dirac
Built from the advisories that name this package: its registry metadata (versions, licence, dependencies) has not been fetched by this service yet.
At a glance
- Ecosystem
- PyPI
- Vulnerability status
- 11 advisory(ies) without a verdict
Advisories (11)
| Advisory | Affected versions | Latest version |
|---|---|---|
| GHSA-59qj-jcjv-662j DIRAC's TokenManager does not check permissions on cached tokens | 8.0.0 – < 8.0.37 ; < 8.0.37 | Undetermined |
| GHSA-7xw9-549r-8jrc DIRAC: SQL injection and lack of access control in PilotManager service | 6 – < 8.0.79 ; 8.1.0a1 – < 9.0.22 ; 9.1.0 – < 9.1.10 | Undetermined |
| GHSA-9jpv-c7p4-997x DIRAC is vulnerable to RCE in RequestManager due to eval on untrusted input | 6 – < 8.0.79 ; 8.1.0a1 – < 9.0.22 ; 9.1.0 – < 9.1.10 | Undetermined |
| GHSA-m4m7-4cw8-62j6 DIRAC is vulnerable to RCE in FileCatalog DatasetManager via SQL injection + eval | 6 – < 8.0.79 ; 8.1.0a1 – < 9.0.22 ; 9.1.0 – < 9.1.10 | Undetermined |
| GHSA-v6f3-gh5h-mqwx DIRAC: Unauthorized users can read proxy contents during generation | < 8.0.41 | Undetermined |
| GHSA-vg99-gr89-qhw9 DIRAC: Pilot code downloaded over unverified HTTPS connection | 6.20.1 – < 8.0.79 ; 8.1.0a1 – < 9.0.22 ; 9.1.0 – < 9.1.10 | Undetermined |
| PYSEC-2024-125 DIRAC is a distributed resource framework. In affected versions any user could get a token that has been requested by another user/agent. This may expose resour | < f9ddab755b9a69acb85e14d2db851d8ac0c9648c ; < 8.0.37 | Undetermined |
| PYSEC-2026-1295 DIRAC: Unauthorized users can read proxy contents during generation | < 8.0.41 | Undetermined |
| PYSEC-2026-3462 DIRAC is vulnerable to RCE in RequestManager due to eval on untrusted input | 6 – < 8.0.79 ; 8.1.0a1 – < 9.0.22 ; 9.1.0 – < 9.1.10 | Undetermined |
| PYSEC-2026-3463 DIRAC is vulnerable to RCE in FileCatalog DatasetManager via SQL injection + eval | 6 – < 8.0.79 ; 8.1.0a1 – < 9.0.22 ; 9.1.0 – < 9.1.10 | Undetermined |
| PYSEC-2026-3464 DIRAC: Pilot code downloaded over unverified HTTPS connection | 6.20.1 – < 8.0.79 ; 8.1.0a1 – < 9.0.22 ; 9.1.0 – < 9.1.10 | Undetermined |
Sources
| Source | Licence |
|---|