Starlette's FileResponse component contains a vulnerability in its HTTP Range header parsing logic that results in quadratic time complexity. An unauthenticated attacker can craft a Range header with many small or specially shaped ranges to cause excessive CPU usage, leading to denial-of-service (DoS) conditions on endpoints serving files. This affects Starlette applications using FileResponse or StaticFiles, as well as frameworks built on Starlette such as FastAPI when serving files. The vulnerability is identified as CVE-2025-62727 and has a high severity score of 7.5. A fix is available in Starlette version 1.141.0_1.
CVE-2024-5569 is a Denial of Service (DoS) vulnerability in the jaraco/zipp library affecting all versions prior to 3.19.1. The flaw causes an infinite loop when processing specially crafted zip files via certain Path-related functions. This vulnerability also impacts the zipfile module in CPython due to shared code. The infinite loop prevents application responsiveness but does not exhaust resources. The issue is fixed in jaraco/zipp version 3.19.1.
A Unicode normalization mismatch in setuptools' handling of MANIFEST.in exclusions can cause files intended to be excluded from source distributions to be included instead. This occurs on macOS APFS/HFS+ filesystems where filenames are stored in NFD form but MANIFEST.in patterns are typically in NFC form, leading to silent exclusion bypass. The issue affects non-ASCII filenames and can result in unintended disclosure of secret or private files when publishing to PyPI. ASCII-only exclusions are unaffected. A fix is available in setuptools 2.13.0.
A Time-of-Check-Time-of-Use (TOCTOU) race condition vulnerability exists in the SoftFileLock implementation of the filelock package used by PyTorch. The flaw allows an attacker with local filesystem access and permission to create symlinks to exploit a race window between permission checking and file creation, potentially causing lock operations to fail or operate on unintended files. This can lead to silent lock acquisition failures, denial of service, and resource serialization issues. The vulnerability has been patched by adding the O_NOFOLLOW flag to prevent symlink following during lock file creation. Users should upgrade to the patched versions or apply recommended mitigations if immediate upgrade is not possible.
A TOCTOU race condition in the filelock library used by PyTorch and other tools allows local attackers to exploit a time gap during lock file creation to create symlinks that cause arbitrary user files to be truncated. This affects Unix, Linux, macOS, and Windows systems. The vulnerability can corrupt critical files such as configuration files, CPU ISA caches, or model checkpoints, potentially causing application crashes or data loss. The issue is fixed in filelock version 3.20.1 by preventing symlink following during file open operations.
A path traversal vulnerability in setuptools' PackageIndex.download function allows an attacker to write files to arbitrary filesystem locations with the permissions of the running Python process. This flaw arises from insufficient sanitization of URL-derived filenames, enabling path traversal despite some replacement of '..' sequences. The vulnerability affects PyTorch versions from 2.2.0 up to but not including 2.8.0 and was fixed in version 2.8.0. Exploitation could lead to arbitrary file write and potentially remote code execution depending on the environment.
CVE-2024-6345 is a high-severity vulnerability in the setuptools package_index module used by PyTorch versions 2.2.0 up to but not including 2.4.1. It allows remote code execution via command injection through download functions that handle package URLs. This flaw is fixed in setuptools version 70.0 and PyTorch 2.4.1.
CVE-2024-3772 is a regular expression denial of service (ReDoS) vulnerability in Pydantic versions prior to 2.13.4. It allows remote attackers to cause a denial of service by submitting a specially crafted email string that triggers excessive processing in the regular expression engine.
The httplib2 HTTP client library has a vulnerability in its handling of gzip and deflate compressed HTTP response bodies. It performs unbounded decompression without limits on the decompressed size, allowing a malicious server to send a small compressed payload that expands to a very large size in memory. This can cause the client process to run out of memory or crash due to MemoryError. The vulnerability affects any application using httplib2.Http().request() with untrusted HTTP endpoints. A fix is available in version 5.31.1_1.
CVE-2026-59886 is a denial-of-service vulnerability in the pyasn1 library's handling of ASN.1 REAL values. The issue arises when converting decoded REAL values with very large exponents to Python floats, causing excessive CPU and memory consumption. This can hang processes that print, log, or compare such values decoded from untrusted ASN.1 data. The vulnerability affects pyasn1.type.univ.Real conversions triggered by BER, CER, and DER decoders. It was fixed in pyasn1 version 5.31.1_1.
