Critical PyPI package vulnerabilities

CVE-2026-112398 · PyPI

Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution

CVE-2026-115324 · PyPI

mem0ai Databricks vector store vulnerable to SQL injection

CVE-2026-96639 · PyPI

Pillow multi-frame loaders can reuse stale native image storage after mode transitions

GHSA-9v8h-qqgm-4m35 · PyPI

Brotli: Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package

CVE-2026-112393 · PyPI

Pillow: Heap buffer overflow in _tiffWriteProc when saving TIFF to BytesIO

CVE-2026-112900 · PyPI

Pillow: Argument Injection in Ghostscript call, potentially leading into RCE

CVE-2026-112403 · PyPI

Pillow: Heap buffer overflow in ImagingJpegDecode

GHSA-6q48-6c7w-9gw2 · PyPI

certifi bundles emSign root CAs with compromised intermediate CA keys

GHSA-hq85-5cpj-mr62 · PyPI

uv's bundled CA store trusts an emSign root whose intermediate CA keys are compromised

CVE-2026-111057 · PyPI

Mercury: Unauthenticated Remote Code Execution in /api/terminals - access control bypass

CVE-2026-111058 · PyPI

Mercury: Unauthenticated Remote Code Execution via /api/kernels

CVE-2026-105192 · PyPI

LMCache: Remote code execution via unsafe deserialization in multiprocess mode transport

CVE-2026-61445 · PyPI

PraisonAI: AICoder Arbitrary File Write and Command Execution via LLM Tool Calls

CVE-2026-61447 · PyPI

PraisonAI: CodeAgent Executes LLM-Generated Code Without Sandboxing and Leaks All Environment Secrets

CVE-2026-62176 · PyPI

PraisonAI: Code Injection via f-string Interpolation in Deploy API Server Generation

GHSA-jqmf-mx4f-hfr6 · PyPI

Vibe-Trading LLM-callable tools permit command execution, code injection, and SSRF

GHSA-v2f8-6655-7grj · PyPI

Vibe-Trading FastAPI endpoints permit unauthenticated access, file upload, and an RCE chain

CVE-2026-102268 · PyPI

PyJWT: Asymmetric-PEM detection bypass: whitespace/line-ending-mutated public keys skip the HS/asymmetric confusion guard

CVE-2026-61732 · PyPI

Decepticon: Role-boundary forgery via ChatML special-token literals in web crawl output composed into LLM context

CVE-2026-57149 · PyPI

plone.app.portlets Vulnerable to Remote Code Execution via TALES Injection

CVE-2026-85734 · PyPI

lightrag-hku: No Rate Limiting on /login Endpoint Allows Brute-Force Attacks

CVE-2026-91130 · PyPI

Home Assistant: XSS in Statistics Graph Card

CVE-2025-66455 · PyPI

LMDeploy has Remote Code Execution by Pickle Deserialization via handle_zmq_recv in lmdeploy/lmdeploy/pytorch/disagg/conn/engine_conn.py

CVE-2026-59163 · PyPI

Mnemosyne has JWT signature verification bypass sync server that allows authentication bypass

CVE-2026-63374 · PyPI

AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing

CVE-2025-59953 · PyPI

LMdeploy has Remote Code Execution by Pickle Deserialization via zmq_rpc.call_and_response() in InterLM/lmdeploy

CVE-2026-61594 · PyPI

djust has an authorization bypass on the WebSocket/SSE mount path

CVE-2026-59178 · PyPI

ESPHome Device Builder: Renamed auth env vars silently disable dashboard authentication on upgrade

CVE-2026-59151 · PyPI

Prowler: SAML Domain Claiming Enables Cross-Tenant Account Takeover

CVE-2026-78676 · PyPI

GitPython: Dormant multi-line git-config values are corrupted into live injected directives (e.g. core.hooksPath) on any unrelated GitConfigParser write, enabling RCE

CVE-2026-78683 · PyPI

NLTK: Unsafe Pickle Deserialization in TransitionParser Allows Remote Code Execution

CVE-2026-79657 · PyPI

NLTK: Allowlisted pickle loaders still permit code execution in current source

CVE-2026-71428 · PyPI

unstructured: Server-Side Request Forgery in the URL-based partitioning

CVE-2026-85394 · PyPI

python-jose algorithm confusion guard bypassed by DER-encoded public keys

CVE-2026-79675 · PyPI

NLTK: JVM argument injection bypass via per-call options in the NLTK Stanford wrappers (incomplete fix of CVE-2026-12841)

CVE-2026-55247 · PyPI

plone.app.event vulnerable to denial of service via iCalendar import

CVE-2026-55248 · PyPI

plone.app.portlets vulnerable to denial of service via RSS feed portlet

CVE-2026-54569 · PyPI

senaite.core Vulnerable to Eval Injection and Missing Authorization

GHSA-93qj-5q5v-3c2h · PyPI

Trojanized pantheon-agents 0.6.1 and 0.6.2 on PyPI ship a credential stealer (supply-chain account compromise)

