Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/aim@3.26.0.dev1
purl pkg:pypi/aim@3.26.0.dev1
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score 4.1
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
PYSEC-2026-258
Aliases:
CVE-2024-8769
GHSA-4qcx-jx49-6qrh
Aim path traversal in LockManager.release_locks A vulnerability in the `LockManager.release_locks` function in aimhubio/aim (commit bb76afe) allows for arbitrary file deletion … There are no reported fixed by versions.
PYSEC-2026-1087
Aliases:
CVE-2025-51464
GHSA-gmvv-rj92-9w35
Aim vulnerable to Cross-site Scripting Cross-site Scripting (XSS) in aimhubio Aim 3.28.0 allows remote attackers to execute arbitrary JavaScript in … There are no reported fixed by versions.
PYSEC-2026-1088
Aliases:
CVE-2025-5321
GHSA-gp5h-f9c5-8355
Aim Vulnerable to Sandbox Escape Leading to Remote Code Execution A vulnerability classified as critical was found in aimhubio aim … There are no reported fixed by versions.
This package is not known to fix any advisories.