionality of Jupyter projects. When using Jupyter Core prior to version 5.8.0 on Windows, the shared `%PROGRAMDATA%` directory is searched for configuration files (`SYSTEM_CONFIG_PATH` and `SYSTEM_JUPYTER_PATH`), which may allow users to create configuration files affecting other users. Only shared Windows systems with multiple users and unprotected `%PROGRAMDATA%` are affected. Users should upgrade to Jupyter Core version 5.8.0 or later to receive a patch. Some other mitigations are available. As administrator, modify the permissions on the `%PROGRAMDATA%` directory so it is not writable by u

• Auf 5.8.1 aktualisieren

Bypass extraction filter to modify file metadata outside extraction directory

Allows modifying some file metadata (e.g. last modified) with filter="data" or file permissions (chmod) with filter="tar" of files outside the extraction directory. You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall() or TarFile.extract() using the filter= parameter with a value of "data" or "tar". See the tarfile extraction filters documentation https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter  for more information. Only Python versions 3.12 or later are affected by these vulnerabilities, earlier versions don't include the extraction filter fe

• Auf 3.10.18 aktualisieren
• Auf 3.11.13 aktualisieren
• Auf 3.12.11 aktualisieren
• Auf 3.12.3-1ubuntu0.7 aktualisieren
• Auf 3.13.4 aktualisieren
• Auf 3.13.4-1 aktualisieren
• Auf 3.14.0-1 aktualisieren
• Auf 3.14.0b3 aktualisieren
• Auf 3.9.23 aktualisieren
• Auf 7.3.20+dfsg-2 aktualisieren

Tarfile extracts filtered members when errorlevel=0

When using a TarFile.errorlevel = 0 and extracting with a filter the documented behavior is that any filtered members would be skipped and not extracted. However the actual behavior of TarFile.errorlevel = 0 in affected versions is that the member would still be extracted and not skipped.

• Auf 3.10.18 aktualisieren
• Auf 3.11.13 aktualisieren
• Auf 3.12.11 aktualisieren
• Auf 3.12.3-1ubuntu0.7 aktualisieren
• Auf 3.13.4 aktualisieren
• Auf 3.13.4-1 aktualisieren
• Auf 3.14.0-1 aktualisieren
• Auf 3.14.0b3 aktualisieren
• Auf 3.9.23 aktualisieren
• Auf 7.3.20+dfsg-2 aktualisieren

Bypassing extraction filter to create symlinks to arbitrary targets outside extraction directory

Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination directory, and the modification of some file metadata. You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall() or TarFile.extract() using the filter= parameter with a value of "data" or "tar". See the tarfile extraction filters documentation https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter  for more information. Note that for Python 3.14 or later the default value of filter= changed from "no filtering" to `"data", so if you are relying on this

• Auf 3.10.18 aktualisieren
• Auf 3.11.13 aktualisieren
• Auf 3.12.11 aktualisieren
• Auf 3.12.3-1ubuntu0.7 aktualisieren
• Auf 3.13.4 aktualisieren
• Auf 3.13.4-1 aktualisieren
• Auf 3.14.0-1 aktualisieren
• Auf 3.14.0b3 aktualisieren
• Auf 3.9.23 aktualisieren
• Auf 7.3.20+dfsg-2 aktualisieren

Extraction filter bypass for linking outside extraction directory

Allows the extraction filter to be ignored, allowing symlink targets to point outside the destination directory, and the modification of some file metadata. You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall() or TarFile.extract() using the filter= parameter with a value of "data" or "tar". See the tarfile extraction filters documentation https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter  for more information. Note that for Python 3.14 or later the default value of filter= changed from "no filtering" to `"data", so if you are relying on this

• Auf 3.10.18 aktualisieren
• Auf 3.11.13 aktualisieren
• Auf 3.12.11 aktualisieren
• Auf 3.12.3-1ubuntu0.7 aktualisieren
• Auf 3.13.4 aktualisieren
• Auf 3.13.4-1 aktualisieren
• Auf 3.14.0-1 aktualisieren
• Auf 3.14.0b3 aktualisieren
• Auf 3.9.23 aktualisieren
• Auf 7.3.20+dfsg-2 aktualisieren

Arbitrary writes via tarfile realpath overflow

Allows arbitrary filesystem writes outside the extraction directory during extraction with filter="data". You are affected by this vulnerability if using the tarfile module to extract untrusted tar archives using TarFile.extractall() or TarFile.extract() using the filter= parameter with a value of "data" or "tar". See the tarfile extraction filters documentation https://docs.python.org/3/library/tarfile.html#tarfile-extraction-filter  for more information. Note that for Python 3.14 or later the default value of filter= changed from "no filtering" to `"data", so if you are relying on this new default behavior then your usage is also affect

• Auf 3.10.18 aktualisieren
• Auf 3.11.13 aktualisieren
• Auf 3.12.11 aktualisieren
• Auf 3.12.3-1ubuntu0.7 aktualisieren
• Auf 3.13.4 aktualisieren
• Auf 3.13.4-1 aktualisieren
• Auf 3.14.0-1 aktualisieren
• Auf 3.14.0b3 aktualisieren
• Auf 3.9.23 aktualisieren
• Auf 7.3.20+dfsg-2 aktualisieren

SignXML's signature verification with HMAC is vulnerable to a timing attack

SignXML is an implementation of the W3C XML Signature standard in Python. When verifying signatures with X509 certificate validation turned off and HMAC shared secret set (`signxml.XMLVerifier.verify(require_x509=False, hmac_key=...`), versions of SignXML prior to 4.0.4 are vulnerable to a potential timing attack. The verifier may leak information about the correct HMAC when comparing it with the user supplied hash, allowing users to reconstruct the correct HMAC for any data.

• Auf 4.0.4 aktualisieren
• Auf 4.0.5+dfsg-1 aktualisieren

SignXML's signature verification with HMAC is vulnerable to an algorithm confusion attack

SignXML is an implementation of the W3C XML Signature standard in Python. When verifying signatures with X509 certificate validation turned off and HMAC shared secret set (`signxml.XMLVerifier.verify(require_x509=False, hmac_key=...`), versions of SignXML prior to 4.0.4 are vulnerable to a potential algorithm confusion attack. Unless the user explicitly limits the expected signature algorithms using the `signxml.XMLVerifier.verify(expect_config=...)` setting, an attacker may supply a signature unexpectedly signed with a key other than the provided HMAC key, using a different (asymmetric key) signature algorithm. Starting with SignXML 4.0.4, s

• Auf 4.0.4 aktualisieren
• Auf 4.0.5+dfsg-1 aktualisieren

AstrBot Has Path Traversal Vulnerability in /api/chat/get_file

AstrBot is a large language model chatbot and development framework. A path traversal vulnerability present in versions 3.4.4 through 3.5.12 may lead to information disclosure, such as API keys for LLM providers, account passwords, and other sensitive data. The vulnerability has been addressed in Pull Request #1676 and is included in version 3.5.13. As a workaround, users can edit the `cmd_config.json` file to disable the dashboard feature as a temporary workaround. However, it is strongly recommended to upgrade to version v3.5.13 or later to fully resolve this issue.

• Auf 3.5.13 aktualisieren

SQL Injection in run-llama/llama_index

An SQL injection vulnerability exists in the delete function of DuckDBVectorStore in run-llama/llama_index version v0.12.19. This vulnerability allows an attacker to manipulate the ref_doc_id parameter, enabling them to read and write arbitrary files on the server, potentially leading to remote code execution (RCE).

• Auf 0.12.21 aktualisieren
• Auf 0.3.1 aktualisieren