PyPI/aim CVE-2021-43775: high 8.6, EPSS 1.91%

Arbitrary file reading vulnerability in Aim

Action: Upgrade aim to 3.1.0 or later.

pip install aim==3.1.0

Affected

Fixed versions

Sources

• osv: GHSA-8phj-f9w2-cjcc
• https://github.com/aimhubio/aim/security/advisories/GHSA-8phj-f9w2-cjcc
• https://nvd.nist.gov/vuln/detail/CVE-2021-43775
• https://github.com/aimhubio/aim/issues/999
• https://github.com/aimhubio/aim/pull/1003
• https://github.com/aimhubio/aim/commit/b9e53df5e32d14bbd3a2c738e2db7187fb531e93
• https://github.com/aimhubio/aim
• https://github.com/aimhubio/aim/blob/0b99c6ca08e0ba7e7011453a2f68033e9b1d1bce/aim/web/api/views.py#L9-L16
• https://github.com/pypa/advisory-database/tree/main/vulns/aim/PYSEC-2021-839.yaml

CVE-2021-43775 · published 2021-11-23T22:03:23Z · modified 2026-07-08T06:28:33.851265807Z · JSON