PYSEC-2026-1215
See a problem?- Import Source
- https://github.com/pypa/advisory-database/blob/main/vulns/basicsr/PYSEC-2026-1215.yaml
- JSON Data
- https://api.osv.dev/v1/vulns/PYSEC-2026-1215
- Aliases
- Published
- 2026-07-07T14:34:50.644260Z
- Modified
- 2026-07-07T17:46:33.718618187Z
- Severity
-
- 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L CVSS Calculator
- Summary
- XPixelGroup BasicSR Command Injection
- Details
-
XPixelGroup BasicSR through 1.4.2 might locally allow code execution in contrived situations where "scontrol show hostname" is executed in the presence of a crafted SLURM_NODELIST environment variable.
- References
-
- https://nvd.nist.gov/vuln/detail/CVE-2024-27763
- https://gist.github.com/aydinnyunus/40e1d8a3b529261ae654ff4891f1e192
- https://github.com/XPixelGroup/BasicSR
- https://github.com/XPixelGroup/BasicSR/blob/master/basicsr/utils/dist_util.py#L44
- https://pypi.org/project/basicsr
- https://github.com/advisories/GHSA-86w8-vhw6-q9qq
Affected packages
PyPI / basicsr
Package
- Name
- basicsr
- View open source insights on deps.dev
- Purl
- pkg:pypi/basicsr
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0Unknown introduced version / All previous versions are affectedLast affected1.4.2