Executive brief
Aim vulnerable to Cross-site Scripting
Affected products
- PyPI aim
Junglewise Threat Intelligence
CVE-2025-51464: PYSEC-2026-1087 - Aim vulnerable to Cross-site Scripting
CVE-2025-51464 · Severity: medium · CVSS 4 · Published 2026-07-07
Technologies: aim (PyPI). Vendors: PyPI.
Related threats
- PYSEC-2026-1088 - Aim Vulnerable to Sandbox Escape Leading to Remote Code Execution
- PYSEC-2026-1085 - Aim Excessive Data Query Operations in a Large Data Table vulnerability
- PYSEC-2026-1089 - Aim Uncontrolled Resource Consumption vulnerability
- PYSEC-2026-1094 - Aim Improper Access Control
- PYSEC-2026-1083 - Aim allows denial of service due to no timeouts for some tracking server endpoints