Executive brief
Aim Cross-Site Request Forgery vulnerability allows user to delete runs and perform other operations
Affected products
- PyPI aim
Junglewise Threat Intelligence
CVE-2024-2196: PYSEC-2026-1084 - Aim Cross-Site Request Forgery vulnerability allows user to delete runs and perform other operations
CVE-2024-2196 · Severity: low · CVSS 3 · Published 2026-07-07
Technologies: aim (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-1087 - Aim vulnerable to Cross-site Scripting
- PYSEC-2026-1088 - Aim Vulnerable to Sandbox Escape Leading to Remote Code Execution
- PYSEC-2026-1085 - Aim Excessive Data Query Operations in a Large Data Table vulnerability
- PYSEC-2026-1089 - Aim Uncontrolled Resource Consumption vulnerability
- PYSEC-2026-1094 - Aim Improper Access Control