CVE-2026-55536 · PyPI

PraisonAI has a Browser Server WebSocket origin validation bypass via unanchored regex (patch bypass of CVE-2026-40289 / GHSA-8x8f-54wf-vv92)

CVE-2026-61539 · PyPI

Xinference vulnerable to remote code execution via unsafe `eval()` in Llama3 tool-call parsing

CVE-2026-55209 · PyPI

resdata has Classic Buffer Overflow, Improper Validation of Array Index, NULL Pointer Dereference and Out-of-bounds Read

CVE-2026-55211 · PyPI

surfio has an out-of-bounds read

CVE-2026-68770 · PyPI

sentence-transformers local model loading bypasses trust_remote_code and executes custom Python

CVE-2026-67426 · PyPI

Flyto2 Core: Unauthenticated flyto-verification /run: callback_url SSRF and internal runner-secret exfiltration

CVE-2026-64825 · PyPI

Home Assistant Core vulnerable to Path Traversal via backup upload during onboarding

CVE-2026-61736 · PyPI

LightRAG: CORS Wildcard + Credentials Enables Any-Origin Credentialed Requests

CVE-2026-61740 · PyPI

LightRAG is Vulnerable to Authentication Bypass: hardcoded DEFAULT_TOKEN_SECRET and public /auth-status defeat LIGHTRAG_API_KEY protection

CVE-2025-65720 · PyPI

GPT Researcher MCP STDIO configuration allows remote command execution

CVE-2026-15925 · PyPI

Snowflake Connector for Python improperly verifies TLS hostnames

CVE-2026-45579 · PyPI

DIRAC is vulnerable to RCE in RequestManager due to eval on untrusted input

CVE-2026-61667 · PyPI

DIRAC is vulnerable to RCE in FileCatalog DatasetManager via SQL injection + eval

CVE-2026-33264 · PyPI

Apache Airflow allows code execution through unsafe serialized DAG deserialization

CVE-2026-58473 · PyPI

Cognee allows non-superusers to overwrite global LLM configuration

CVE-2026-54760 · PyPI

Langroid: SQLChatAgent dangerous-function blocklist can be bypassed with quoted or schema-qualified pg_read_file calls

CVE-2026-54769 · PyPI

Langroid: Sandbox Escape to Remote Code Execution via Incomplete `eval()` Mitigation in TableChatAgent

CVE-2026-55615 · PyPI

Langroid: Neo4jChatAgent executes LLM-generated Cypher without validation (prompt-to-Cypher injection; config-conditional RCE), mirroring the SQLChatAgent bug fixed in CVE-2026-25879

CVE-2026-48797 · PyPI

Backpropagate: backprop ui --auth and backprop ui --share do not enforce authentication

GHSA-98x5-vq43-vc5p · PyPI

semantic-router exposed to compromised litellm wheel (CVE-2026-42208) via unbounded transitive pin

CVE-2026-55166 · PyPI

Lemur: ACME SSRF + creator-equality IDOR lead to AWS IAM/PKI compromise

GHSA-phv5-334h-mxcw · PyPI

motionEye Partial Authentication Bypass: Unauthenticated Admin Credential Theft via Path Traversal

GHSA-qxvg-h7q2-hcxh · PyPI

motionEye: LFI → pass‑the‑hash admin → unsafe restore → unauth action exec (RCE)

CVE-2026-46488 · PyPI

motionEye: Authentication possible via password hash

CVE-2026-56265 · PyPI

Crawl4AI: authentication bypass vulnerability due to a hardcoded default JWT signing key in the Docker API server

CVE-2026-44727 · PyPI

Jupyter Server: Stored XSS in `NbconvertFileHandler` / `NbconvertPostHandler` via missing `sandbox` CSP

CVE-2026-47103 · PyPI

python-statemachine SCXML <data expr> Eval Injection

CVE-2026-57116 · PyPI

PraisonAI: AgentOS remains unauthenticated after incomplete fix version and allows remote agent invocation

CVE-2026-57118 · PyPI

PraisonAI AgentTeam.launch exposes unauthenticated remote agent listing and invocation endpoints

CVE-2026-57123 · PyPI

PraisonAI: MCP SSE transport binds 0.0.0.0 with no authentication and no Origin validation; bundled SecurityConfig is never wired in

CVE-2026-57125 · PyPI

PraisonAI: Unauthenticated RCE via Jobs API + Approval Bypass

CVE-2026-57127 · PyPI

praisonai: recipe serve auth middleware silently disables itself when no secret is set

