Search for packages
| purl | pkg:pypi/aim@3.22.0 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 4.4 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
PYSEC-2026-258
Aliases: CVE-2024-8769 GHSA-4qcx-jx49-6qrh |
Aim path traversal in LockManager.release_locks A vulnerability in the `LockManager.release_locks` function in aimhubio/aim (commit bb76afe) allows for arbitrary file deletion … | There are no reported fixed by versions. |
|
PYSEC-2026-260
Aliases: CVE-2024-2195 GHSA-mxvw-cj37-8g2h |
Aim Web API vulnerable to Remote Code Execution A critical Remote Code Execution (RCE) vulnerability was identified in the aimhubio/aim … | There are no reported fixed by versions. |
|
PYSEC-2026-1095
Aliases: CVE-2024-12777 GHSA-v5pj-jrpv-h6g2 |
Aim vulnerable to Synchronous Access of Remote Resource without Timeout A vulnerability in aimhubio/aim version 3.25.0 allows for a denial … | There are no reported fixed by versions. |
|
PYSEC-2026-1083
Aliases: CVE-2024-8061 GHSA-6w7p-xrvp-p7xv |
Aim allows denial of service due to no timeouts for some tracking server endpoints In version 3.23.0 of aimhubio/aim, certain … | There are no reported fixed by versions. |
|
PYSEC-2026-1087
Aliases: CVE-2025-51464 GHSA-gmvv-rj92-9w35 |
Aim vulnerable to Cross-site Scripting Cross-site Scripting (XSS) in aimhubio Aim 3.28.0 allows remote attackers to execute arbitrary JavaScript in … | There are no reported fixed by versions. |
|
PYSEC-2026-1089
Aliases: CVE-2025-0189 GHSA-j5qj-rg5j-j7c2 |
Aim Uncontrolled Resource Consumption vulnerability In version 3.25.0 of aimhubio/aim, the tracking server is vulnerable to a denial of service … | There are no reported fixed by versions. |
|
PYSEC-2026-1082
Aliases: CVE-2024-7760 GHSA-38r9-3j52-h92v |
Aim vulnerable to Cross-Site Request Forgery aimhubio/aim version 3.22.0 contains a Cross-Site Request Forgery (CSRF) vulnerability in the tracking server. … | There are no reported fixed by versions. |
|
PYSEC-2026-1090
Aliases: CVE-2024-6851 GHSA-mrvr-7493-pfq3 |
Aim Path Traversal vulnerability In version 3.22.0 of aimhubio/aim, the LocalFileManager._cleanup function in the aim tracking server accepts a user-specified … | There are no reported fixed by versions. |
|
PYSEC-2026-1088
Aliases: CVE-2025-5321 GHSA-gp5h-f9c5-8355 |
Aim Vulnerable to Sandbox Escape Leading to Remote Code Execution A vulnerability classified as critical was found in aimhubio aim … | There are no reported fixed by versions. |
|
PYSEC-2026-1080
Aliases: CVE-2024-12778 GHSA-35p3-6j45-prwm |
Aim Uncontrolled Resource Consumption vulnerability A vulnerability in aimhubio/aim version 3.25.0 allows for a denial of service (DoS) attack. The … | There are no reported fixed by versions. |
|
PYSEC-2026-1094
Aliases: CVE-2024-8238 GHSA-r229-5wgf-f28g |
Aim Improper Access Control In version 3.22.0 of aimhubio/aim, the AimQL query language uses an outdated version of the safer_getattr() … | There are no reported fixed by versions. |
|
PYSEC-2026-1093
Aliases: CVE-2024-8863 GHSA-pmhg-f7wc-c97m |
Aim Stored XSS through TEXT EXPLORER A vulnerability, which was classified as problematic, was found in aimhubio aim up to … | There are no reported fixed by versions. |
|
PYSEC-2026-1085
Aliases: CVE-2025-0190 GHSA-fm93-g6xp-35xq |
Aim Excessive Data Query Operations in a Large Data Table vulnerability In version 3.25.0 of aimhubio/aim, a denial of service … | There are no reported fixed by versions. |
|
PYSEC-2026-1086
Aliases: CVE-2024-10110 GHSA-fx47-jpv9-7hxr |
Aim Vulnerable to Denial of Service (DoS) In version 3.23.0 of aimhubio/aim, the ScheduledStatusReporter object can be instantiated to run … | There are no reported fixed by versions. |