critical vulnerability

NASA AIT-Core vulnerable to remote code execution

No fix yetCritical · CVSS 9.8EPSS 0.45%

Published May 21, 2024 · updated Oct 26, 2026

What to do

Some affected packages have no fixed version yet: follow the advisory for mitigations and watch this page for the fix.
Redeploy and restart long-running processes so they load the fixed code.

Affected packages

PyPIait-core705 downloads/week

Vulnerable versions: <= 2.5.2
Fixed in: no fix yet

Check your project: pip show ait-core

Sources

GitHub Advisory GHSA-jqff-8g2v-642h
NVD CVE-2024-35059

CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') · CWE-319 Cleartext Transmission of Sensitive Information

← All critical vulnerabilities