https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 04:01:58 +0000 https://cve.radiocsirt.org/vuln/cve-2024-6851 <p><strong>Affected:</strong> aimhubio/aim</p> <p>In version 3.22.0 of aimhubio/aim, the LocalFileManager._cleanup function in the aim tracking server accepts a user-specified glob-pattern for deleting files. The function does not verify that the matched files are within the directory managed by LocalFileManager, allowing a maliciously crafted glob-pattern to lead to arbitrary file deletion.</p> <p><strong>Affected:</strong> aimhubio/aim</p> <p>In version 3.22.0 of aimhubio/aim, the LocalFileManager._cleanup function in the aim tracking server accepts a user-specified glob-pattern for deleting files. The function does not verify that the matched files are within the directory managed by LocalFileManager, allowing a maliciously crafted glob-pattern to lead to arbitrary file deletion.</p> https://cve.radiocsirt.org/vuln/cve-2024-6851 https://cve.radiocsirt.org/vuln/ghsa-mrvr-7493-pfq3 <p><strong>Affected:</strong> PyPI: aim</p> <p>In version 3.22.0 of aimhubio/aim, the LocalFileManager._cleanup function in the aim tracking server accepts a user-specified glob-pattern for deleting files. The function does not verify that the matched files are within the directory managed by LocalFileManager, allowing a maliciously crafted glob-pattern to lead to arbitrary file deletion.</p> <p><strong>Affected:</strong> PyPI: aim</p> <p>In version 3.22.0 of aimhubio/aim, the LocalFileManager._cleanup function in the aim tracking server accepts a user-specified glob-pattern for deleting files. The function does not verify that the matched files are within the directory managed by LocalFileManager, allowing a maliciously crafted glob-pattern to lead to arbitrary file deletion.</p> https://cve.radiocsirt.org/vuln/ghsa-mrvr-7493-pfq3