deardaniel/secdata-raw huggingface dataset:
GitHub Security Advisory: GHSA-x48g-hm9c-ww42
Package: llama-index-packs-finchat (PIP)
Severity: CRITICAL (CVSS 10.0)
CWE: CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Vulnerable versions: <= 0.3.0
Patched in: unpatched

Summary: llama-index-packs-finchat SQL Injection vulnerability

Details:
A vulnerability in the FinanceChatLlamaPack of the llama-index-packs-finchat package, versions up to v0.3.0, allows for SQL injection in the `run_sql_query` function of the `database_agent`. This vulnerability can be exploited by an attacker to inject arbitrary SQL queries, leading to remote code execution (RCE) through the use of PostgreSQL's large object functionality.

The issue is resolved by no longer officially supporting the package and moving it into the `stale_packages` branch on the repo, this removing it from documentation etc.
GitHub Security Advisory: GHSA-wqfg-m96j-85vm
Package: Django (PIP)
Severity: MODERATE (CVSS 5.8)
CWE: CWE-770: Allocation of Resources Without Limits or Throttling
Vulnerable versions: >= 5.1, < 5.1.8
Patched in: 5.1.8

Summary: Django Potential Denial of Service (DoS) on Windows 

Details:
An issue was discovered in Django 5.1 before 5.1.8 and 5.0 before 5.0.14. The NFKC normalization is slow on Windows. As a consequence, django.contrib.auth.views.LoginView, django.contrib.auth.views.LogoutView, and django.views.i18n.set_language are subject to a potential denial-of-service attack via certain inputs with a very large number of Unicode characters.
GitHub Security Advisory: GHSA-wqfg-m96j-85vm
Package: Django (PIP)
Severity: MODERATE (CVSS 5.8)
CWE: CWE-770: Allocation of Resources Without Limits or Throttling
Vulnerable versions: >= 5.0, < 5.0.14
Patched in: 5.0.14

Summary: Django Potential Denial of Service (DoS) on Windows 

Details:
An issue was discovered in Django 5.1 before 5.1.8 and 5.0 before 5.0.14. The NFKC normalization is slow on Windows. As a consequence, django.contrib.auth.views.LoginView, django.contrib.auth.views.LogoutView, and django.views.i18n.set_language are subject to a potential denial-of-service attack via certain inputs with a very large number of Unicode characters.
GitHub Security Advisory: GHSA-pp64-wj43-xqcr
Package: aws-sam-cli (PIP)
Severity: MODERATE (CVSS 6.5)
CWE: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), CWE-61: UNIX Symbolic Link (Symlink) Following
Vulnerable versions: < 1.134.0
Patched in: 1.134.0

Summary: AWS SAM CLI Path Traversal allows file copy to local cache

Details:
### Summary

The [AWS Serverless Application Model Command Line Interface (AWS SAM CLI)](https://docs.aws.amazon.com/serverless-application-model/latest/developerguide/using-sam-cli.html) is an open-source CLI tool that helps Lambda developers to build and develop Lambda applications locally on their computers using Docker.

After completing a build with AWS SAM CLI which include symlinks, the content of those symlinks are copied to the cache of the local workspace as regular files or directories. As a result, a user who does not have access to those symlinks outside of the Docker container would now have access via the local workspace.

Users should [upgrade to v1.134.0 or newer](https://docs.aws.amazon.com/serverless-application-model/latest/developerguide/manage-sam-cli-versions.html#manage-sam-cli-versions-upgrade) and ensure any forked or derivative code is patched to incorporate the new fixes. After upgrading, users must re-build their applications using the `sam build --use-container` to update the symlinks.



### Impact

The issue is limited to the local workspace and does not affect AWS services, production environments or cross-account resources. The issue only affects workspaces using the AWS SAM CLI with container builds (--use-container), potentially allowing access to content of linked files in the SAM CLI cache.



**Impacted versions:** <= AWS SAM CLI v1.133.0



### Patches

The patches are included in AWS SAM CLI  version to v1.134.0 and newer. Users should upgrade and ensure any forked or derivative code is patched to incorporate the new fixes. After upgrading, users must re-build their applications using the `sam build --use-container` to update the symlinks



### Workarounds

There is no recommended work around. Customers are advised to upgrade to version v1.134.0 or the latest version.



### References

CVE-2025-3048

---

If you have any questions or comments about this advisory we ask that you contact AWS/Amazon Security via our [vulnerability reporting page](https://aws.amazon.com/security/vulnerability-reporting) or directly via email to [aws-security@amazon.com](mailto:aws-security@amazon.com). Please do not create a public GitHub issue.



