Skip to content
OpenAdvisories

Vendor

mesop-dev

6 known vulnerabilities.

Products

mesop 6
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-33057 Public exploit

    Mesop Affected by Unauthenticated Remote Code Execution via Test Suite Route /exec-py

    Mesop is a Python-based UI framework that allows users to build web applications. In versions 1.2.2 and below, an explicit web endpoint inside the ai/ testing module infrastructure directly ingests untrusted Python code strings unconditionally without authent…

    mesop-dev mesop mesop PyPI
  • Critical 10.0
    CVE-2026-33054

    Mesop: Path Traversal utilizing `FileStateSessionBackend` leads to Application Denial of Service and File Write/Deletion

    Mesop is a Python-based UI framework that allows users to build web applications. Versions 1.2.2 and below contain a Path Traversal vulnerability that allows any user supplying an untrusted state_token through the UI stream payload to arbitrarily target files…

    mesop-dev mesop mesop PyPI