Description
An issue in the Pickle Python library of NASA AIT-Core v2.5.2 allows attackers to execute arbitrary commands.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | ait-core | <= 2.5.2 | — | GHSA-jqff-8g2v-642h |
High · 7.5
CVE-2024-35059
EUVD-2024-1672GHSA-jqff-8g2v-642hPYSEC-2026-264
NASA AIT-Core vulnerable to remote code execution
Published May 21, 2024 · Updated Aug 2, 2024 · Assigned by mitre