PyPI package vulnerabilities
The newest vulnerabilities affecting PyPI packages, up to 200. Subscribe by RSS.
- GHSA-VPP8-G58W-M8MPTwisted: Unauthenticated Remote Denial of Service in the Twisted HTTP/2 Server via Rapid Stream Resettwisted
- CVE-2026-118668LangGraph JavaScript custom authentication may permit cross-user Store accesslangchain-ai langgraph-api · langgraph-api
- CVE-2026-118667LangGraph: Unencoded identifiers in LangGraph SDK v3 streaming can redirect authenticated GET requestslangchain-ai langgraph · langchain-ai langgraph-sdk +2
- CVE-2026-116694OpenTelemetry Python: Unbounded memory allocation in Jaeger baggage propagationopen-telemetry opentelemetry-python · opentelemetry-propaga…
- CVE-2026-116692MLflow: Remote code execution on unauthenticated MLflow servers via third-party scorer deserialization importing caller-placed artifact modulesmlflow
- CVE-2026-116691MLflow CrewAI autologging records LLM provider API keys in logged trace spansmlflow
- CVE-2026-116690MLflow: Arbitrary file read on unauthenticated MLflow servers via prompt model version sourcemlflow
- CVE-2026-116686Model Context Protocol Python SDK: Client fetched server-chosen $ref URLs while validating tool results against output schemasmodelcontextprotocol python-sdk · mcp
- CVE-2026-116685Model Context Protocol Python SDK: HTTP client transports followed cross-origin redirects carrying custom headers and bodiesmodelcontextprotocol python-sdk · mcp
- CVE-2026-116684Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource servermodelcontextprotocol python-sdk · mcp
- GHSA-WF6J-7HVR-GR93Hydra legacy target blacklist permits unsafe PyYAML loadinghydra-core
- GHSA-3W55-933P-8PV5Strands Agents: Local Privilege Escalation via Symlink Attack in Default Session File Storagestrands-agents
- GHSA-763V-5PJM-FX36Strands Agents: Default FileSessionManager storage is world-readable on shared systemsstrands-agents
- GHSA-G5FF-637F-6Q2MLiteLLM: internal_user_viewer arbitrary local file read via `vertex_ai_credentials`litellm
- GHSA-HHWW-MRG2-969HLiteLLM vulnerable to reflected XSS in /sso/debug/callbacklitellm
- CVE-2026-117601Electrum before 4.8.3 Missing Signature Verification of Mempool Transactionsspesmilo electrum · electrum
- CVE-2026-116589Datadog dd-trace-py: IAST instrumentation can lead to application DOSDataDog dd-trace-py · ddtrace
- CVE-2026-116588Datadog dd-trace-py: ReDOS in URL query string obfuscationDataDog dd-trace-py · ddtrace
- CVE-2026-116579Autobahn Python: permessage-brotli inflates a whole frame before maxMessagePayloadSize is checked (incomplete fix of GHSA-hxp9-w8x3-p566)crossbario autobahn-python · autobahn
- CVE-2026-116578Tornado: Open redirect in RedirectHandler via protocol-relative URLstornadoweb tornado · tornado
- CVE-2026-116577Tornado: Quadratic CPU usage when parsing HTTP headers with line foldingtornadoweb tornado · tornado
- CVE-2026-116575Mem0: Cross-tenant conversation leak via unescaped delimiter collision in session-scope key (_build_session_scope)mem0ai mem0 · mem0ai
- CVE-2026-115927Tornado: Event loop blocking and excess memory use from chunked bodies with many small chunkstornadoweb tornado · tornado
- CVE-2026-115924Rembg: Unauthenticated SAM model injection permits local-file disclosure through malicious ONNX graphsdanielgatis rembg · rembg
- CVE-2026-115922ONNX: Denial of service via unchecked expansion of packed sub-byte tensors in ONNX Python APIsonnx
- CVE-2026-115921ONNX: Null Pointer Dereference in ScanInferenceFunction Due to Missing Required Attributeonnx
- CVE-2026-115920ONNX: Out-of-bounds read in ConvTranspose shape inference via undersized weight rankonnx
- CVE-2026-115919ONNX: Out-of-Bounds Read in RNN/GRU/LSTM Shape Inference (Old Opsets, Missing Rank Check)onnx
