https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T16:50:30.490842+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-224085 EUVD-2026-224085 2026-10-03T16:50:30.568382+00:00 EUVD-2026-224085 https://cve.radiocsirt.org/vuln/fkie_cve-2024-7760 fkie_cve-2024-7760 2026-10-03T16:50:30.568431+00:00

aimhubio/aim version 3.22.0 contains a Cross-Site Request Forgery (CSRF) vulnerability in the tracking server. The vulnerability is due to overly permissive CORS settings, allowing cross-origin requests from all origins. This enables CSRF attacks on all endpoints of the tracking server, which can be chained with other existing vulnerabilities such as remote code execution, denial of service, and arbitrary file read/write.

 https://cve.radiocsirt.org/vuln/ghsa-38r9-3j52-h92v GHSA-38r9-3j52-h92v — Aim vulnerable to Cross-Site Request Forgery 2026-10-03T16:50:30.568468+00:00

Affected: PyPI: aim

aimhubio/aim version 3.22.0 contains a Cross-Site Request Forgery (CSRF) vulnerability in the tracking server. The vulnerability is due to overly permissive CORS settings, allowing cross-origin requests from all origins. This enables CSRF attacks on all endpoints of the tracking server, which can be chained with other existing vulnerabilities such as remote code execution, denial of service, and arbitrary file read/write.

 https://cve.radiocsirt.org/vuln/pysec-2026-1082 PYSEC-2026-1082 — Aim vulnerable to Cross-Site Request Forgery 2026-10-03T16:50:30.568494+00:00

Affected: PyPI: aim

aimhubio/aim version 3.22.0 contains a Cross-Site Request Forgery (CSRF) vulnerability in the tracking server. The vulnerability is due to overly permissive CORS settings, allowing cross-origin requests from all origins. This enables CSRF attacks on all endpoints of the tracking server, which can be chained with other existing vulnerabilities such as remote code execution, denial of service, and arbitrary file read/write.