PySpector
ParzivalHack · 3 CVEs
CVE-2026-41206
MEDIUM
PySpector has a Plugin Code Execution Bypass via Incomplete Static Analysis in PluginSecurity.validate_plugin_code
Apr 23, 2026
CVE-2026-33140
MEDIUM
PySpector: Stored XSS in PySpector HTML Report Generation leads to Javascript Code Execution
Mar 20, 2026
CVE-2026-33139
HIGH
PySpector: Plugin Sandbox Bypass leads to Arbitrary Code Execution
Mar 20, 2026
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-41206 | PySpector has a Plugin Code Execution Bypass via Incomplete Static Analysis in PluginSecurity.validate_plugin_code | MEDIUM | 0.19% | Apr 23, 2026 |
| CVE-2026-33140 | PySpector: Stored XSS in PySpector HTML Report Generation leads to Javascript Code Execution | MEDIUM | 0.26% | Mar 20, 2026 |
| CVE-2026-33139 | PySpector: Plugin Sandbox Bypass leads to Arbitrary Code Execution | HIGH | 0.18% | Mar 20, 2026 |
Showing 1 to 3 of 3 CVEs