- CVE-2026-115918vLLM: Responses API bypasses trust_request_chat_template for chat_template_kwargsvllm-project vllm · vllm
- CVE-2026-115917vLLM: Permissive default CORS origins allow cross-origin requests to the vLLM HTTP servervllm-project vllm · vllm
- CVE-2026-115916vLLM: Out-of-vocabulary prompt token id passes input validation and triggers a CUDA device-side assert (engine crash / DoS)vllm-project vllm · vllm
- CVE-2026-115915vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCEvllm-project vllm · vllm
- CVE-2026-115914vLLM DeepSeek-OCR image processing vulnerable to denial of servicevllm-project vllm · vllm
- CVE-2026-115913vLLM: Phi-4 multimodal audio encoder materializes and retains full attention matrices: a single max-length audio OOM-crashes the vLLM enginevllm-project vllm · vllm
- CVE-2026-115912vLLM: Public multimodal SHM handle forgery reaches worker-side `pickle.loads()` with insecure serialization disabledvllm-project vllm · vllm
- CVE-2026-115911vLLM: DoS via unbounded chat_template Jinja2 rendering exhausts the renderer thread poolvllm-project vllm · vllm
- CVE-2026-115910Python Social Auth: OpenID Connect nonce is not bound to the browser session, so a stolen authorization code logs the attacker in as the victimpython-social-auth social-core · social-auth-core
- CVE-2026-116178vLLM 0.20.0 before 0.30.0 DoS via /inference/v1/generate mm_placeholdersvllm-project vllm · vllm
- CVE-2026-116177vLLM 0.10.2 before 0.25.0 DoS via Nemotron-VL Processor Decompression-Bomb Guard Bypassvllm-project vllm · vllm
- CVE-2026-116176vLLM 0.9.2 before 0.24.0 SSRF via X-Request-Id in P2pNcclConnectorvllm-project vllm · vllm
- CVE-2026-116173vLLM 0.22.0 before 0.24.0 Denial of Service via gRPC output_candidates.token_idsvllm-project vllm · vllm
- GHSA-XMJ3-9GF7-H52Wsetuptools: Windows path escape via namespace_packages.txt during legacy wheel installation Descriptionsetuptools
- GHSA-7XGJ-8392-5Q4RFastMCP: Post-transform component authorization is skipped on direct callsfastmcp · fastmcp-slim
- GHSA-VQQP-X5QM-5QP4FastMCP MCP client wrappers construct M2M OAuth providers without issuer binding — client secret redirectable to attacker-advertised authorifastmcp · fastmcp-slim
- CVE-2026-115886MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpointsmlflow
- CVE-2026-115885LangGraph CLI prints the registry push token in `langgraph deploy --verbose` outputlangchain-ai langgraph · langgraph-cli
- CVE-2026-115883LangGraph: Namespace labels containing `.` reach other namespaces in Postgres and SQLite storeslangchain-ai langgraph · langchain-ai langgraph-checkpoi… +3
- CVE-2026-115877Twisted: HTTP Request Smuggling in twisted.web via a Bare CR or LF in a Header Valuetwisted
- CVE-2026-83813Twisted: DNS Response Spoofing in twisted.names Due to Missing Source Address Validationtwisted
- CVE-2026-115778Twisted: Unauthenticated Remote Denial of Service in the Twisted conch Telnet Transport via an Unbounded Subnegotiation Buffertwisted
- CVE-2026-115776Twisted: Unauthenticated Remote Denial of Service in the Twisted IRC Server via an Unbounded Line Buffertwisted
- CVE-2026-115775Twisted: Unauthenticated Remote Denial of Service in the Twisted words domish XML Element Stream via an Unbounded Element Treetwisted
- CVE-2026-115774Twisted: Denial of Service in the Twisted IMAP4 Server via a Negative Literal Size in SEARCHtwisted
- CVE-2026-115586virtualenv: Bash activator leaves the --prompt value unescaped in PS1 when promptvars is off, so prompt expansion later executes it (regression in 21.14.9)pypa virtualenv · virtualenv
- CVE-2026-115585pypdf: Possible long runtimes for repeated malformed cross-reference entries (Follow-up)py-pdf pypdf · pypdf
