PyPI/ait-core CVE-2024-35059: critical 9.8, EPSS 0.45%
NASA AIT-Core vulnerable to remote code execution
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 2.5.2 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-jqff-8g2v-642h
- https://nvd.nist.gov/vuln/detail/CVE-2024-35059
- https://github.com/NASA-AMMOS/AIT-Core
- https://www.linkedin.com/pulse/remote-code-execution-via-man-in-the-middle-more-ujkze
CVE-2024-35059 · published · modified · JSON