Skip to content
Fencer Intel

All · pypi

Newest first, late arrivals on top. Also a feed.

  1. 6.5
    CVE-2026-44199 Wagtail: Improper permission handling when deleting form submissions
    pypi
  2. 4.3
    CVE-2026-44198 Wagtail: Improper permission handling when viewing page history
    pypi
  3. 6.5
    CVE-2026-44197 Wagtail: Improper permission handling when comparing revisions
    pypi
  4. 6.5
    CVE-2026-44560 Open WebUI: Unauthorized File and Knowledge Base Content Access via RAG Vector Search
    pypi
  5. 5.4
    CVE-2026-44561 Open WebUI: Deactivated Channel Members Retain Full Access to Group/DM Channels
    pypi
  6. 5.4
    CVE-2026-44564 Open WebUI: Read-Only Users Can Modify Collaborative Documents via Socket.IO
    pypi
  7. 5.4
    CVE-2026-44563 Open WebUI: Ollama Model Access Control Bypass via /api/generate, /api/embed, /api/embeddings, and /api/show
    pypi
  8. 6.5
    CVE-2026-44562 Open WebUI: Model Import Overwrites Any Model Without Ownership Check
    pypi
  9. 4.3
    CVE-2026-44559 Open WebUI: Missing Access Check on Channel Members Endpoint for Standard Channels
    pypi
  10. 4.3
    CVE-2026-44557 Open WebUI: Global Knowledge Base Enumeration via knowledge-bases Meta-Collection
    pypi
  11. 8.1
    CVE-2026-44554 Open WebUI: Knowledge Base Destruction and RAG Poisoning via Unauthorized Collection Overwrite
    pypi
  12. 5.4
    CVE-2026-44558 Open WebUI: Channel Access Grants Bypass filter_allowed_access_grants
    pypi
  13. 7.1
    CVE-2026-44556 Open WebUI: responses passthrough endpoint lacks access control authorization
    pypi
  14. 7.6
    CVE-2026-44555 Open WebUI: Base Model Routing Bypasses Access Control via Model Chaining
    pypi
  15. 8.7
    CVE-2026-44552 Open WebUI: Redis Cache Keys tool_servers and terminal_servers Missing Instance Prefix Enable Cross-Instance Cache Poisoning
    pypi
  16. 8.1
    CVE-2026-44553 Open WebUI: Stale Admin Role in Socket.IO Session Pool Enables Post-Demotion Cross-User Note Access
    pypi
  17. 5.0
    CVE-2026-44550 Open WebUI: Mass Assignment via Pydantic extra='allow' Allows Creating Folders in Other Users' Accounts
    pypi
  18. 9.1
    CVE-2026-44551 Open WebUI: LDAP Empty Password Authentication Bypass
    pypi
    EPSS 1.5% chance of exploitation in 30 days, percentile 74%
  19. 4.3
    CVE-2026-44502 Bugsink: SSRF bypass in `validate_webhook_url`
    pypi
  20. 7.3
    CVE-2026-44721 Open WebUI: Stored XSS via Model Description
    npmpypi
  21. 7.5
    CVE-2026-4671 justhtml before 1.18.0 Denial of Service via CSS Selector
    pypi
  22. 5.1
    GHSA-q9m2-fhv9-3jcf `potato-annotation` has a Project-Boundary Bypass
    pypi
  23. —
    GHSA-52cq-7v8r-62c6 gmaps-mcp's unauthenticated HTTP transport allows unlimited Google Maps API calls at operator expense
    pypi
  24. 7.5
    CVE-2026-44340 PraisonAI: Symlink-extraction bypass of `_safe_extractall` writes outside `dest_dir`
    pypi
  25. 8.6
    CVE-2026-44339 PraisonAI has unsafe tool resolution in `ToolExecutionMixin.execute_tool`: undeclared `__main__` callables execute
    pypi
  26. 7.3
    CVE-2026-44338 PraisonAI ships and generates a legacy API server with authentication disabled by default, allowing unauthenticated workflow execution
    pypi
    EPSS 32.6% chance of exploitation in 30 days, percentile 98%
  27. 6.3
    CVE-2026-44337 PraisonAI knowledge-store backends interpolate unvalidated collection names into SQL and CQL queries
    pypi
  28. 9.6
    CVE-2026-44336 PraisonAI MCP `tools/call` path-traversal and RCE via Python `.pth` injection
    pypi
  29. 7.5
    CVE-2026-38361 Multiple unauthenticated denial-of-service (DoS) issues in fohrloop dash-uploader v0.1.0 through v0.7.0a2.
    pypi
    EPSS 2.6% chance of exploitation in 30 days, percentile 85%
  30. 9.8
    CVE-2026-38360 dash-uploader has a directory traversal vulnerability
    pypi
    EPSS 6.0% chance of exploitation in 30 days, percentile 93%