pypi docarray vulnerabilities

Latest pypi docarray CVEs

Newest publication first

1. CVE-2025-5150 docarray Web API torch_dataset.py __getitem__ prototype pollution

   Published 2025-05-25

   Medium·CVSS 5.3

   A vulnerability was found in docarray up to 0.40.1. It has been rated as critical. Affected by this issue is the function getitem of the file /docarray/data/torch_dataset.py of the component Web API. The manipulation leads to improperly controlled modification of object prototype...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.