11 Total advisories
11 Vulnerabilities
0 Malware
Dependency scanning
Check whether dirac is in your codebase
Corgea flags malicious and compromised dependencies with reachability analysis, so you fix the packages that actually run in your application instead of working through the whole lockfile.
Vulnerabilities
CRITICAL 9.9
CVE-2026-61667
DIRAC is vulnerable to RCE in FileCatalog DatasetManager via SQL injection + eval
CRITICAL 9.9
CVE-2026-45579
DIRAC is vulnerable to RCE in RequestManager due to eval on untrusted input
HIGH 8.1
CVE-2026-61668
DIRAC: Pilot code downloaded over unverified HTTPS connection
HIGH 8.5
GHSA-7xw9-549r-8jrc
DIRAC: SQL injection and lack of access control in PilotManager service
CRITICAL 9.1
CVE-2024-24825
DIRAC's TokenManager does not check permissions on cached tokens
HIGH 8.1
CVE-2026-61668
DIRAC: Pilot code downloaded over unverified HTTPS connection
CRITICAL 9.9
CVE-2026-45579
DIRAC is vulnerable to RCE in RequestManager due to eval on untrusted input
CRITICAL 9.9
CVE-2026-61667
DIRAC is vulnerable to RCE in FileCatalog DatasetManager via SQL injection + eval
HIGH 8.1
CVE-2024-29905
DIRAC: Unauthorized users can read proxy contents during generation
HIGH 8.1
CVE-2024-29905
DIRAC: Unauthorized users can read proxy contents during generation
HIGH 7.5
CVE-2024-24825
CVE-2024-24825
Browse more PyPI advisories
Learn What is SAST?
Static Application Security Testing finds vulnerabilities like this one in source code before it ships. Read the guide →
Ready to move
Start Securing
Free, no credit card | First findings in minutes