Skip to content
OpenAdvisories

Package · PyPI

aim

20 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.1
    CVE-2024-8769

    Arbitrary File Deletion via Relative Path Traversal in aimhubio/aim

    A vulnerability in the `LockManager.release_locks` function in aimhubio/aim (commit bb76afe) allows for arbitrary file deletion through relative path traversal. The `run_hash` parameter, which is user-controllable, is concatenated without normalization as par…

    aimhubio aimhubio/aim aim PyPI
  • Critical 9.1
    CVE-2024-6829

    Arbitrary File Overwrite through tarfile-extraction in aimhubio/aim

    A vulnerability in aimhubio/aim version 3.19.3 allows an attacker to exploit the `tarfile.extractall()` function to extract the contents of a maliciously crafted tarfile to arbitrary locations on the host server. The attacker can control `repo.path` and `run_…

    aimhubio aimhubio/aim aim PyPI
  • Critical 9.8
    CVE-2024-2195

    Remote Code Execution in aimhubio/aim

    A critical Remote Code Execution (RCE) vulnerability was identified in the aimhubio/aim project, specifically within the `/api/runs/search/run/` endpoint, affecting versions >= 3.0.0. The vulnerability resides in the `run_search_api` function of the `aim/web/…

    aimhubio aimhubio/aim aim PyPI