VYPR

X-AnyLabeling

by CVHub520

CVEs (1)

  • CVE-2026-79785MedAug 25, 2026
    risk 0.31cvss 5.9epss

    X-AnyLabeling's model downloader disabled TLS certificate verification. download_with_retry in anylabeling/services/auto_labeling/model.py built a context with ssl._create_unverified_context() and passed it to urllib.request.urlopen, so neither the certificate chain nor the…