### Credit

We would like to thank [Kevin Backhouse](https://github.com/kevinbackhouse) with the GitHub Security Lab for collaborating on this issue through the coordinated vulnerability disclosure process.
GitHub Security Advisory: GHSA-px37-jpqx-97q9
Package: aws-sam-cli (PIP)
Severity: MODERATE (CVSS 6.5)
CWE: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), CWE-61: UNIX Symbolic Link (Symlink) Following
Vulnerable versions: < 1.133.0
Patched in: 1.133.0

Summary: AWS SAM CLI Path Traversal allows file copy to build container

Details:
### Summary

The [AWS Serverless Application Model Command Line Interface (AWS SAM CLI)](https://docs.aws.amazon.com/serverless-application-model/latest/developerguide/using-sam-cli.html) is an open-source CLI tool that helps Lambda developers to build and develop Lambda applications locally on their computers using Docker.

When running the AWS SAM CLI build process with Docker and symlinks are included in the build files, the container environment allows a user to access privileged files on the host by leveraging the elevated permissions granted to the tool. A user could leverage the elevated permissions to access restricted files via symlinks and copy them to a more permissive location on the container.

Users should [upgrade to v1.133.0](https://docs.aws.amazon.com/serverless-application-model/latest/developerguide/manage-sam-cli-versions.html#manage-sam-cli-versions-upgrade) or newer and ensure any forked or derivative code is patched to incorporate the new fixes. 


### Impact

This issue is limited to the local workspace and does not affect AWS services, production environments or cross-account resources. The issue only affects local workspaces using AWS SAM CLI with container builds (--use-container), potentially allowing access to local files outside the build directory through the usage of symlinks. 



**Impacted versions:** <= AWS SAM CLI v1.132.0



### Patches

The issue has been addressed in version 1.133.0. Users should upgrade and ensure any forked or derivative code is patched to incorporate the new fixes. To retain the previous behavior and allow symlinks to resolve on the host machine, please use the explicit '-[-mount-symlinks](https://docs.aws.amazon.com/serverless-application-model/latest/developerguide/sam-cli-command-reference-sam-build.html#ref-sam-cli-build-options-mount-symlinks)' parameter.



### Workarounds

There is no recommended work around. Customers are advised to upgrade to version v1.133.0 or the latest version.



### References

CVE-2025-3047

---

If you have any questions or comments about this advisory we ask that you contact AWS/Amazon Security via our [vulnerability reporting page](https://aws.amazon.com/security/vulnerability-reporting) or directly via email to [aws-security@amazon.com](mailto:aws-security@amazon.com). Please do not create a public GitHub issue.



### Credit

We would like to thank [Kevin Backhouse](https://github.com/kevinbackhouse) with the GitHub Security Lab for collaborating on this issue through the coordinated vulnerability disclosure process.
GitHub Security Advisory: GHSA-f3mf-hm6v-jfhh
Package: mesop (PIP)
Severity: HIGH (CVSS 8.1)
CWE: CWE-915: Improperly Controlled Modification of Dynamically-Determined Object Attributes
Vulnerable versions: < 0.14.1
Patched in: 0.14.1

Summary: Mesop Class Pollution vulnerability leads to DoS and Jailbreak attacks

Details:
From @jackfromeast and @superboy-zjc:
We have identified a class pollution vulnerability in Mesop (<= [0.14.0](https://github.com/mesop-dev/mesop/releases/tag/v0.14.0)) application that allows attackers to overwrite global variables and class attributes in certain Mesop modules during runtime. This vulnerability could directly lead to a denial of service (DoS) attack against the server. Additionally, it could also result in other severe consequences given the application's implementation, such as identity confusion, where an attacker could impersonate an assistant or system role within conversations. This impersonation could potentially enable jailbreak attacks when interacting with large language models (LLMs).

Just like the Javascript's prototype pollution, this vulnerability could leave a way for attackers to manipulate the intended data-flow or control-flow of the application at runtime and lead to severe consequnces like RCE when gadgets are available.
GitHub Security Advisory: GHSA-v56r-hwv5-mxg6
Package: matrix-synapse (PIP)
Severity: HIGH (CVSS 7.1)
CWE: CWE-20: Improper Input Validation
Vulnerable versions: < 1.127.1
Patched in: 1.127.1

Summary: Synapse vulnerable to federation denial of service via malformed events

Details:
### Impact
A malicious server can craft events with a `depth` outside the integer range allowed by Canonical JSON. When such an event is received by Synapse version up to 1.127.0, it prevents it from federating with other servers. The vulnerability has been exploited in the wild.

