CRITICAL9.1PyPI
GHSA-59qj-jcjv-662j· CVE-2024-24825, PYSEC-2024-125DIRAC's TokenManager does not check permissions on cached tokens
Modified: 9/10/2026
package
PyPI/dirac
pkg:pypi/dirac
HIGH8.5PyPI
GHSA-7xw9-549r-8jrcDIRAC: SQL injection and lack of access control in PilotManager service
Modified: 7/13/2026
CRITICAL9.9PyPI
GHSA-9jpv-c7p4-997x· CVE-2026-45579, PYSEC-2026-3462DIRAC is vulnerable to RCE in RequestManager due to eval on untrusted input
Modified: 7/23/2026
CRITICAL9.9PyPI
GHSA-m4m7-4cw8-62j6· CVE-2026-61667, PYSEC-2026-3463DIRAC is vulnerable to RCE in FileCatalog DatasetManager via SQL injection + eval
Modified: 7/23/2026
HIGH8.1PyPI
GHSA-v6f3-gh5h-mqwx· CVE-2024-29905, PYSEC-2026-1295DIRAC: Unauthorized users can read proxy contents during generation
Modified: 7/7/2026
HIGH8.1PyPI
GHSA-vg99-gr89-qhw9· CVE-2026-61668, PYSEC-2026-3464DIRAC: Pilot code downloaded over unverified HTTPS connection
Modified: 7/23/2026
HIGH7.5PyPI
PYSEC-2024-125· CVE-2024-24825, GHSA-59qj-jcjv-662jModified: 11/21/2024
HIGH8.1PyPI
PYSEC-2026-1295· CVE-2024-29905, GHSA-v6f3-gh5h-mqwxDIRAC: Unauthorized users can read proxy contents during generation
Modified: 7/7/2026
CRITICAL9.9PyPI
PYSEC-2026-3462· CVE-2026-45579, GHSA-9jpv-c7p4-997xDIRAC is vulnerable to RCE in RequestManager due to eval on untrusted input
Modified: 7/23/2026
CRITICAL9.9PyPI
PYSEC-2026-3463· CVE-2026-61667, GHSA-m4m7-4cw8-62j6DIRAC is vulnerable to RCE in FileCatalog DatasetManager via SQL injection + eval
Modified: 7/23/2026
HIGH8.1PyPI
PYSEC-2026-3464· CVE-2026-61668, GHSA-vg99-gr89-qhw9DIRAC: Pilot code downloaded over unverified HTTPS connection
Modified: 7/23/2026