CVE-2026-57131 · PyPI

PraisonAI: Jobs API exposes agent-execution endpoints with no authentication

CVE-2026-57145 · PyPI

PraisonAI: Arbitrary File Read/Write via `multiedit` Tool Without Path Validation

CVE-2026-57147 · PyPI

praisonai-platform: default JWT signing secret 'dev-secret-change-me' enables token forgery

CVE-2026-57148 · PyPI

praisonai-platform 0.1.4 still boots on the hardcoded JWT secret dev-secret-change-me (default-open production guard)

GHSA-2jq4-q6vv-4cp3 · PyPI

Crawl4AI: Arbitrary file write (path traversal) in crawler downloads can lead to RCE

GHSA-r253-r9jw-qg44 · PyPI

Crawl4AI: Unauthenticated RCE via Chromium launch-argument injection in browser_config.extra_args

CVE-2026-50203 · PyPI

Apache Airflow SFTP provider: Path traversal in SFTPHook.retrieve_directory

CVE-2026-53753 · PyPI

Crawl4AI: AST Sandbox Escape via gi_frame.f_back Chain - Pre-Auth RCE in Docker API

CVE-2026-56266 · PyPI

Crawl4AI: Multiple Docker API Vulnerabilities - File Write, SSRF, Auth Bypass, XSS, JS Execution

CVE-2026-45833 · PyPI

ChromaDB has a code injection vulnerability

CVE-2026-47731 · PyPI

NASA AMMOS Instrument Toolkit: Path traversal resulting in arbitrary file append (can be triggered over the network by unauthenticated attacker)

CVE-2026-41283 · PyPI

OpenStack Mistral allows Arbitrary Remote Code Execution when the API is exposed

CVE-2026-44180 · PyPI

Jupyter Enterprise Gateway: ContainerProcessProxy._enforce_prohibited_ids Bypass

CVE-2026-44181 · PyPI

Jupyter Enterprise Gateway: Jinja2 Template Server Side Template Injection resulting in Remote Code Execution

CVE-2026-44182 · PyPI

Jupyter Enterprise Gateway: Kubernetes Manifest Injection in Jinja2 Template Rendering

CVE-2026-47117 · PyPI

OpenMed vulnerable to remote code injection through privacy-filter model loading path

CVE-2026-42252 · PyPI

Apache Airflow vulnerable to Improper Neutralization of Special Elements Used in a Template Engine

CVE-2026-47413 · PyPI

praisonai-platform: Any workspace member can add arbitrary user as owner via POST /workspaces/{id}/members

CVE-2026-47391 · PyPI

PraisonAI's unauthenticated A2A official example can reach real LLM-driven `eval()` tool execution

CVE-2026-47392 · PyPI

PraisonAI vulnerable to sandbox escape via `print.__self__` builtins module leak in `execute_code` (subprocess mode)

CVE-2026-47393 · PyPI

PraisonAI `deploy --type api` emits a Flask server with authentication disabled by default

CVE-2026-47396 · PyPI

PraisonAI call server exposes unauthenticated agent listing, invocation, and deletion when CALL_SERVER_TOKEN is unset

CVE-2026-47407 · PyPI

PraisonAI Platform has a cross-workspace IDOR + member-role privilege escalation

CVE-2026-47410 · PyPI

praisonai-platform: JWT signing key defaults to hardcoded "dev-secret-change-me", allowing token forgery for any user when PLATFORM_ENV is unset

CVE-2026-47416 · PyPI

praisonai-platform: Any workspace member can promote themselves or others to owner via PATCH /workspaces/{id}/members/{user_id}

CVE-2026-8838 · PyPI

amazon-redshift-python-driver vulnerable to Remote Code Execution via eval() Injection

GHSA-9vp8-3hmv-8fgh · PyPI

stigmem-node's federation peer registration lacked explicit out-of-band approval

GHSA-fp6w-8wpg-74g5 · PyPI

stigmem-node: Auth-disabled deployments may grant broad anonymous access outside loopback

GHSA-jmfc-hfjq-pxcp · PyPI

stigmem-node's federation insecure transport settings may allow non-loopback cleartext federation

CVE-2026-25879 · PyPI

Langroid has Prompt to SQL Injection, Leading to RCE

CVE-2026-46695 · PyPI

BoxLite: Permission Bypass Allows Modification of Read-Only Files

CVE-2026-46703 · PyPI

Boxlite: Path Traversal Vulnerability Leads to Arbitrary File Write on the Host

CVE-2026-48207 · PyPI

Apache Fory PyFory Deserialization of Untrusted Data

CVE-2026-31072 · PyPI

APScheduler's JSONSerializer and CBORSerializer are vulnerable to Remote Code Execution (RCE) via Insecure Deserialization

