Energieautarkes Wohnquartier - Backend

Certifi removes GLOBALTRUST root certificate

Keras: HDF5 virtual datasets can disclose local files

Werkzeug safe_join() allows Windows special device names

Werkzeug debugger vulnerable to remote execution when interacting with attacker controlled domain

urllib3 streaming API improperly handles highly compressed data

Keras is vulnerable to Deserialization of Untrusted Data

The Keras `Model.load_model` method **silently** ignores `safe_mode=True` and allows arbitrary code execution when a `.h5`/`.hdf5` file is loaded.

Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API)

Keras has a Local File Disclosure via HDF5 External Storage During Keras Weight Loading

Flask-CORS vulnerable to Improper Handling of Case Sensitivity

Pillow `BdfFontFile`: `Image.new()` called without `_decompression_bomb_check()` — bomb protection bypass via font loading

urllib3 does not control redirects in browsers and Node.js

Keras has an untrusted deserialization vulnerability

Pillow: WindowsViewer.get_command() OS command injection via unescaped shell path

Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching

Keras: tar extraction permits symlink-based path traversal

Keras: Lambda deserialization can bypass safe mode and execute code

setuptools has a path traversal vulnerability in PackageIndex.download that leads to Arbitrary File Write

Python-Markdown has an Uncaught Exception

Pillow: `FontFile.compile()`: `Image.new()` called without `_decompression_bomb_check()`

Pillow has a heap buffer overflow with nested list coordinates

Pillow: Out-of-bounds read via attacker-controlled row stride on Pillow's mmap path (McIdas AREA files)

Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix

Flask session does not add `Vary: Cookie` header when accessed in some ways

Pillow: Heap out-of-bounds write `Image.paste()` / `Image.crop()` via signed coordinate overflow

Keras model loading is vulnerable to denial of service through HDF5 shape bombs

fontTools is Vulnerable to Arbitrary File Write and XML injection in fontTools.varLib

protobuf affected by a JSON recursion depth bypass

Flask-CORS improper regex path matching vulnerability

flask-cors vulnerable to log injection when the log level is set to debug

Werkzeug safe_join() allows Windows special device names with compound extensions

protobuf-python has a potential Denial of Service issue

Wheel Affected by Arbitrary File Permission Modification via Path Traversal in wheel unpack

Pillow `PcfFontFile._load_bitmaps()`: `Image.frombytes()` called without `_decompression_bomb_check()` — bomb protection bypass via PCF font loading

Flask-CORS allows for inconsistent CORS matching

Requests vulnerable to .netrc credentials leak via malicious URLs

Pillow: Controlled heap out-of-bounds write in Pillow `ImageCmsTransform.apply()` via output mode mismatch

Requests `Session` object does not verify requests after making first request with verify=False

Keras vulnerable to CVE-2025-1550 bypass via reuse of internal functionality

Pillow affected by out-of-bounds write when loading PSD images

Jinja2 vulnerable to sandbox breakout through attr filter selecting format method

setuptools vulnerable to Command Injection via package URL

Werkzeug safe_join not safe on Windows

Pillow TGA RLE encoder can serialize up to ~57 KB of adjacent heap data into generated images

Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function

Keras: DiskIOStore permits path traversal through crafted layer names

urllib3 allows an unbounded number of links in the decompression chain

Jinja has a sandbox breakout through malicious filenames