{"data":{"id":"d85fa0b7-c237-48ca-9e99-cf669996a0c5","title":"CVE-2025-30358: Mesop is a Python-based UI framework that allows users to build web applications. A class pollution vulnerability in…","summary":"Mesop, a Python-based UI framework for building web applications, has a class pollution vulnerability in versions prior to 0.14.1. It lets attackers overwrite global variables and class attributes in certain Mesop modules at runtime, which can directly cause a denial of service and, given the application's implementation, identity confusion that may enable jailbreak attacks against LLMs. With suitable gadgets, it could also lead to remote code execution.","solution":"Upgrade to version 0.14.1 to obtain a fix for the issue.","labels":["security","safety"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-30358","publishedAt":"2025-03-27T15:16:02.297Z","cveId":"CVE-2025-30358","cweIds":["CWE-915"],"cvssScore":"8.1","cvssSeverity":"high","severity":"high","attackType":["jailbreak","denial_of_service"],"issueType":"vulnerability","affectedPackages":["mesop@< 0.14.1 (fixed: 0.14.1)"],"affectedPackageNames":["mesop"],"affectedPackageRefs":["pypi:mesop"],"affectedVendors":[],"affectedVendorsRaw":["Mesop"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"Mesop class pollution allows overwriting global variables at runtime","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.0071,"epssCheckedAt":"2026-11-04T18:09:13.788Z","kevDateAdded":null,"advisoryAliases":["GHSA-f3mf-hm6v-jfhh"],"affectedPackagesSource":"ghsa","affectedPackagesCheckedAt":"2026-10-10T03:54:06.137Z","patchAvailable":true,"disclosureDate":null,"fixReleasedAt":"2025-01-03T18:14:40.400Z","daysToFix":-83,"fixCheckedAt":"2026-10-29T21:44:50.779Z","capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["availability","integrity","safety"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":["AML.T0054"],"fixes":[{"ecosystem":"pypi","name":"mesop","fixedVersion":"0.14.1","matchedVersion":"0.14.1","fixReleasedAt":"2025-01-03T18:14:40.400Z","daysToFix":-83,"match":"ecosystem","source":"tracked","status":"found","checkedAt":"2026-10-29T21:44:50.628Z"}]}}