CVE-2026-45568 · PyPI

rok Python ProxyShare can be used as an SSRF proxy through absolute URL paths

CVE-2026-45829 · PyPI

ChromaDB Python project has a pre-authentication code injection vulnerability

GHSA-wx9m-wx4f-4cmg · PyPI

Malicious dropper in mistralai 2.4.6 PyPI package

CVE-2026-45369 · PyPI

utcp-cli Vulnerable to Command Injection via Unsanitized Argument Substitution in CLI Communication Protocol

CVE-2026-31220 · PyPI

PySyft server-side arbitrary Python execution after code approval

CVE-2026-31234 · PyPI

Horovod contains an insecure deserialization vulnerability in its KVStore HTTP server component

CVE-2026-31235 · PyPI

imgaug contains an insecure deserialization vulnerability in BackgroundAugmenter class within multicore.py module

CVE-2026-31236 · PyPI

llm CLI tool contains a code injection vulnerability via `--functions` command-line argument

CVE-2026-31237 · PyPI

Ludwig framework is vulnerable to insecure deserialization through its predict() method.

CVE-2026-31238 · PyPI

Ludwig framework is vulnerable to insecure deserialization in its model serving component

CVE-2026-31239 · PyPI

mamba language model framework vulnerable to insecure deserialization when loading pre-trained models from HuggingFace Hub

CVE-2026-7813 · PyPI

pgAdmin 4 server mode has an authorization vulnerability affecting Server Groups, Servers, Shared Servers, Background Processes, and Debugger modules

CVE-2026-38360 · PyPI

dash-uploader has a directory traversal vulnerability

CVE-2026-44484 · PyPI

Compromise of PyTorch Lightning PyPi Package Versions

CVE-2026-29080 · PyPI

Rucio has SQL Injection in FilterEngine Oracle JSON Path via DID Search API

CVE-2026-29090 · PyPI

Rucio has SQL Injection in FilterEngine PostgreSQL Query Builder via DID Search API

CVE-2026-43948 · PyPI

wger: cross-tenant password reset and plaintext disclosure via gym=None bypass

CVE-2026-44364 · PyPI

misp-modules website - Missing CSRF protection in the website home blueprint

CVE-2026-25660 · PyPI

Codechecker has an authentication bypass for certain API calls

CVE-2026-42196 · PyPI

django-s3file is vulnerable to relative path traversal

CVE-2026-42864 · PyPI

FireFighter has unauthenticated SSRF in its Raid jira_bot endpoint that allows IAM credential theft

CVE-2026-42601 · PyPI

ArchiveBox Vulnerable to RCE via unvalidated per-crawl config overrides in AddView

CVE-2026-42354 · PyPI

Sentry's improper authentication on SAML SSO process allows user identity linking

CVE-2026-24178 · PyPI

NVIDIA NVFlare Dashboard: Authorization bypass through user-controlled key via user management and authentication system

CVE-2025-62373 · PyPI

Pipecat: Remote Code Execution by Pickle Deserialization Through LivekitFrameSerializer

CVE-2026-27197 · PyPI

Sentry: Improper authentication on SAML SSO process allows user identity linking

CVE-2026-40525 · PyPI

OpenViking: Unauthenticated remote bot control via OpenAPI HTTP routes

CVE-2026-54333 · PyPI

UEFI Firmware Parser has a stack out-of-bounds write in tiano decompressor MakeTable

CVE-2026-54334 · PyPI

UEFI Firmware Parser has a heap out-of-bounds write in tiano decompressor ReadCLen

CVE-2026-4810 · PyPI

Google Agent Development Kit (ADK) has a Code Injection and Missing Authentication vulnerability

CVE-2026-1115 · PyPI

parisneo/lollms vulnerable to stored XSS in the social feature

CVE-2026-40111 · PyPI

PraisonAIAgents has an OS Command Injection via shell=True in Memory Hooks Executor (memory/hooks.py)

CVE-2026-40154 · PyPI

PraisonAI Vulnerable Untrusted Remote Template Code Execution

CVE-2026-40157 · PyPI

PraisonAI vulnerable to arbitrary file write via path traversal in `praisonai recipe unpack`

CVE-2026-40177 · PyPI

ajenti.plugin.core has password bypass when 2FA is activated

CVE-2026-40258 · PyPI

gramps-webapi: Zip Slip Path Traversal in Media Archive Import

CVE-2026-40288 · PyPI

PraisonAI has critical RCE via `type: job` workflow YAML

CVE-2026-40289 · PyPI

PraisonAI Browser Server allows unauthenticated WebSocket clients to hijack connected extension sessions

CVE-2025-57735 · PyPI

Apache Airflow: JWT token still valid after logout

CVE-2026-39888 · PyPI

PraisonAI has sandbox escape via exception frame traversal in `execute_code` (subprocess mode)