- CVE-2026-115580pypdf: Possible long runtimes for large xref table header limitspy-pdf pypdf · pypdf
- CVE-2026-115572pypdf: Possible long runtimes for repeated references to the same missing objectpy-pdf pypdf · pypdf
- CVE-2026-54711PGHoard: Password written to debug logAiven-Open pghoard · pghoard
- CVE-2026-57117PraisonAI: Compute-bridged file tools allow shell command injectionMervinPraison PraisonAI · praisonai
- CVE-2026-57121PraisonAI: Missing ownership check on DELETE endpoints allows members to delete others' content in Platform APIMervinPraison PraisonAI · praisonai-platform
- CVE-2026-57116PraisonAI: AgentOS remains unauthenticated after GHSA-pm96 patched version and allows remote agent invocationMervinPraison PraisonAI · praisonai
- CVE-2026-57114PraisonAI: Jobs webhook SSRF protection bypass via DNS rebindingMervinPraison PraisonAI · praisonai
- CVE-2026-57113PraisonAI GitHub template cache path traversal allows outside-cache file write and directory deletionMervinPraison PraisonAI · praisonai
- CVE-2026-56840PraisonAI: HTTPApproval dashboard renders tool arguments as raw HTML, allowing approval-page XSS to approve dangerous toolsMervinPraison PraisonAI · praisonai
- CVE-2026-56838PraisonAI recipe.run_stream skips dangerous-tool policy enforcementMervinPraison PraisonAI · praisonai
- CVE-2026-56837PraisonAI LinearBot processes unsigned webhooks when LINEAR_WEBHOOK_SECRET is missingMervinPraison PraisonAI · praisonai
- CVE-2026-56836PraisonAI recipe serve Typer command bypasses the non-localhost authentication guardMervinPraison PraisonAI · praisonai
- CVE-2026-56835PraisonAI Slack app_mention bypasses configured user/channel authorizationMervinPraison PraisonAI · praisonai
- CVE-2026-56834PraisonAI dynamic-context artifact tools read arbitrary host files outside artifact storageMervinPraison PraisonAI · praisonai
- CVE-2026-56833PraisonAI Dynamic Context history and terminal tools read files outside configured storage via path traversalMervinPraison PraisonAI · praisonai
- CVE-2026-56832PraisonAI DiscordApproval accepts unrelated channel messages as dangerous-tool approvalsMervinPraison PraisonAI · praisonai
- CVE-2026-114620Authlib: Unvalidated request_uri fetch in JWT-secured authorization request (JAR) leading to SSRFauthlib
- CVE-2026-114619Authlib: OpenID implicit grant checks raw scope instead of allowed scope before issuing ID tokensauthlib
- CVE-2026-114618Authlib: Default JWT bearer grant accepts assertions for the wrong audienceauthlib
- CVE-2026-114617Authlib: ID token can disable its own nonce validation via the nonce_supported claimauthlib
- CVE-2026-114616Authlib accepts an empty HMAC key, allowing JWS/JWT signature forgery (HS256/HS384/HS512)authlib
- CVE-2026-114615Authlib incomplete algorithm-confusion fix permits HMAC forgery with prefixed public keysauthlib
- CVE-2026-114614Authlib: is_secure_transport() loopback exemption can be bypassed with a userinfo component, allowing cleartext-HTTP URLs to non-loopback hostsauthlib
- CVE-2026-115419Unintended disclosure of data element to wrong session in Strands Agents SDK A2A ServerAWS strands-agents · AWS strands-agents/sdk +2
- CVE-2026-115355Mistune before 3.3.0 Path Traversal and XSS via Include Directivelepture mistune · mistune
- CVE-2026-114613MessagePack: Unbounded memory leak in msgpack C extension on strict_map_key validation failuremsgpack-python · msgpack
- CVE-2026-114612LiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt KeyBerriAI litellm · litellm
- CVE-2026-114610fpdf2: Exponential SVG '<use>' expansion causes CPU and memory exhaustion in 'FPDF.image()'py-pdf fpdf2 · fpdf2
- CVE-2026-114609fpdf2 implicitly loads external URLs and local image paths when rendering attacker-controlled contentpy-pdf fpdf2 · fpdf2
