Vulnerabilities for aim

First version without a known vulnerability: 4.0.0a7

Details

• GHSA-gmvv-rj92-9w352025-07-22

  Aim vulnerable to Cross-site Scripting

• GHSA-gp5h-f9c5-83552025-05-29

  Aim Vulnerable to Sandbox Escape Leading to Remote Code Execution

• GHSA-fm93-g6xp-35xq2025-03-20

  Aim Excessive Data Query Operations in a Large Data Table vulnerability

• GHSA-j5qj-rg5j-j7c22025-03-20

  Aim Uncontrolled Resource Consumption vulnerability

• GHSA-4qcx-jx49-6qrh2025-03-20

  Aim path traversal in LockManager.release_locks

• GHSA-6w7p-xrvp-p7xv2025-03-20

  Aim allows denial of service due to no timeouts for some tracking server endpoints

• GHSA-r229-5wgf-f28g2025-03-20

  Aim Improper Access Control

• GHSA-38r9-3j52-h92v2025-03-20

  Aim vulnerable to Cross-Site Request Forgery

• GHSA-75px-35p4-qq6h2025-03-20

  Aim External Control of File Name or Path vulnerability

• GHSA-mrvr-7493-pfq32025-03-20

  Aim Path Traversal vulnerability

• GHSA-35p3-6j45-prwm2025-03-20

  Aim Uncontrolled Resource Consumption vulnerability

• GHSA-p6x3-v6g3-75572025-03-20

  Aim Relative Path Traversal vulnerability

• GHSA-v5pj-jrpv-h6g22025-03-20

  Aim vulnerable to Synchronous Access of Remote Resource without Timeout

• GHSA-fx47-jpv9-7hxr2025-03-20

  Aim Vulnerable to Denial of Service (DoS)

• GHSA-pmhg-f7wc-c97m2024-09-16

  Aim Stored XSS through TEXT EXPLORER

• GHSA-p9f2-jg9w-cx692024-07-29

  Aim Stored Cross-site Scripting Vulnerability

• GHSA-36h2-g4c8-9xcm2024-07-08

  Aim denial of service vulnerability

• GHSA-99w2-67h8-59482024-04-10

  Aim Cross-Site Request Forgery vulnerability allows user to delete runs and perform other operations

• GHSA-mxvw-cj37-8g2h2024-04-10

  Aim Web API vulnerable to Remote Code Execution

• GHSA-8phj-f9w2-cjcc2021-11-23

  Arbitrary file reading vulnerability in Aim

  Fixed in: 3.1.0