Skip to content
Fencer Intel

All · pypi

Newest first, late arrivals on top. Also a feed.

  1. 6.2
    CVE-2019-25586 Deluge 1.3.15 Denial of Service via URL Field
    pypi
  2. 6.2
    CVE-2019-25585 Deluge 1.3.15 Denial of Service via Webseeds Field
    pypi
  3. 6.3
    CVE-2026-4506 Mindinventory MindSQL mindsql_core.py ask_db code injection
    pypi
  4. 7.5
    CVE-2026-33509 pyload-ng: SETTINGS Permission Users Can Achieve Remote Code Execution via Unrestricted Reconnect Script Configuration
    pypi
  5. 7.5
    CVE-2026-33497 Langflow: /profile_pictures/{folder_name}/{file_name} endpoint file reading
    pypi
    EPSS 20.0% chance of exploitation in 30 days, percentile 97%
  6. 7.5
    CVE-2026-33484 Langflow has Unauthenticated IDOR on Image Downloads
    pypi
    EPSS 6.1% chance of exploitation in 30 days, percentile 93%
  7. 7.8
    CVE-2026-32711 pydicom: Path traversal in FileSet/DICOMDIR ReferencedFileID allows file access outside the File-set root
    pypi
  8. 7.5
    CVE-2026-33332 NiceGUI's unvalidated chunk size parameter in media routes can cause memory exhaustion
    pypi
  9. 8.1
    GHSA-2mhw-8qcg-gr96 skia-python vendors vulnerable libfreetype because of pinned cibuildwheel version
    pypi
  10. 6.5
    CVE-2026-33314 pyload-ng: Improper Authentication and Origin Validation Error
    pypi
  11. 8.8
    CVE-2026-33310 Intake has a Command Injection via shell() Expansion in Parameter Defaults
    pypi
  12. 10.0
    CVE-2026-33309 Langflow has an Arbitrary File Write (RCE) via v2 API
    pypi
    EPSS 13.8% chance of exploitation in 30 days, percentile 96%
  13. 6.5
    CVE-2026-32889 tinytag: Denial of Service via non-terminating SYLT frame parsing loop
    pypi
  14. 7.1
    CVE-2026-27953 ormar has a Pydantic Validation Bypass via Kwargs Injection in Model Constructor
    pypi
    EPSS 1.4% chance of exploitation in 30 days, percentile 72%
  15. 8.2
    CVE-2026-3029 CVE-2026-3029
    pypi
  16. 8.1
    CVE-2025-15031 Path Traversal Vulnerability in mlflow/mlflow
    pypibitnami
  17. 9.8
    CVE-2026-8445 justhtml before 1.12.0 Sanitizer Bypass via Markdown
    pypi
  18. 6.1
    CVE-2026-8630 justhtml before 1.12.0 Mutation XSS via Raw Text Elements
    pypi
  19. 7.5
    CVE-2026-33154 dynaconf Affected by Remote Code Execution (RCE) via Insecure Template Evaluation in @jinja Resolver
    pypi
  20. 9.8
    CVE-2026-33057 Mesop Affected by Unauthenticated Remote Code Execution via Test Suite Route /exec-py
    pypi
    EPSS 7.1% chance of exploitation in 30 days, percentile 94%
  21. 10.0
    CVE-2026-33054 Mesop: Path Traversal utilizing `FileStateSessionBackend` leads to Application Denial of Service and File Write/Deletion
    pypi
  22. 7.5
    CVE-2026-33155 DeepDiff has Memory Exhaustion DoS through SAFE_TO_IMPORT
    pypi
  23. 6.1
    CVE-2026-33140 PySpector: Stored XSS in PySpector HTML Report Generation leads to Javascript Code Execution
    pypi
  24. 7.8
    CVE-2026-33139 PySpector: Plugin Sandbox Bypass leads to Arbitrary Code Execution
    pypi
  25. 7.1
    CVE-2026-33125 Frigate Broken Access Control: Users assigned the viewer role can delete admin and other low-privileged accounts
    pypi
  26. 8.8
    CVE-2026-33053 Langflow has Missing Ownership Verification in API Key Deletion (IDOR)
    pypi
  27. 8.1
    CVE-2026-33236 NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File Overwrite
    pypi
  28. 7.5
    CVE-2026-33231 NLTK has unauthenticated remote shutdown in nltk.app.wordnet_app
    pypi
    EPSS 1.4% chance of exploitation in 30 days, percentile 72%
  29. 6.1
    CVE-2026-33230 nltk Vulnerable to Cross-site Scripting
    pypi
  30. 7.5
    CVE-2026-66393 NLTK before 3.9.4 Denial of Service via JSONTaggedDecoder
    pypi