- CVE-2026-114608Pylint: Arbitrary code execution via pickle deserialization of the stats cache in PYLINT_HOMEpylint-dev pylint · pylint
- CVE-2026-114605dnspython dns.name.from_wire_parser() excessive CPU userthalley dnspython · dnspython
- CVE-2026-75507GraphQL-core: Denial of service via quadratic complexity in the OverlappingFieldsCanBeMerged validation rulegraphql-python graphql-core · graphql-core
- CVE-2026-75508GraphQL-core: Denial of service via comment tokens bypassing the parser's max_tokens limitgraphql-python graphql-core · graphql-core
- CVE-2026-114603OpenTelemetry Python: Unbounded tracestate parsing in opentelemetry-apiopen-telemetry opentelemetry-python · opentelemetry-api
- CVE-2026-114510Flexible GraphRAG: Cypher/Graph Injection via broken string-escaping in FalkorDB adapter (_escape()) - full graph wipe from ingested-document contentstevereiner flexible-graphrag · flexible-graphrag
- CVE-2026-111497Out-of-Bounds Write in Google Brotli DecoderGoogle Brotli · node +6
- CVE-2026-115324mem0 0.1.117 before 1.0.8 SQL Injection via Databricks Vector Storemem0ai mem0 · mem0ai
- CVE-2026-114501Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1python-pillow Pillow · pillow
- CVE-2026-96639Pillow multi-frame loaders can reuse stale native image storage after mode transitionspython-pillow Pillow · pillow
- CVE-2026-96636Pillow: Decompression-bomb protection bypass via multi-frame seek() in MPO and DCX (MpoImageFile.seek / DcxImageFile.seek)python-pillow Pillow · pillow
- CVE-2026-96640Pillow PDF append accepts malformed shared page-tree DAG causing resource exhaustionpython-pillow Pillow · pillow
- CVE-2026-96637Pillow: Decompression bomb check bypass in SpiderImagePlugin.seek() leads to unbounded allocation DoSpython-pillow Pillow · pillow
- CVE-2026-96778Pillow: Heap buffer overflow writing JPEG comment after ICC profile fills bufferpython-pillow Pillow · pillow
- CVE-2026-96643Pillow: PNG eXIf chunk makes EXIF parsing run in quadratic timepython-pillow Pillow · pillow
- CVE-2026-96644Pillow: Heap over-read in WMF/EMF rendering via 16-bit dimension truncation (Windows builds)python-pillow Pillow · pillow
- CVE-2026-96641Pillow: Reachable undefined behavior in native integer operations, potentially leading to denial of service or logic integrity compromisepython-pillow Pillow · pillow
- CVE-2026-96642Pillow: TarIO negative size field causes infinite CPU-spin looppython-pillow Pillow · pillow
- CVE-2026-96638Pillow: BMP RLE decoder memory-amplification DoS via unbounded delta escape / absolute modepython-pillow Pillow · pillow
- CVE-2026-114145GitPython validates a submodule's ".git" path only after cloning into it (RCE)gitpython-developers GitPython · gitpython
- CVE-2026-114140nbconvert: File write via path traversal in cell output filenamesjupyter nbconvert · nbconvert
- CVE-2026-114138Django REST framework: Accept header with many large quoted parameters burns ~19s of CPU per request in content negotiationencode django-rest-framework · djangorestframework
- CVE-2026-114137Django REST framework: TokenProxy.delete() reports success and revokes nothingencode django-rest-framework · djangorestframework
- CVE-2026-114136Django REST framework: JSONParser applies an attacker-named codec to the request streamencode django-rest-framework · djangorestframework
- CVE-2026-114135Jupyter Server: Gateway WebSocket handler bypasses kernel execute authorizationjupyter-server jupyter_server · jupyter-server
- CVE-2026-113795pypdf: Possible large memory usage for streams with multiple filterspy-pdf pypdf · pypdf
- CVE-2026-113794pypdf: Possible infinite loop when hitting EOF in standard xref tablepy-pdf pypdf · pypdf
