Search for packages
| purl | pkg:pypi/aim@2.2.0 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 4.2 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-8phj-f9w2-cjcc
Aliases: CVE-2021-43775 |
Arbitrary file reading vulnerability in Aim ### Impact A path traversal attack aims to access files and directories that are … |
Vulnerable |
|
PYSEC-2021-839
Aliases: CVE-2021-43775 GHSA-8phj-f9w2-cjcc |
Aim is an open-source, self-hosted machine learning experiment tracking tool. Versions of Aim prior to 3.1.0 are vulnerable to a … |
Vulnerable |
|
PYSEC-2026-259
Aliases: CVE-2024-6829 GHSA-75px-35p4-qq6h |
Aim External Control of File Name or Path vulnerability A vulnerability in aimhubio/aim version 3.19.3 allows an attacker to exploit … | There are no reported fixed by versions. |
|
PYSEC-2026-1095
Aliases: CVE-2024-12777 GHSA-v5pj-jrpv-h6g2 |
Aim vulnerable to Synchronous Access of Remote Resource without Timeout A vulnerability in aimhubio/aim version 3.25.0 allows for a denial … | There are no reported fixed by versions. |
|
PYSEC-2026-1081
Aliases: CVE-2024-6227 GHSA-36h2-g4c8-9xcm |
Aim denial of service vulnerability A vulnerability in aimhubio/aim version 3.19.3 allows an attacker to cause an infinite loop by … | There are no reported fixed by versions. |
|
PYSEC-2026-1083
Aliases: CVE-2024-8061 GHSA-6w7p-xrvp-p7xv |
Aim allows denial of service due to no timeouts for some tracking server endpoints In version 3.23.0 of aimhubio/aim, certain … | There are no reported fixed by versions. |
|
PYSEC-2026-1087
Aliases: CVE-2025-51464 GHSA-gmvv-rj92-9w35 |
Aim vulnerable to Cross-site Scripting Cross-site Scripting (XSS) in aimhubio Aim 3.28.0 allows remote attackers to execute arbitrary JavaScript in … | There are no reported fixed by versions. |
|
PYSEC-2026-1089
Aliases: CVE-2025-0189 GHSA-j5qj-rg5j-j7c2 |
Aim Uncontrolled Resource Consumption vulnerability In version 3.25.0 of aimhubio/aim, the tracking server is vulnerable to a denial of service … | There are no reported fixed by versions. |
|
PYSEC-2026-1082
Aliases: CVE-2024-7760 GHSA-38r9-3j52-h92v |
Aim vulnerable to Cross-Site Request Forgery aimhubio/aim version 3.22.0 contains a Cross-Site Request Forgery (CSRF) vulnerability in the tracking server. … | There are no reported fixed by versions. |
|
PYSEC-2026-1090
Aliases: CVE-2024-6851 GHSA-mrvr-7493-pfq3 |
Aim Path Traversal vulnerability In version 3.22.0 of aimhubio/aim, the LocalFileManager._cleanup function in the aim tracking server accepts a user-specified … | There are no reported fixed by versions. |
|
PYSEC-2026-1091
Aliases: CVE-2024-6483 GHSA-p6x3-v6g3-7557 |
Aim Relative Path Traversal vulnerability A vulnerability in the `runs/delete-batch` endpoint of aimhubio/aim version 3.19.3 allows for arbitrary file or … | There are no reported fixed by versions. |
|
PYSEC-2026-1088
Aliases: CVE-2025-5321 GHSA-gp5h-f9c5-8355 |
Aim Vulnerable to Sandbox Escape Leading to Remote Code Execution A vulnerability classified as critical was found in aimhubio aim … | There are no reported fixed by versions. |
|
PYSEC-2026-1080
Aliases: CVE-2024-12778 GHSA-35p3-6j45-prwm |
Aim Uncontrolled Resource Consumption vulnerability A vulnerability in aimhubio/aim version 3.25.0 allows for a denial of service (DoS) attack. The … | There are no reported fixed by versions. |
|
PYSEC-2026-1093
Aliases: CVE-2024-8863 GHSA-pmhg-f7wc-c97m |
Aim Stored XSS through TEXT EXPLORER A vulnerability, which was classified as problematic, was found in aimhubio aim up to … | There are no reported fixed by versions. |
|
PYSEC-2026-1085
Aliases: CVE-2025-0190 GHSA-fm93-g6xp-35xq |
Aim Excessive Data Query Operations in a Large Data Table vulnerability In version 3.25.0 of aimhubio/aim, a denial of service … | There are no reported fixed by versions. |
|
PYSEC-2026-1084
Aliases: CVE-2024-2196 GHSA-99w2-67h8-5948 |
Aim Cross-Site Request Forgery vulnerability allows user to delete runs and perform other operations aimhubio/aim is vulnerable to Cross-Site Request … | There are no reported fixed by versions. |
|
PYSEC-2026-1092
Aliases: CVE-2024-6578 GHSA-p9f2-jg9w-cx69 |
Aim Stored Cross-site Scripting Vulnerability A stored cross-site scripting (XSS) vulnerability exists in aimhubio/aim version 3.19.3. The vulnerability arises from … | There are no reported fixed by versions. |