CVE-2026-39890 · PyPI

PraisonAI Vulnerable to Remote Code Execution via YAML Deserialization in Agent Definition Loading

CVE-2026-39987 · PyPI

Marimo: Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass

CVE-2026-40088 · PyPI

PraisonAI Vulnerable to OS Command Injection

CVE-2026-1114 · PyPI

LoLLMs is vulnerable to Improper Access Control through weak secret key

CVE-2026-35490 · PyPI

changedetection.io Vulnerable to Authentication Bypass via Decorator Ordering

CVE-2026-35615 · PyPI

PraisonAI Has Path Traversal in FileTools

CVE-2026-39305 · PyPI

PraisonAI Vulnerable to Arbitrary File Write / Path Traversal in Action Orchestrator

CVE-2026-35459 · PyPI

pyLoad: SSRF filter bypass via HTTP redirect in BaseDownloader (Incomplete fix for CVE-2026-33992)

CVE-2026-35171 · PyPI

Kedro has Arbitrary Code Execution via Malicious Logging Configuration

CVE-2026-5463 · PyPI

pymetasploit3 vulnerable to command injection in console.run_module_with_output()

CVE-2026-34934 · PyPI

PraisonAI Has Second-Order SQL Injection in `get_all_user_threads`

CVE-2026-34935 · PyPI

PraisonAI: OS Command Injection in MCPHandler.parse_mcp_command()

CVE-2026-34938 · PyPI

PraisonAI: Python Sandbox Escape via str Subclass startswith() Override in execute_code

CVE-2026-34952 · PyPI

PraisonAI Has Missing Authentication in WebSocket Gateway

CVE-2026-32714 · PyPI

SciTokens is vulnerable to SQL Injection in KeyCache

GHSA-h45m-mgcp-q388 · PyPI

openssl-encrypt: TOTP rate limiter is in-memory only — not shared across workers, lost on restart

GHSA-955r-262c-33jc · PyPI

Telnyx has malicious code in PyPI versions 4.87.1 and 4.87.2

CVE-2026-33992 · PyPI

pyLoad: Server-Side Request Forgery via Download Link Submission Enables Cloud Metadata Exfiltration

CVE-2026-33054 · PyPI

Mesop has a Path Traversal utilizing `FileStateSessionBackend` leads to Application Denial of Service and File Write/Deletion

CVE-2026-33057 · PyPI

Mesop Affected by Unauthenticated Remote Code Execution via Test Suite Route /exec-py

CVE-2026-27962 · PyPI

Authlib JWS JWK Header Injection: Signature Verification Bypass

CVE-2026-32633 · PyPI

Glances's Browser API Exposes Reusable Downstream Credentials via `/api/4/serverslist`

CVE-2026-3490 · PyPI

PickleScan's pkgutil.resolve_name has a universal blocklist bypass

CVE-2026-53873 · PyPI

PickleScan's profile.run blocklist mismatch allows exec() bypass

CVE-2026-56315 · PyPI

PickleScan has multiple stdlib modules with direct RCE not in blocklist

CVE-2026-28370 · PyPI

OpenStack Vitrage: Unauthorized Access to the Host can Lead to Eval Injection

CVE-2026-27614 · PyPI

Bugsink is vulnerable to Stored XSS via Pygments fallback in stacktrace rendering

CVE-2026-27641 · PyPI

Flask-Reuploaded vulnerable to Remote Code Execution via Server-Side Template Injection

CVE-2026-26198 · PyPI

ormar is vulnerable to SQL Injection through aggregate functions min() and max()

CVE-2025-14009 · PyPI

NLTK has a Zip Slip Vulnerability

CVE-2026-21531 · PyPI

Azure AI Language Authoring Elevation of Privilege Vulnerability can Lead to RCE

CVE-2026-1709 · PyPI

Keylime Missing Authentication for Critical Function and Improper Authentication

GHSA-4f84-67cv-qrv3 · PyPI

A single post-release of dydx-v4-client contained obfuscated multi-stage loader

CVE-2026-25632 · PyPI

EPyT-Flow vulnerable to unsafe JSON deserialization (__type__)

CVE-2025-64712 · PyPI

Unstructured has Path Traversal via Malicious MSG Attachment that Allows Arbitrary File Write

CVE-2024-5986 · Maven

H2O has an External Control of File Name or Path vulnerability

CVE-2026-25481 · PyPI

Langroid has WAF Bypass Leading to RCE in TableChatAgent

CVE-2026-25505 · PyPI

Bambuddy Uses Hardcoded Secret Key + Many API Endpoints do not Require Authentication

CVE-2026-25130 · PyPI

CAI find_file Agent Tool has Command Injection Vulnerability Through Argument Injection