- CVE-2026-113793pypdf: Possible infinite loop when removing tree itemspy-pdf pypdf · pypdf
- CVE-2026-113792pypdf: Possible infinite loop in PdfWriter.find_outline_itempy-pdf pypdf · pypdf
- CVE-2026-113791pypdf: Possible large memory usage when parsing content streamspy-pdf pypdf · pypdf
- CVE-2026-113790pypdf: Possible large memory usage when parsing arrays and dictionariespy-pdf pypdf · pypdf
- CVE-2026-113789pypdf: Possible long runtimes/large memory usage when retrieving form fieldspy-pdf pypdf · pypdf
- CVE-2026-113786pypdf: Unvalidated JPEG image data loadingpy-pdf pypdf · pypdf
- CVE-2026-114386Pydantic AI Harness before 0.59.0 CodeMode Tool Call Limit Bypass via run_codepydantic-ai-harness
- CVE-2026-114110Astral uv before 0.11.6 Arbitrary File Deletion via Wheel RECORD Entriesastral-sh uv · uv
- CVE-2026-114109uv before 0.11.15 Arbitrary File Write via Entry Point Namesastral-sh uv · uv
- CVE-2026-114108HKUDS Vibe-Trading before 0.1.7 Missing Authentication in FastAPI Server Enabling RCEHKUDS Vibe-Trading · vibe-trading-ai
- CVE-2026-114107HKUDS Vibe-Trading 0.1.0 before 0.1.7 Indirect Prompt Injection RCE via BashTool and BackgroundRunToolHKUDS Vibe-Trading · vibe-trading-ai
- CVE-2026-114106HKUDS Vibe-Trading 0.1.0 before 0.1.7 Path Traversal via read_document and safe_user_pathHKUDS Vibe-Trading · vibe-trading-ai
- CVE-2026-114098Dulwich 0.22.5 before 1.2.8 Path Traversal via Stash Pop Symlinksjelmer dulwich · dulwich
- CVE-2026-114097Dulwich 0.23.1 before 1.2.8 Symlink Path Traversal via filter_branch Index Filterjelmer dulwich · dulwich
- CVE-2026-114096Dulwich 0.24.0 before 1.2.8 Symlink Write-Through via porcelain.checkout pathsjelmer dulwich · dulwich
- CVE-2026-114095Dulwich before 1.2.9 Infinite Loop DoS via Pack.resolve_objectjelmer dulwich · dulwich
- CVE-2026-114094Dulwich before 1.2.9 Arbitrary File Write via DOS drive letter pathsjelmer dulwich · dulwich
- CVE-2026-114055vLLM 0.7.3 before 0.31.0 DoS via Unvalidated mm_processor_kwargsvllm-project vllm · vllm
- CVE-2026-114053vLLM 0.7.3 before 0.31.0 RCE via mm_processor_kwargs.code_revisionvllm-project vllm · vllm
- CVE-2026-114050vLLM before 0.31.0 Remote Engine Crash via Forged Multimodal UUIDvllm-project vllm · vllm
- CVE-2021-48020Vyper before 0.3.0 Memory Corruption via Internal Function Calls in Arraysvyperlang vyper · vyper
- CVE-2021-48019Vyper before 0.2.9 Incorrect RETURNDATASIZE in create_forwarder_to Proxiesvyperlang vyper · vyper
- CVE-2021-48018Vyper 0.2.13 before 0.2.15 Storage Corruption via @nonreentrant Decoratorvyperlang vyper · vyper
- CVE-2020-37289Vyper before 0.3.1 Improper Input Validation of uint8 Interface Return Valuesvyperlang vyper · vyper
- CVE-2020-37288Vyper 0.1.0b10 before 0.2.3 Invalid Jump Destination via Return in Nested Loopsvyperlang vyper · vyper
- CVE-2020-37287Vyper before 0.2.6 Call Stack Corruption via Complex Type Function Argumentsvyperlang vyper · vyper
- CVE-2020-37286Vyper 0.1.0b4 before 0.3.0 Memory Corruption via Nested Internal Function Callsvyperlang vyper · vyper
- CVE-2026-113726virtualenv activate runs commands from the environment name in zsh with PROMPT_SUBSTpypa virtualenv · virtualenv
- CVE-2026-113776virtualenv activation scripts run code from a path that contains a placeholder namepypa virtualenv · virtualenv
- CVE-2026-113732virtualenv activate.fish runs commands from a path or prompt with a backslash before a quotepypa virtualenv · virtualenv
- CVE-2026-113731djust: Arbitrary absolute-path file read in the find_handlers_for_template MCP tooldjust-org djust · djust
- CVE-2026-113725virtualenv bash activate runs commands from an environment name with a backslash before $pypa virtualenv · virtualenv
- CVE-2026-113724virtualenv: Deletion recovery can change a symlink target's modepypa virtualenv · virtualenv
