https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-20T13:00:29.856856+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-1497 CVE-2025-1497 — Remote Code Execution in PlotAI 2026-10-20T13:00:29.858532+00:00

Affected: MLJAR PlotAI

A vulnerability, that could result in Remote Code Execution (RCE), has been found in PlotAI. Lack of validation of LLM-generated output allows attacker to execute arbitrary Python code. Vendor commented out vulnerable line, further usage of the software requires uncommenting it and thus accepting the risk. The vendor does not plan to release a patch to fix this vulnerability.

 https://cve.radiocsirt.org/vuln/ghsa-2hmp-5wqg-f24h GHSA-2hmp-5wqg-f24h — PlotAI eval vulnerability 2026-10-20T13:00:29.858586+00:00

Affected: PyPI: plotai

A vulnerability, that could result in Remote Code Execution (RCE), has been found in PlotAI. Lack of validation of LLM-generated output allows attacker to execute arbitrary Python code. PlotAI commented out vulnerable line, further usage of the software requires uncommenting it and thus accepting the risk.