astropy vulnerabilities

Products

• astropy 1

Latest astropy CVEs

Newest publication first

1. CVE-2023-41334 astropy vulnerable to RCE in TranformGraph().to_dot_graph function

   Published 2024-03-18

   High·CVSS 8.4

   Astropy is a project for astronomy in Python that fosters interoperability between Python astronomy packages. Version 5.3.2 of the Astropy core package is vulnerable to remote code execution due to improper input validation in the TranformGraph().to_dot_graph function. A maliciou...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.