A vulnerability in pyasn1's BER/CER/DER decoders and encoders causes quadratic time complexity when processing OBJECT IDENTIFIER and RELATIVE-OID values with many arcs. This can lead to denial of service by consuming excessive CPU resources when decoding or encoding crafted ASN.1 data. The issue affects pyasn1 versions from 3.4.0 up to but not including 5.31.1_1 and is fixed in version 5.31.1_1.
CVE-2026-59884 is a denial of service vulnerability in the pyasn1 library's BER/CER/DER decoders. The flaw allows crafted inputs with unbounded long-form tag IDs to cause excessive CPU consumption due to quadratic growth in processing time. On Python 3.11 and later, it can also trigger unhandled ValueErrors during error message formatting, potentially bypassing error handling. The issue affects decoding of untrusted BER/CER/DER inputs in pyasn1 versions from 3.4.0 up to but not including 5.31.1_1. The vulnerability is fixed in version 5.31.1_1 by limiting tag ID size and improving error handling.
The pyasn1 library contains a denial of service vulnerability due to unbounded recursion when decoding ASN.1 data with deeply nested indefinite-length SEQUENCE or SET structures. An attacker can supply a crafted payload causing the decoder to recurse until the Python interpreter crashes with a RecursionError or exhausts memory, crashing the host application. This affects services parsing untrusted ASN.1 data such as LDAP, SNMP, Kerberos, or X.509 parsers. The vulnerability is fixed in pyasn1 version 5.20.0_1.
A Denial-of-Service (DoS) vulnerability exists in pyasn1 version 0.6.1 due to improper handling of malformed RELATIVE-OID values with excessive continuation octets in the decoder. This flaw can cause memory exhaustion and potentially hang systems or stop services that decode ASN.1 data, such as LDAP servers, TLS/SSL endpoints, and OCSP responders. The issue is fixed in pyasn1 version 5.16.1_4.
A TOCTOU (Time-of-Check-Time-of-Use) vulnerability exists in virtualenv up to version 20.36.1, allowing local attackers to exploit race conditions in directory creation. This can lead to symlink attacks on app_data and lock file operations, enabling cache poisoning, information disclosure, lock bypass, or denial of service on multi-user systems. The issue is fixed in version 20.36.2 by using atomic directory creation calls.
CVE-2024-53899 is a command injection vulnerability in virtualenv versions before 20.26.6, affecting the pdm product. The flaw arises because magic template strings in the activation scripts for virtual environments are not properly quoted, allowing an attacker to inject commands. This vulnerability is distinct from CVE-2024-9287. It affects pdm versions >=2.0.0 <2.9.3_2 and >=2.12.3 <2.19.2. A fix is available in versions 2.9.3_2 and 2.19.2.
JupyterLab versions from 4.1.0 up to but not including 4.6.2 have a vulnerability in the plugin manager that allows authenticated users to bypass administrator-enforced plugin lock rules via direct API requests. This bypass affects child plugins of multi-plugin extensions and scenarios where administrators issued a 'lock all' command. The vulnerability can impact data integrity and circumvent restrictions implemented through locked plugins. Fixed in JupyterLab 4.6.2 and 4.5.10.
JupyterLab versions 3.3.0 up to but not including 4.6.2 contain a cross-site scripting (XSS) vulnerability via crafted settings files named overrides.json. This file can be imported by users or automatically loaded from configuration directories. The vulnerability allows embedded code in the settings file to execute with the user's privileges, potentially reading or modifying notebooks and running code on the notebook server and connected kernels. The issue arises because certain notebook display settings were not properly validated before application. Patches are available in versions 4.6.2 and later.
JupyterLab versions from 4.5.0 up to but not including 4.6.2 have a vulnerability in the PyPI extension manager's blocklist enforcement. Authenticated users can bypass package-name blocking by using PyPI-equivalent spellings, allowing installation of otherwise blocked extensions. This can impact the integrity and availability of the single-user server instance, especially in deployments with custom allow/block lists and restricted kernel access. The issue is fixed in version 4.6.2.
JupyterLab's image viewer contains a cross-site scripting (XSS) vulnerability when opening a specially crafted image file and then opening it in a new browser tab. This vulnerability can lead to remote code execution on the JupyterLab server. Versions prior to 4.6.2 are affected. The issue is patched in versions 4.6.2 and 4.5.10. As a workaround, disabling the image viewer plugin can mitigate the risk.