CVE-2025-49653
2 advisories.
PyPI/backend-ai CVE-2025-49653: high 8, EPSS 0.35%
BackendAI vulnerable to Exposure of Sensitive Information to an Unauthorized Actor
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 25.3.3 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-hxvr-gg2w-j48x
- https://nvd.nist.gov/vuln/detail/CVE-2025-49653
- https://github.com/lablup/backend.ai/pull/7587
- https://github.com/lablup/backend.ai
- https://hiddenlayer.com/sai_security_advisor/2025-05-backendai-49653
- https://hiddenlayer.com/sai_security_advisor/2025-06-backendai
CVE-2025-49653 · published · modified · JSON
PyPI/backend-ai CVE-2025-49653: high 8, EPSS 0.35%
BackendAI vulnerable to Exposure of Sensitive Information to an Unauthorized Actor
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 25.3.3 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2026-1211
- https://nvd.nist.gov/vuln/detail/CVE-2025-49653
- https://github.com/lablup/backend.ai/pull/7587
- https://github.com/lablup/backend.ai
- https://hiddenlayer.com/sai_security_advisor/2025-05-backendai-49653
- https://hiddenlayer.com/sai_security_advisor/2025-06-backendai
- https://pypi.org/project/backend-ai
- https://github.com/advisories/GHSA-hxvr-gg2w-j48x
CVE-2025-49653 · published · modified · JSON