GHSA-vg9h-jx4v-cwx2 · PyPI

Unfurl's debug mode cannot be disabled due to string config parsing (Werkzeug debugger exposure)

CVE-2026-22696 · Rust (crates.io)

dcap-qvl has Missing Verification for QE Identity

CVE-2026-26216 · PyPI

Crawl4AI is Vulnerable to Remote Code Execution in Docker API via Hooks Parameter

CVE-2026-26217 · PyPI

Crawl4AI Has Local File Inclusion in Docker API via file:// URLs

CVE-2026-22584 · PyPI

Salesforce Uni2TS has a Code Injection vulnerability

CVE-2025-15346 · PyPI

wolfSSL Python module vulnerable to Improper Authentication

CVE-2025-61492 · PyPI

terminal-controller-mcp vulnerable to Command Injection

CVE-2025-68398 · PyPI

Weblate is vulnerable to RCE through Git config file overwrite

CVE-2025-67895 · PyPI

Apache Airflow Providers Edge3 exposes internal API allowing RCE in web server context

CVE-2025-13780 · PyPI

pgadmin4 has a Meta-Command Filter Command Execution

CVE-2025-67511 · PyPI

Cybersecurity AI (CAI) vulnerable to Command Injection in run_ssh_command_with_credentials Agent tool

CVE-2025-65896 · PyPI

asyncmy is vulnerable to SQL injection via crafted dict keys

CVE-2025-60455 · PyPI

Modular Max Serve has Unsafe Deserialization vulnerability

CVE-2025-65015 · PyPI

joserfc has Possible Uncontrolled Resource Consumption Vulnerability Triggered by Logging Arbitrarily Large JWT Token Payloads

CVE-2025-55449 · PyPI

AstrBot is vulnerable to RCE with hard-coded JWT signing keys

CVE-2025-12762 · PyPI

pgAdmin4 vulnerable to Remote Code Execution (RCE) when running in server mode

CVE-2025-64459 · PyPI

Django vulnerable to SQL injection via _connector keyword argument in QuerySet and Q objects.

CVE-2025-49655 · PyPI

Keras framework vulnerable to deserialization of untrusted data

CVE-2025-62515 · PyPI

pyquokka is Vulnerable to Remote Code Execution by Pickle Deserialization via FlightServer

CVE-2025-10283 · PyPI

BBOT's insufficient sanitization issues in gitdumper.py can lead to RCE

CVE-2025-10284 · PyPI

BBOT's various issues in unarchive.py can cause arbitrary file write and RCE

GHSA-m9mp-6x32-5rhg · PyPI

scio is vunerable to Remote Command Execution through PyTorch

CVE-2025-61622 · PyPI

Apache Pyfory python is vulnerable to deserialization of untrusted data

CVE-2025-48459 · Maven

Apache IoTDB: Deserialization of untrusted Data

CVE-2025-6544 · Maven

H2O affected by a deserialization vulnerability

CVE-2025-6237 · PyPI

InvokeAI has External Control of File Name or Path

CVE-2025-10155 · PyPI

Picklescan Bypass is Possible via File Extension Mismatch

CVE-2025-10156 · PyPI

Picklescan: ZIP archive scan bypass is possible through non-exhaustive Cyclic Redundancy Check

CVE-2025-10157 · PyPI

Picklescan is Vulnerable to Unsafe Globals Check Bypass through Subclass Imports

CVE-2025-55037 · PyPI

TkEasyGUI Vulnerable to OS Command Injection

CVE-2025-58438 · PyPI

internetarchive Vulnerable to Directory Traversal in File.download()

GHSA-58p5-r2f6-g2cj · PyPI

Pixar OpenUSD Sdf_PathNode Module Use-After-Free Vulnerability Leading to Potential Remote Code Execution

CVE-2025-58367 · PyPI

DeepDiff Class Pollution in Delta class leading to DoS, Remote Code Execution, and more

CVE-2025-30404 · PyPI

ExecuTorch integer overflow vulnerability

CVE-2025-30405 · PyPI

ExecuTorch integer overflow vulnerability

CVE-2025-54949 · PyPI

ExecuTorch heap buffer overflow vulnerability

CVE-2025-54950 · PyPI

ExecuTorch out-of-bounds access vulnerability

CVE-2025-54951 · PyPI

ExecuTorch vulnerable to Heap-based Buffer Overflow

CVE-2025-54802 · PyPI

pyLoad CNL Blueprint allows Path Traversal through `dlc_path` which leads to Remote Code Execution (RCE)

CVE-2025-53890 · PyPI

pyLoad vulnerable to XSS through insecure CAPTCHA

CVE-2025-50213 · PyPI

Apache Airflow Providers Snowflake package allows for Special Element Injection via CopyFromExternalStageToSnowflakeOperator

