Skip to content
Fencer Intel

All · pypi

Newest first, late arrivals on top. Also a feed.

  1. 8.6
    CVE-2026-0846 Arbitrary File Read via Absolute Path Input in nltk.util.filestring()
    pypi
  2. 5.5
    CVE-2026-31826 pypdf: manipulated stream length values can exhaust RAM
    pypi
  3. 5.4
    CVE-2026-25604 Apache Airflow AWS Auth Manager - Host Header Injection Leading to SAML Authentication Bypass
    pypi
  4. 8.8
    CVE-2025-69219 Apache Airflow Providers Http: Unsafe Pickle Deserialization in apache-airflow-providers-http leading to RCE via HttpOperator
    pypi
  5. 6.5
    CVE-2025-70050 An issue pertaining to CWE-312: Cleartext Storage of Sensitive Information was discovered in lesspass lesspass v9.6.9 which allows attacker…
    pypi
  6. —
    GHSA-qr2g-p6q7-w82m x402 SDK Security Advisory
    npmpypigo
  7. 8.1
    CVE-2026-33010 mcp-memory-service's Wildcard CORS with Credentials Enables Cross-Origin Memory Theft
    pypi
  8. 9.8
    CVE-2026-31900 Black's vulnerable version parsing leads to RCE in GitHub Action
    github-actionspypi
  9. 7.5
    CVE-2026-30244 Plane: Unauthenticated Workspace Member Information Disclosure
    pypi
  10. 8.5
    CVE-2026-30242 Plane: SSRF via Incomplete IP Validation in Webhook URL Serializer
    pypi
  11. 5.3
    CVE-2026-29787 mcp-memory-service: System Information Disclosure via Health Endpoint
    pypi
  12. 10.0
    CVE-2026-0848 Arbitrary Code Execution in NLTK StanfordSegmenter via Untrusted JAR Loading
    pypi
  13. 8.4
    GHSA-5r2p-pjr8-7fh7 SageMaker Python SDK replaced eval() with safe parser in JumpStart search functionality
    pypi
  14. 6.8
    CVE-2026-28277 LangGraph: Unsafe msgpack deserialization in LangGraph checkpoint loading
    pypi
    EPSS 5.5% chance of exploitation in 30 days, percentile 92%
  15. 7.5
    CVE-2026-25048 xgrammar: Multi-layer nesting causes DoS
    pypi
    EPSS 1.3% chance of exploitation in 30 days, percentile 71%
  16. 4.3
    CVE-2026-27982 django-allauth has an open redirect vulnerability
    pypi
  17. 7.1
    CVE-2026-29778 pyLoad: Arbitrary File Write via Path Traversal in edit_package()
    pypi
  18. 5.5
    CVE-2026-29780 eml_parser: Path Traversal in Official Example Script Leading to Arbitrary File Write
    pypi
  19. 8.2
    CVE-2025-69534 Python-Markdown has an Uncaught Exception
    pypi
  20. 7.5
    CVE-2025-45691 RAGAS has an Arbitrary File Read vulnerability
    pypi
  21. —
    GHSA-5hwf-rc88-82xm Fickling missing RCE-capable modules in UNSAFE_IMPORTS
    pypi
  22. —
    GHSA-wccx-j62j-r448 Fickling has `always_check_safety()` bypass: pickle.loads and _pickle.loads remain unhooked
    pypi
  23. 9.1
    CVE-2026-29065 changedetection.io: Zip Slip vulnerability in the backup restore functionality
    pypi
  24. 7.5
    CVE-2026-29039 changedetection.io: XPath - Arbitrary File Read via unparsed-text()
    pypi
  25. 6.1
    CVE-2026-29038 changedetection.io: Reflected XSS in RSS Tag Error Response
    pypi
  26. 5.3
    CVE-2026-29790 dbt-common: commonprefix() doesn't protect against path traversal
    pypi
  27. 8.1
    CVE-2026-28681 IRRd: web UI host header injection allows password reset poisoning via attacker-controlled email links
    pypi
  28. 8.6
    CVE-2026-0847 Path Traversal in nltk/nltk
    pypi
    EPSS 1.0% chance of exploitation in 30 days, percentile 63%
  29. 9.1
    CVE-2026-28802 Authlib: Setting `alg: none` and a blank signature appears to bypass signature verification
    pypi
  30. 9.8
    CVE-2026-56315 picklescan - Remote Code Execution via Unblocked Standard Library Modules
    pypi
    EPSS 1.1% chance of exploitation in 30 days, percentile 67%