Search for packages
| purl | pkg:pypi/aim@3.25.0 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 4.4 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
PYSEC-2026-258
Aliases: CVE-2024-8769 GHSA-4qcx-jx49-6qrh |
Aim path traversal in LockManager.release_locks A vulnerability in the `LockManager.release_locks` function in aimhubio/aim (commit bb76afe) allows for arbitrary file deletion … | There are no reported fixed by versions. |
|
PYSEC-2026-260
Aliases: CVE-2024-2195 GHSA-mxvw-cj37-8g2h |
Aim Web API vulnerable to Remote Code Execution A critical Remote Code Execution (RCE) vulnerability was identified in the aimhubio/aim … | There are no reported fixed by versions. |
|
PYSEC-2026-1095
Aliases: CVE-2024-12777 GHSA-v5pj-jrpv-h6g2 |
Aim vulnerable to Synchronous Access of Remote Resource without Timeout A vulnerability in aimhubio/aim version 3.25.0 allows for a denial … | There are no reported fixed by versions. |
|
PYSEC-2026-1087
Aliases: CVE-2025-51464 GHSA-gmvv-rj92-9w35 |
Aim vulnerable to Cross-site Scripting Cross-site Scripting (XSS) in aimhubio Aim 3.28.0 allows remote attackers to execute arbitrary JavaScript in … | There are no reported fixed by versions. |
|
PYSEC-2026-1089
Aliases: CVE-2025-0189 GHSA-j5qj-rg5j-j7c2 |
Aim Uncontrolled Resource Consumption vulnerability In version 3.25.0 of aimhubio/aim, the tracking server is vulnerable to a denial of service … | There are no reported fixed by versions. |
|
PYSEC-2026-1088
Aliases: CVE-2025-5321 GHSA-gp5h-f9c5-8355 |
Aim Vulnerable to Sandbox Escape Leading to Remote Code Execution A vulnerability classified as critical was found in aimhubio aim … | There are no reported fixed by versions. |
|
PYSEC-2026-1080
Aliases: CVE-2024-12778 GHSA-35p3-6j45-prwm |
Aim Uncontrolled Resource Consumption vulnerability A vulnerability in aimhubio/aim version 3.25.0 allows for a denial of service (DoS) attack. The … | There are no reported fixed by versions. |
|
PYSEC-2026-1085
Aliases: CVE-2025-0190 GHSA-fm93-g6xp-35xq |
Aim Excessive Data Query Operations in a Large Data Table vulnerability In version 3.25.0 of aimhubio/aim, a denial of service … | There are no reported fixed by versions. |