py3.10-ambassador

3 results · Clear filters · Feed

• High 7.1
  CVE-2026-24049 Public exploit

  wheel Allows Arbitrary File Permission Modification via Path Traversal

  wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427. In versions 0.40.0 through 0.46.1, the unpack function is vulnerable to file permission modification through mishandling of file permissions after extraction. The logic b…

  pypa wheel open-webui katib-suggestion-hyperopt Debian Ubuntu Azure Linux Alpine Wolfi PyPI
  Jan 22, 2026
• High 7.5
  CVE-2025-67221 Public exploit

  orjson does not limit recursion for deeply nested JSON documents

  The orjson.dumps function in orjson thru 3.11.4 does not limit recursion for deeply nested JSON documents.

  kserve-storage-controller datadog-agent-7.72-core-integrations datadog-agent-7.73-core-integrations py3.13-ambassador Wolfi PyPI
  Jan 22, 2026
• High 7.7
  CVE-2025-47273 Public exploit

  setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write

  setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. A path traversal vulnerability in `PackageIndex` is present in setuptools prior to version 78.1.1. An attacker would be allowed to write files to ar…

  pypa setuptools kserve-storage-controller datadog-agent-7.77 Debian Ubuntu Azure Linux Wolfi PyPI
  May 17, 2025