- CVE-2026-113723virtualenv: Bash prompt values can change meaning under older compatibility modespypa virtualenv · virtualenv
- CVE-2026-113722virtualenv: Generated POSIX console launchers interpret destination paths as shell syntaxpypa virtualenv · virtualenv
- CVE-2026-113721virtualenv: Generated files can follow existing destination linkspypa virtualenv · virtualenv
- CVE-2026-113720virtualenv: Seeded files retain permissions from an older cachepypa virtualenv · virtualenv
- CVE-2026-113715virtualenv: Venv configuration readback can reinterpret path boundariespypa virtualenv · virtualenv
- CVE-2026-113719virtualenv: Seed replacement does not contain metadata deletion pathspypa virtualenv · virtualenv
- CVE-2026-113718virtualenv: Xonsh activation literals depend on the script decoding codecpypa virtualenv · virtualenv
- CVE-2026-113717virtualenv: Pip seeding with download omits wheel digest verificationpypa virtualenv · virtualenv
- CVE-2026-113716virtualenv: Builtin creation follows linked environment directoriespypa virtualenv · virtualenv
- CVE-2026-113714virtualenv: Downloaded wheel selection and caching precede verificationpypa virtualenv · virtualenv
- CVE-2026-113713virtualenv: Temporary app-data can leave dangling seed package linkspypa virtualenv · virtualenv
- CVE-2026-112941filelock: SoftReadWriteLock follows a lock tree swapped in after its first acquire and writes lock records into directories of the user running the locktox-dev filelock · filelock
- CVE-2026-112940filelock ReadWriteLock: SQLite reopens the lock database by name, so a planted symlink or journal file makes the lock user's process overwrite or unlink its own filestox-dev filelock · filelock
- CVE-2026-112939filelock: SoftFileLock removes a live holder's marker when another user forges the PID in a writable markertox-dev filelock · filelock
- CVE-2026-112937filelock: ReadWriteLock on the hard-link route deletes any directory another user renames onto its .filelock-* link directory nametox-dev filelock · filelock
- CVE-2026-112936filelock: ReadWriteLock follows a symlink at the lock path into SQLitetox-dev filelock · filelock
- CVE-2026-112935filelock: SoftFileLock stale-lock break removes a live lock file on a reused inode number and admits two holderstox-dev filelock · filelock
- CVE-2026-112934filelock: SoftReadWriteLock holder refresh writes through a hard link and hangs on a named pipe that another local user renames over its recordtox-dev filelock · filelock
- CVE-2026-112915filelock ReadWriteLock: a crafted lock database makes every acquire stall or hang regardless of timeouttox-dev filelock · filelock
- CVE-2026-112914filelock: SoftFileLock stale-break restore follows a swapped-in symbolic link and hard-links a file of the user running the lock into the lock directorytox-dev filelock · filelock
- CVE-2026-112912filelock: Symlink swap during SoftFileLock's writability check leaks whether a path exists and is writable by the lock takertox-dev filelock · filelock
- CVE-2026-112911filelock: StrictSoftFileLock and SoftReadWriteLock adopt a protocol directory another user created first, losing mutual exclusiontox-dev filelock · filelock
- CVE-2026-112909filelock: UnixFileLock truncates and chmods any regular file another user renames or hard-links onto the lock pathtox-dev filelock · filelock
- CVE-2026-112906filelock: SoftFileLock evicts a fresh lock file whose watched age another local user's pre-dated file passed on through inode reusetox-dev filelock · filelock
- CVE-2026-112901Pillow: ReDoS in XbmImagePlugin: 512-byte file stalls Image.open() for minutespython-pillow Pillow · pillow