### Patches
Fixed in Synapse v1.127.1.

### Workarounds
Closed federation environments of trusted servers or non-federating installations are not affected.

### For more information

If you have any questions or comments about this advisory, please email us at [security at element.io](mailto:security@element.io).
GitHub Security Advisory: GHSA-785h-76cm-cpmf
Package: django-tomselect (PIP)
Severity: LOW (CVSS 0.0)
CWE: CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'), CWE-116: Improper Encoding or Escaping of Output
Vulnerable versions: < 2025.3.3
Patched in: 2025.3.3

Summary: Django TomSelect incomplete escaping of dangerous characters in widget attributes

Details:
### Summary
User supplied values passed through to certain attributes in form widgets are not fully escaped for potentially dangerous tokens, and in some cases are rendered in browser as valid html tags.

### Details
Attributes passed to the widget (such as `label_field`) containing `<`, `>`, and similar tokens are not fully escaped. This results in some raw values reaching the widget, and rendering in part or fully.

For example, a label of: `"Test User <script>I can pass this to the label_field and it gets rendered</script>"` is rendered in the choices's label visually as `"Test User "` with the trailing space, and what appears as an un-executed script tag following it (which is visible when viewing source).

The actual output rendered in the browser for this example is: `<div role="option" data-value="63f205b6" class="item" data-ts-item="">Test User <script>I can pass this to the label_field and it gets rendered</script></div>`

The script tags appears to be valid in Chrome dev tools, but doesn't appear execute code.

### Impact
Although the risk may be mediated since the content within the rendered `<script></script>` tags does not seem to actually/immediately run, potential may exist for other ways of increasing the risk (e.g.: code injection).  In addition, the widget does not display correctly for valid strings containing `<` or `>`. Valid use-cases for printing these characters include widget label fields displaying email addresses (e.g.: `"User Jane <user.jane@example.com>"`

Because of the relatively small number of users at this moment, our plan to yank affected releases on PyPI and GitHub, and because raw text is rendered but does not seem to be executable, I am marking the Severity **Low**.

Update to version **5.3.3**. The only difference from 5.3.2 is the code and documentation changes to resolve this vulnerability, so the update process should not be problematic.
GitHub Security Advisory: GHSA-6phg-4wmq-h5h3
Package: frappe (PIP)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Vulnerable versions: >= 15.0.0, < 15.55.0
Patched in: 15.55.0

Summary: Frappe has possibility of SQL injection due to improper validations

Details:
### Impact
SQL injection could be achieved via a specially crafted request, which could allow malicious person to gain access to sensitive information.

### Workarounds
Upgrading is required, no other workaround is present.
GitHub Security Advisory: GHSA-6phg-4wmq-h5h3
Package: frappe (PIP)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Vulnerable versions: < 14.93.2
Patched in: 14.93.2

Summary: Frappe has possibility of SQL injection due to improper validations

Details:
### Impact
SQL injection could be achieved via a specially crafted request, which could allow malicious person to gain access to sensitive information.

### Workarounds
Upgrading is required, no other workaround is present.
GitHub Security Advisory: GHSA-4v9f-r55g-g6hc
Package: prefect (PIP)
Severity: HIGH (CVSS 7.6)
CWE: CWE-346: Origin Validation Error
Vulnerable versions: < 2.20.17
Patched in: 2.20.17

Summary: Prefect CORS (Cross-Origin Resource Sharing) misconfiguration

Details:
A CORS (Cross-Origin Resource Sharing) misconfiguration in prefecthq/prefect prior to version 3.0.3 allows unauthorized domains to access sensitive data. This vulnerability can lead to unauthorized access to the database, resulting in potential data leaks, loss of confidentiality, service disruption, and data integrity risks.
GitHub Security Advisory: GHSA-4v9f-r55g-g6hc
Package: prefect (PIP)
Severity: HIGH (CVSS 7.6)
CWE: CWE-346: Origin Validation Error
Vulnerable versions: >= 3.0.0rc1, < 3.0.3
Patched in: 3.0.3

Summary: Prefect CORS (Cross-Origin Resource Sharing) misconfiguration

Details:
A CORS (Cross-Origin Resource Sharing) misconfiguration in prefecthq/prefect prior to version 3.0.3 allows unauthorized domains to access sensitive data. This vulnerability can lead to unauthorized access to the database, resulting in potential data leaks, loss of confidentiality, service disruption, and data integrity risks.
GitHub Security Advisory: GHSA-qrv3-jc3h-f3m6
Package: frappe (PIP)
Severity: HIGH (CVSS 0.0)
CWE: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Vulnerable versions: >= 15.0.0, < 15.51.0
Patched in: 15.51.0

Summary: Frappe vulnerable to information disclosure leading to account takeover

Details:
### Impact
Making crafted requests could lead to information disclosure that could further lead to account takeover.

