repository vulnerabilities

Products

• rae 1

Latest repository CVEs

Newest publication first

1. CVE-2026-108944 repository RAE Config-Driven Model Instantiation model_utils.py get_obj_from_str code injection

   Published 2026-10-13

   Low·CVSS 2.4 EPSS 0.12%

   A security vulnerability has been detected in repository RAE up to a4d18c4db766419cbe7cb8c02cd9f7ceb0ec9041. Affected by this vulnerability is the function get_obj_from_str of the file src/utils/model_utils.py of the component Config-Driven Model Instantiation. Such manipulation...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.