- CVE-2026-112900Pillow: Argument Injection in Ghostscript call, potentially leading into RCEpython-pillow Pillow · pillow
- CVE-2026-112898Pillow: Image.quantize() with empty palette leaks uninitialized stack memorypython-pillow Pillow · pillow
- CVE-2026-112897Pillow: TiffDecode returns uninitialized memory as pixels for short JPEG stripspython-pillow Pillow · pillow
- CVE-2026-112896Pillow: TIFF encoder ColorMap plane-size mismatch causes a heap out-of-bounds readpython-pillow Pillow · pillow
- CVE-2026-112895Pillow: Unbounded recursion parsing a PDF page tree or trailer chain (incomplete fix for CVE-2026-42310)python-pillow Pillow · pillow
- CVE-2026-112894Pillow: Quadratic-time DoS in PDF save_all (PdfParser.next_object_id)python-pillow Pillow · pillow
- CVE-2026-112893Pillow: Invalid free in FreeType glyph rendering when a stroker is activepython-pillow Pillow · pillow
- CVE-2026-112892Pillow: MSP RLE decoder expands a tiny file into unbounded memorypython-pillow Pillow · pillow
- CVE-2026-112398Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code executionpython-pillow Pillow · pillow
- CVE-2026-53995MLflow 3.17.1 and prior Path Traversal via Trace ID APImlflow
- CVE-2026-112396Pillow: Heap use-after-free when encoding TIFF to an in-memory bufferpython-pillow Pillow · pillow
- CVE-2026-108372LoopX serve-status permissive CORS policy exposes control-plane state and private Markdown fileshuangruiteng loopx · loopx
- CVE-2026-96620Claude Agent SDK: Argument Injection via resume Option Allows Arbitrary Command Executionanthropics claude-agent-sdk-python · claude-agent-sdk
- CVE-2026-110860GitPython 3.1.62 before 3.2.0 Symlink Path Traversal via Submodule.move()gitpython-developers GitPython · gitpython
- CVE-2026-110859GitPython before 3.2.0 Arbitrary File Read via Head.checkout() Branch Namegitpython-developers GitPython · gitpython
- CVE-2026-110858GitPython 3.1.30 before 3.2.0 Command Injection via Remote.pull() Refspecgitpython-developers GitPython · gitpython
- CVE-2026-110857GitPython before 3.2.0 Command Execution via ls_remote ext:: URLsgitpython-developers GitPython · gitpython
- CVE-2026-110856GitPython before 3.2.0 ReDoS via _re_actor_epoch in parse_actor_and_dategitpython-developers GitPython · gitpython
- CVE-2026-110855GitPython before 3.2.0 Environment Variable Disclosure via .gitmodules Submodule Namegitpython-developers GitPython · gitpython
- CVE-2026-109956NLTK through 3.10.3 Path Traversal via WekaClassifier Model Pathnltk
- GHSA-P3PR-8F3M-4QP8pyLoad WindowsPhoneNotify addon: non-admin SETTINGS user triggers SSRF via unguarded http.client notification hostpyload-ng
- CVE-2026-106435Application denial of service via out-of-bounds read in BSON Regex decoding in MongoDB Python DriverMongoDB Python Driver · pymongo
- CVE-2026-105759vLLM: Unbounded Prometheus label cardinality from attacker-controlled HTTP method tokens in the vLLM Rust frontend metrics middleware (unauthenticated denial of service)vllm-project vllm · vllm
- CVE-2026-96760Authlib library contains a signature‑verification bypass vulnerabilityAuthlib
- CVE-2026-100653vLLM 0.22.1 before 0.28.0 Incomplete Artifact Pin Propagationvllm-project vllm · vllm
- GHSA-JM5P-837G-RV8GWagtail: Improper restriction handling on Page translation API endpointwagtail
- CVE-2026-7873Code Injection Vulnerability in Code Validation EndpointIBM Langflow OSS · langflow
- CVE-2026-27975Ajenti has a potential Remote Code Executionajenti · aj
- GHSA-W466-2WFC-8G58Open WebUI has vulnerable dependency on starlette via fastapiopen-webui
- CVE-2023-27524Apache Superset: Session validation vulnerability when using provided default SECRET_KEYApache Software Foundation Apache Superset · superset +1
- GHSA-JGPV-4H4C-XHW3Uncontrolled Resource Consumption in pillowpillow