Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
CVE-2026-61668
  • github.com/diracgrid/dirac
 DIRAC: Pilot code downloaded over unverified HTTPS connection 15 Sep
  • Fix available
  • Severity - 8.1 (High)
CVE-2026-61667
  • github.com/diracgrid/dirac
 DIRAC: RCE in FileCatalog DatasetManager via SQL injection + eval 15 Sep
  • Fix available
  • Severity - 9.9 (Critical)
CVE-2026-45579
  • github.com/diracgrid/dirac
 DIRAC: RCE in RequestManager due to eval on untrusted input 15 Sep
  • Fix available
  • Severity - 9.9 (Critical)
CVE-2025-54066
  • github.com/diracgrid/diracx-web
 DiracX-Web login page has Open Redirect vulnerability 17 Jul 2025
  • Fix available
  • Severity - 4.7 (Medium)
CVE-2024-29905
  • github.com/diracgrid/dirac
 DIRAC: Unauthorized users can read proxy contents during generation 09 Apr 2024
  • Fix available
  • Severity - 8.1 (High)
CVE-2024-24825
  • github.com/diracgrid/dirac
 TokenManager not checking permissions on cached tokens in DIRAC 08 Feb 2024
  • Fix available
  • Severity - 9.1 (Critical)