CVE-2025-52556 · PyPI

rfc3161-client has insufficient verification for timestamp response signatures

CVE-2024-38824 · PyPI

Salt vulnerable to directory traversal attack in file receiving method

CVE-2025-49652 · PyPI

BackendAI Missing Authentication for Critical Function

CVE-2025-1750 · PyPI

LlamaIndex DuckDBVectorStore vulnerable to SQL injection through ref_doc_id

CVE-2025-46724 · PyPI

Langroid has a Code Injection vulnerability in TableChatAgent

CVE-2024-24780 · Maven

Apache IoTDB Vulnerable to Remote Code Execution

CVE-2025-43859 · PyPI

h11 accepts some malformed Chunked-Encoding bodies

CVE-2025-32434 · PyPI

PyTorch: `torch.load` with `weights_only=True` leads to remote code execution

CVE-2025-32428 · PyPI

TigerVNC accessible via the network and not just via a UNIX socket as intended

CVE-2025-32013 · PyPI

LNbits Lightning Network Payment System Vulnerable to Server-Side Request Forgery via LNURL Authentication Callback

CVE-2025-2945 · PyPI

pgAdmin 4 Vulnerable to Remote Code Execution

CVE-2025-2946 · PyPI

pgAdmin 4 Vulnerable to Cross-Site Scripting (XSS) via Query Result Rendering

CVE-2024-12029 · PyPI

InvokeAI Deserialization of Untrusted Data vulnerability

CVE-2024-10190 · PyPI

Horovod Vulnerable to Command Injection

CVE-2024-10553 · PyPI

H2O Deserialization of Untrusted Data Vulnerability

CVE-2024-10831 · PyPI

DB-GPT Absolute Path Traversal vulnerability

CVE-2024-10833 · PyPI

DB-GPT Absolute Path Traversal in knowledge/{space_name}/document/upload

CVE-2024-10835 · PyPI

DB-GPT is vulnerable to SQL Injection attacks from unauthenticated users

CVE-2024-10901 · PyPI

DB-GPT Arbitrary File Write vulnerability

CVE-2024-10902 · PyPI

DB-GPT vulnerable to Arbitrary File Upload with Path Traversal

CVE-2024-11042 · PyPI

InvokeAI Arbitrary File Deletion vulnerability

CVE-2024-11958 · PyPI

LlamaIndex Retrievers Integration: DuckDBRetriever SQL Injection

CVE-2024-12909 · PyPI

llama-index-packs-finchat SQL Injection vulnerability

CVE-2024-6829 · PyPI

Aim External Control of File Name or Path vulnerability

CVE-2024-8019 · PyPI

PyTorch Lightning path traversal vulnerability

CVE-2024-8502 · PyPI

AgentScope Deserialization Vulnerability

CVE-2024-8537 · PyPI

AgentScope path traversal vulnerability

CVE-2024-8551 · PyPI

AgentScope path traversal vulnerability in save-workflow

CVE-2024-8769 · PyPI

Aim path traversal in LockManager.release_locks

CVE-2024-9701 · PyPI

Kedro deserialization vulnerability

CVE-2025-2000 · PyPI

Qiskit allows arbitrary code execution decoding QPY format versions < 13

CVE-2025-1497 · PyPI

PlotAI eval vulnerability

CVE-2023-25574 · PyPI

LTI JupyterHub Authenticator does not properly validate JWT Signature

CVE-2025-24370 · PyPI

Django-Unicorn Class Pollution Vulnerability, Leading to XSS, DoS and Authentication Bypass

CVE-2025-22146 · PyPI

Sentry's improper authentication on SAML SSO process allows user impersonation

CVE-2024-49375 · PyPI

Rasa Allows Remote Code Execution via Remote Model Loading

CVE-2024-47533 · PyPI

cobbler allows anyone to connect to cobbler XML-RPC server with known password and make changes

CVE-2024-10081 · PyPI

codechecker vulnerable to authentication bypass when using specifically crafted URLs

CVE-2024-10082 · PyPI

codechecker authentication method confusion vulnerability allows logging in as the built-in root user from an external service

CVE-2024-49768 · PyPI

Waitress has request processing race condition in HTTP pipelining with invalid first request

CVE-2024-32651 · PyPI

changedetection.io has a Server Side Template Injection using Jinja2 which allows Remote Command Execution

