Skip to content
OpenAdvisories

Vendor

DIRACGrid

6 known vulnerabilities.

Products

DIRAC 5 diracx-web 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.1
    CVE-2026-61668

    DIRAC: Pilot code downloaded over unverified HTTPS connection

    DIRAC is an interware, meaning a software framework for distributed computing. Prior to versions 8.0.79, 9.0.22, and 9.1.10, WorkloadManagementSystem/Utilities/PilotWrapper.py pilotWrapperScript uses ssl._create_unverified_context to download the second-stage…

    DIRACGrid DIRAC dirac PyPI
  • High 8.1
    CVE-2024-29905

    DIRAC: Unauthorized users can read proxy contents during generation

    DIRAC is an interware, meaning a software framework for distributed computing. Prior to version 8.0.41, during the proxy generation process (e.g., when using `dirac-proxy-init`), it is possible for unauthorized users on the same machine to gain read access to…

    DIRACGrid DIRAC dirac PyPI