Search for packages
| purl | pkg:pypi/aim@3.18.0.dev2 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 4.4 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
PYSEC-2026-258
Aliases: CVE-2024-8769 GHSA-4qcx-jx49-6qrh |
Aim path traversal in LockManager.release_locks A vulnerability in the `LockManager.release_locks` function in aimhubio/aim (commit bb76afe) allows for arbitrary file deletion … | There are no reported fixed by versions. |
|
PYSEC-2026-260
Aliases: CVE-2024-2195 GHSA-mxvw-cj37-8g2h |
Aim Web API vulnerable to Remote Code Execution A critical Remote Code Execution (RCE) vulnerability was identified in the aimhubio/aim … | There are no reported fixed by versions. |
|
PYSEC-2026-259
Aliases: CVE-2024-6829 GHSA-75px-35p4-qq6h |
Aim External Control of File Name or Path vulnerability A vulnerability in aimhubio/aim version 3.19.3 allows an attacker to exploit … | There are no reported fixed by versions. |
|
PYSEC-2026-1095
Aliases: CVE-2024-12777 GHSA-v5pj-jrpv-h6g2 |
Aim vulnerable to Synchronous Access of Remote Resource without Timeout A vulnerability in aimhubio/aim version 3.25.0 allows for a denial … | There are no reported fixed by versions. |
|
PYSEC-2026-1081
Aliases: CVE-2024-6227 GHSA-36h2-g4c8-9xcm |
Aim denial of service vulnerability A vulnerability in aimhubio/aim version 3.19.3 allows an attacker to cause an infinite loop by … | There are no reported fixed by versions. |
|
PYSEC-2026-1083
Aliases: CVE-2024-8061 GHSA-6w7p-xrvp-p7xv |
Aim allows denial of service due to no timeouts for some tracking server endpoints In version 3.23.0 of aimhubio/aim, certain … | There are no reported fixed by versions. |
|
PYSEC-2026-1087
Aliases: CVE-2025-51464 GHSA-gmvv-rj92-9w35 |
Aim vulnerable to Cross-site Scripting Cross-site Scripting (XSS) in aimhubio Aim 3.28.0 allows remote attackers to execute arbitrary JavaScript in … | There are no reported fixed by versions. |
|
PYSEC-2026-1089
Aliases: CVE-2025-0189 GHSA-j5qj-rg5j-j7c2 |
Aim Uncontrolled Resource Consumption vulnerability In version 3.25.0 of aimhubio/aim, the tracking server is vulnerable to a denial of service … | There are no reported fixed by versions. |
|
PYSEC-2026-1082
Aliases: CVE-2024-7760 GHSA-38r9-3j52-h92v |
Aim vulnerable to Cross-Site Request Forgery aimhubio/aim version 3.22.0 contains a Cross-Site Request Forgery (CSRF) vulnerability in the tracking server. … | There are no reported fixed by versions. |
|
PYSEC-2026-1090
Aliases: CVE-2024-6851 GHSA-mrvr-7493-pfq3 |
Aim Path Traversal vulnerability In version 3.22.0 of aimhubio/aim, the LocalFileManager._cleanup function in the aim tracking server accepts a user-specified … | There are no reported fixed by versions. |
|
PYSEC-2026-1091
Aliases: CVE-2024-6483 GHSA-p6x3-v6g3-7557 |
Aim Relative Path Traversal vulnerability A vulnerability in the `runs/delete-batch` endpoint of aimhubio/aim version 3.19.3 allows for arbitrary file or … | There are no reported fixed by versions. |
|
PYSEC-2026-1088
Aliases: CVE-2025-5321 GHSA-gp5h-f9c5-8355 |
Aim Vulnerable to Sandbox Escape Leading to Remote Code Execution A vulnerability classified as critical was found in aimhubio aim … | There are no reported fixed by versions. |
|
PYSEC-2026-1080
Aliases: CVE-2024-12778 GHSA-35p3-6j45-prwm |
Aim Uncontrolled Resource Consumption vulnerability A vulnerability in aimhubio/aim version 3.25.0 allows for a denial of service (DoS) attack. The … | There are no reported fixed by versions. |
|
PYSEC-2026-1094
Aliases: CVE-2024-8238 GHSA-r229-5wgf-f28g |
Aim Improper Access Control In version 3.22.0 of aimhubio/aim, the AimQL query language uses an outdated version of the safer_getattr() … | There are no reported fixed by versions. |
|
PYSEC-2026-1093
Aliases: CVE-2024-8863 GHSA-pmhg-f7wc-c97m |
Aim Stored XSS through TEXT EXPLORER A vulnerability, which was classified as problematic, was found in aimhubio aim up to … | There are no reported fixed by versions. |
|
PYSEC-2026-1085
Aliases: CVE-2025-0190 GHSA-fm93-g6xp-35xq |
Aim Excessive Data Query Operations in a Large Data Table vulnerability In version 3.25.0 of aimhubio/aim, a denial of service … | There are no reported fixed by versions. |
|
PYSEC-2026-1086
Aliases: CVE-2024-10110 GHSA-fx47-jpv9-7hxr |
Aim Vulnerable to Denial of Service (DoS) In version 3.23.0 of aimhubio/aim, the ScheduledStatusReporter object can be instantiated to run … | There are no reported fixed by versions. |
|
PYSEC-2026-1092
Aliases: CVE-2024-6578 GHSA-p9f2-jg9w-cx69 |
Aim Stored Cross-site Scripting Vulnerability A stored cross-site scripting (XSS) vulnerability exists in aimhubio/aim version 3.19.3. The vulnerability arises from … | There are no reported fixed by versions. |