Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:pypi/plotai@0.0.5
Typepypi
Namespace
Nameplotai
Version0.0.5
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version0.0.7
Latest_non_vulnerable_version0.0.7
Affected_by_vulnerabilities
0
url VCID-r6su-rkkf-3kct
vulnerability_id VCID-r6su-rkkf-3kct
summary 
A vulnerability, that could result in Remote Code Execution (RCE), has been found in PlotAI. Lack of validation of LLM-generated output allows attacker to execute arbitrary Python code.
Vendor commented out vulnerable line, further usage of the software requires uncommenting it and thus accepting the risk. The vendor does not plan to release a patch to fix this vulnerability.
references
0
reference_url https://cert.pl/en/posts/2025/03/CVE-2025-1497
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://cert.pl/en/posts/2025/03/CVE-2025-1497
1
reference_url https://cert.pl/posts/2025/03/CVE-2025-1497
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://cert.pl/posts/2025/03/CVE-2025-1497
2
reference_url https://github.com/mljar/plotai
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://github.com/mljar/plotai
3
reference_url https://github.com/mljar/plotai/commit/bdcfb13484f0b85703a4c1ddfd71cb21840e7fde
reference_id
reference_type
scores
0
value 9.8
scoring_system cvssv3.1
scoring_elements CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
url https://github.com/mljar/plotai/commit/bdcfb13484f0b85703a4c1ddfd71cb21840e7fde
fixed_packages
0
url pkg:pypi/plotai@0.0.7
purl pkg:pypi/plotai@0.0.7
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:pypi/plotai@0.0.7
aliases CVE-2025-1497, PYSEC-2025-22
risk_score null
exploitability null
weighted_severity null
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-r6su-rkkf-3kct
Fixing_vulnerabilities
Risk_scorenull
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:pypi/plotai@0.0.5