### Workarounds
There's no workaround to fix this without upgrading.

### Credits
Thanks to Thanh of Calif.io for reporting the issue
GitHub Security Advisory: GHSA-qrv3-jc3h-f3m6
Package: frappe (PIP)
Severity: HIGH (CVSS 0.0)
CWE: CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Vulnerable versions: < 14.89.0
Patched in: 14.89.0

Summary: Frappe vulnerable to information disclosure leading to account takeover

Details:
### Impact
Making crafted requests could lead to information disclosure that could further lead to account takeover.

### Workarounds
There's no workaround to fix this without upgrading.

### Credits
Thanks to Thanh of Calif.io for reporting the issue
GitHub Security Advisory: GHSA-v342-4xr9-x3q3
Package: frappe (PIP)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-20: Improper Input Validation
Vulnerable versions: >= 15.0.0, < 15.52.0
Patched in: 15.52.0

Summary: Frappe has Possibility of Remote Code Execution due to improper validation

Details:
### Impact
A system user was able to create certain documents in a specific way that could lead to RCE.

### Workarounds
There's no workaround, an upgrade is required.

### Credits
Thanks to Thanh of Calif.io for reporting the issue
GitHub Security Advisory: GHSA-v342-4xr9-x3q3
Package: frappe (PIP)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-20: Improper Input Validation
Vulnerable versions: < 14.91.0
Patched in: 14.91.0

Summary: Frappe has Possibility of Remote Code Execution due to improper validation

Details:
### Impact
A system user was able to create certain documents in a specific way that could lead to RCE.

### Workarounds
There's no workaround, an upgrade is required.

### Credits
Thanks to Thanh of Calif.io for reporting the issue
GitHub Security Advisory: GHSA-3hj6-r5c9-q8f3
Package: frappe (PIP)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Vulnerable versions: >= 15.0.0, < 15.51.0
Patched in: 15.51.0

Summary: Frappe has possibility of SQL injection due to improper validations

Details:
### Impact
An SQL Injection vulnerability has been identified in Frappe Framework which could allow a malicious actor to access sensitive information.

### Workarounds
Upgrading is required, no other workaround is present.

### Credits

Thanks to Thanh of Calif.io for reporting the issue
GitHub Security Advisory: GHSA-3hj6-r5c9-q8f3
Package: frappe (PIP)
Severity: MODERATE (CVSS 0.0)
CWE: CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Vulnerable versions: < 14.89.0
Patched in: 14.89.0

Summary: Frappe has possibility of SQL injection due to improper validations

Details:
### Impact
An SQL Injection vulnerability has been identified in Frappe Framework which could allow a malicious actor to access sensitive information.

### Workarounds
Upgrading is required, no other workaround is present.

### Credits

Thanks to Thanh of Calif.io for reporting the issue
GitHub Security Advisory: GHSA-fm93-g6xp-35xq
Package: aim (PIP)
Severity: HIGH (CVSS 7.5)
CWE: CWE-1049: Excessive Data Query Operations in a Large Data Table
Vulnerable versions: <= 3.25.0
Patched in: unpatched

Summary: Aim Excessive Data Query Operations in a Large Data Table vulnerability

Details:
In version 3.25.0 of aimhubio/aim, a denial of service vulnerability exists. By tracking a large number of `Text` objects and then querying them simultaneously through the web API, the Aim web server becomes unresponsive to other requests for an extended period while processing and returning these objects. This vulnerability can be exploited repeatedly, leading to a complete denial of service.
GitHub Security Advisory: GHSA-j5qj-rg5j-j7c2
Package: aim (PIP)
Severity: HIGH (CVSS 7.5)
CWE: CWE-400: Uncontrolled Resource Consumption, CWE-770: Allocation of Resources Without Limits or Throttling
Vulnerable versions: <= 3.25.0
Patched in: unpatched

Summary: Aim Uncontrolled Resource Consumption vulnerability

Details:
In version 3.25.0 of aimhubio/aim, the tracking server is vulnerable to a denial of service attack. The server overrides the maximum size for websocket messages, allowing very large images to be tracked. This causes the server to become unresponsive to other requests while processing the large image, leading to a denial of service condition.
GitHub Security Advisory: GHSA-5xg7-5662-8x7j
Package: composio-core (PIP)
Severity: HIGH (CVSS 7.2)
CWE: CWE-627: Dynamic Variable Evaluation
Vulnerable versions: < 0.5.43
Patched in: 0.5.43