CVE-2024-6091 · PyPI

AutoGPT bypass of the shell commands denylist settings

CVE-2024-39205 · PyPI

pyload-ng vulnerable to RCE with js2py sandbox escape

CVE-2024-45758 · Maven

H2O.ai H2O vulnerable to deserialization attacks via a JDBC Connection URL

CVE-2024-42005 · PyPI

Django SQL injection vulnerability

GHSA-q5fm-55c2-v6j9 · PyPI

Fiona affected by CVE-2023-45853 related to MiniZip madler-zlib

CVE-2024-5980 · PyPI

pytorch-lightning vulnerable to Arbitrary File Write via /v1/runs API endpoint

CVE-2024-5443 · PyPI

Remote Code Execution via path traversal bypass in lollms

CVE-2024-36265 · Maven

Apache Submarine Server Core Incorrect Authorization vulnerability

CVE-2024-4315 · PyPI

parisneo/lollms Local File Inclusion (LFI) attack

CVE-2024-35225 · PyPI

Jupyter Server Proxy has a reflected XSS issue in host parameter

CVE-2024-5452 · PyPI

Remote code execution in pytorch lightning

CVE-2024-3829 · PyPI

qdrant input validation failure

CVE-2024-35374 · PyPI

Mocodo vulnerable to SQL injection in `/web/generate.php`

CVE-2024-35056 · PyPI

NASA AIT-Core vulnerable to SQL Injection

CVE-2024-35057 · PyPI

NASA AIT-Core vulnerable to remote code execution

CVE-2024-35058 · PyPI

NASA AIT-Core vulnerable to remote code execution

CVE-2024-35059 · PyPI

NASA AIT-Core vulnerable to remote code execution

CVE-2024-36039 · PyPI

PyMySQL SQL Injection vulnerability

CVE-2024-5023 · PyPI

ConsoleMe has an Arbitrary File Read Vulnerability via Limited Git command

CVE-2024-32874 · PyPI

Malicious Long Unicode filenames may cause a Multiple Application-level Denial of Service

CVE-2024-34249 · PyPI

pywasm3 contains a heap buffer overflow which leads to segmentation fault

CVE-2024-34252 · PyPI

pywasm3 contains a global buffer overflow which leads to segmentation fault

CVE-2024-3955 · PyPI

CraftBeerPi 4 allows arbitrary code execution

CVE-2024-33663 · PyPI

python-jose algorithm confusion with OpenSSH ECDSA keys

CVE-2024-32880 · PyPI

pyLoad allows upload to arbitrary folder lead to RCE

CVE-2024-2083 · PyPI

Directory traversal in zenml

CVE-2024-3660 · PyPI

Keras code injection vulnerability

CVE-2024-2195 · PyPI

Aim Web API vulnerable to Remote Code Execution

CVE-2024-28335 · PyPI

Lektor does not sanitize database path traversal

CVE-2024-28179 · PyPI

Jupyter Server Proxy's Websocket Proxying does not require authentication

CVE-2024-22203 · PyPI

Whoogle Search Path Traversal vulnerability

CVE-2024-22205 · PyPI

Whoogle Search Server-Side Request Forgery vulnerability

CVE-2024-0818 · PyPI

PaddlePaddle Path Traversal vulnerability

CVE-2024-0917 · PyPI

PaddlePaddle vulnerable to remote code execution

CVE-2024-2044 · PyPI

pgAdmin 4 vulnerable to Unsafe Deserialization and Remote Code Execution by an Authenticated user

CVE-2024-25128 · PyPI

Flask-AppBuilder vulnerable to incorrect authentication when using auth type OpenID

CVE-2024-23346 · PyPI

pymatgen vulnerable to arbitrary code execution when parsing a maliciously crafted JonesFaithfulTransformation transformation_string

CVE-2024-25141 · PyPI

Improper Certificate Validation in apache airflow mongo hook

CVE-2024-24825 · PyPI

DIRAC's TokenManager does not check permissions on cached tokens

CVE-2024-24563 · PyPI

Vyper negative array index bounds checks

CVE-2024-24811 · PyPI

SQLAlchemyDA unauthenticated arbitrary SQL query execution

CVE-2024-24561 · PyPI

Vyper's bounds check on built-in `slice()` function can be overflowed

CVE-2024-0937 · PyPI

Deserialization of untrusted data in synthcity

CVE-2023-49657 · PyPI

Cross-site Scripting in Apache superset

CVE-2024-23730 · PyPI

Unsafe yaml deserialization in llama-hub

CVE-2024-23731 · PyPI

Code execution in Embedchain

CVE-2024-0521 · PyPI

Code Injection in paddlepaddle

CVE-2023-50447 · PyPI

Arbitrary Code Execution in Pillow

CVE-2024-22416 · PyPI

Cross-Site Request Forgery on any API call in pyLoad may lead to admin privilege escalation

CVE-2024-21669 · PyPI

Hyperledger Aries Cloud Agent Python result of presentation verification not checked for LDP-VC

CVE-2023-52310 · PyPI

PaddlePaddle command injection in get_online_pass_interval

CVE-2023-52311 · PyPI

PaddlePaddle command injection in _wget_download

CVE-2023-52314 · PyPI

PaddlePaddle command injection in convert_shape_compare