Manga Image Translator
Monthly
Remote code execution in manga-image-translator's share.py API server allows unauthenticated attackers to achieve full container compromise via unsafe pickle deserialization. The /execute/{method_name} and /simple_execute/{method_name} endpoints deserialize attacker-controlled request bodies with pickle.loads(), enabling arbitrary code execution in the server process. Publicly available exploit code exists, but the EPSS score (0.36%) indicates low current exploitation probability.
Remote code execution in manga-image-translator's share.py API server allows unauthenticated attackers to achieve full container compromise via unsafe pickle deserialization. The /execute/{method_name} and /simple_execute/{method_name} endpoints deserialize attacker-controlled request bodies with pickle.loads(), enabling arbitrary code execution in the server process. Publicly available exploit code exists, but the EPSS score (0.36%) indicates low current exploitation probability.