Summary: Composio Eval Injection Vulnerability

Details:
In composiohq/composio version 0.4.3, the mathematical_calculator endpoint uses the unsafe eval() function to perform mathematical operations. This can lead to arbitrary code execution if untrusted input is passed to the eval() function.
GitHub Security Advisory: GHSA-q3gw-8236-5jw4
Package: mlflow (PIP)
Severity: MODERATE (CVSS 5.3)
CWE: CWE-400: Uncontrolled Resource Consumption
Vulnerable versions: <= 2.13.2
Patched in: unpatched

Summary: MLflow Uncontrolled Resource Consumption vulnerability

Details:
In mlflow/mlflow version v2.13.2, a vulnerability exists that allows the creation or renaming of an experiment with a large number of integers in its name due to the lack of a limit on the experiment name. This can cause the MLflow UI panel to become unresponsive, leading to a potential denial of service. Additionally, there is no character limit in the `artifact_location` parameter while creating the experiment.
GitHub Security Advisory: GHSA-32g6-mg92-ghm2
Package: sagemaker (PIP)
Severity: MODERATE (CVSS 5.9)
CWE: CWE-328: Use of Weak Hash, CWE-440: Expected Behavior Violation
Vulnerable versions: < 2.237.3
Patched in: 2.237.3

Summary: SageMaker Workflow component allows possibility of MD5 hash collisions

Details:
A vulnerability in the SageMaker Workflow component of aws/sagemaker-python-sdk allows for the possibility of MD5 hash collisions in all versions. This can lead to workflows being inadvertently replaced due to the reuse of results from different configurations that produce the same MD5 hash. This issue can cause integrity problems within the pipeline, potentially leading to erroneous processing outcomes.
GitHub Security Advisory: GHSA-49m6-vrr9-2cqm
Package: mlflow (PIP)
Severity: MODERATE (CVSS 5.9)
CWE: CWE-400: Uncontrolled Resource Consumption, CWE-410: Insufficient Resource Pool
Vulnerable versions: <= 2.17.2
Patched in: unpatched

Summary: MLflow Uncontrolled Resource Consumption vulnerability

Details:
In mlflow/mlflow version 2.17.2, the `/graphql` endpoint is vulnerable to a denial of service attack. An attacker can create large batches of queries that repeatedly request all runs from a given experiment. This can tie up all the workers allocated by MLFlow, rendering the application unable to respond to other requests. This vulnerability is due to uncontrolled resource consumption.
GitHub Security Advisory: GHSA-gjxm-x497-4h6h
Package: dtale (PIP)
Severity: CRITICAL (CVSS 9.8)
CWE: CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection'), CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Vulnerable versions: < 3.17.0
Patched in: 3.17.0

Summary: Duplicate Advisory: D-Tale Command Injection vulnerability

Details:
## Duplicate Advisory
This advisory has been withdrawn because it is a duplicate of GHSA-832w-fhmw-w4f4. This link is maintained to preserve external references.

## Original Description
A vulnerability in man-group/dtale versions 3.15.1 allows an attacker to override global state settings to enable the `enable_custom_filters` feature, which is typically restricted to trusted environments. Once enabled, the attacker can exploit the /test-filter endpoint to execute arbitrary system commands, leading to remote code execution (RCE). This issue is addressed in version 3.16.1.
GitHub Security Advisory: GHSA-969w-gqqr-g6j3
Package: mlflow (PIP)
Severity: MODERATE (CVSS 5.4)
CWE: CWE-352: Cross-Site Request Forgery (CSRF)
Vulnerable versions: >= 2.17.0, < 2.20.3
Patched in: 2.20.3

Summary: MLflow Cross-Site Request Forgery (CSRF) vulnerability

Details:
A Cross-Site Request Forgery (CSRF) vulnerability exists in the Signup feature of mlflow/mlflow versions 2.17.0 to 2.20.1. This vulnerability allows an attacker to create a new account, which may be used to perform unauthorized actions on behalf of the malicious user.
GitHub Security Advisory: GHSA-4rj2-9gcx-5qhx
Package: mlflow (PIP)
Severity: LOW (CVSS 3.8)
CWE: CWE-521: Weak Password Requirements
Vulnerable versions: < 2.19.0
Patched in: 2.19.0

Summary: MLflow has Weak Password Requirements

Details:
In mlflow/mlflow version 2.18, an admin is able to create a new user account without setting a password. This vulnerability could lead to security risks, as accounts without passwords may be susceptible to unauthorized access. Additionally, this issue violates best practices for secure user account management. The issue is fixed in version 2.19.0.