Skip to content
OpenAdvisories

Package · PyPI

dirac

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.1
    CVE-2026-61668

    DIRAC: Pilot code downloaded over unverified HTTPS connection

    DIRAC is an interware, meaning a software framework for distributed computing. Prior to versions 8.0.79, 9.0.22, and 9.1.10, WorkloadManagementSystem/Utilities/PilotWrapper.py pilotWrapperScript uses ssl._create_unverified_context to download the second-stage…

    DIRACGrid DIRAC dirac PyPI
  • High 8.5
    GHSA-7xw9-549r-8jrc

    DIRAC: SQL injection and lack of access control in PilotManager service

    ### Details A number of the functions in PilotManager pass parameters directly through to the database layer, which then does not do any escaping on the parameters. For example setPilotStatus: https://github.com/DIRACGrid/DIRAC/blob/1738e7c6d2f31d26f1364255d9…

    dirac PyPI
  • High 8.1
    CVE-2024-29905

    DIRAC: Unauthorized users can read proxy contents during generation

    DIRAC is an interware, meaning a software framework for distributed computing. Prior to version 8.0.41, during the proxy generation process (e.g., when using `dirac-proxy-init`), it is possible for unauthorized users on the same machine to gain read access to…

    DIRACGrid DIRAC dirac PyPI