Skip to content
Fencer Intel

All · pypi

Newest first, late arrivals on top. Also a feed.

  1. 7.1
    GHSA-8cp3-qxj6-px34 utcp-http has an OAuth2 `tokenUrl` Trust Boundary Bypass in OpenAPI Conversion
    pypi
  2. 8.2
    GHSA-9qhg-99ww-9mqc utcp-http SSRF: HTTP tool invocation follows redirects without re-validating the target
    pypi
  3. 9.8
    CVE-2026-55546 QWED-MCP: Unsafe SymPy `parse_expr()` Remote Code Execution via Unsanitized Math Expression Input
    pypi
  4. 9.1
    CVE-2026-55536 Browser Server WebSocket origin validation bypass via unanchored regex (patch bypass of CVE-2026-40289 / GHSA-8x8f-54wf-vv92)
    pypi
  5. 7.6
    CVE-2026-55532 PraisonAI: Origin-validation bypass (startswith prefix match) enables unauthenticated cross-site request forgery against the PraisonAI MCP HTTP server
    pypi
  6. 8.2
    CVE-2026-55533 PraisonAI: Authentication fail-open in Recipe server allows unauthenticated access when API key or JWT auth is configured without a secret
    pypi
  7. 8.6
    CVE-2026-55539 PraisonAI: [Auth Bypass] PraisonAI async Jobs API (`/api/v1/runs`) has no authentication — unauthenticated job execution, result theft, cancel and delete
    pypi
  8. 7.1
    CVE-2026-55527 PraisonAI: Arbitrary file write via unsanitized `user_id` in `FileMemory.__init__()` — path traversal to any writable location
    pypi
  9. 8.8
    CVE-2026-55541 PraisonAI: `--api-key` flag on `praisonai serve` is not properly enforced
    pypi
  10. 6.8
    CVE-2026-55535 PraisonAI: Server-Side Request Forgery via DNS rebinding bypass in webhook_url validation
    pypi
  11. 7.1
    CVE-2026-55537 PraisonAI: Webhook SSRF via DNS fail-open in `JobSubmitRequest.validate_webhook_url()` — bypass of CVE-2026-40114
    pypi
  12. 7.3
    CVE-2026-55538 PraisonAI: [Auth Bypass] `praisonai serve agents --api-key` is silently ignored — agent-invocation routes (`POST /agents`, `POST /agents/{agent_name}`) run unauthenticated
    pypi
  13. 7.1
    CVE-2026-55540 PraisonAI: [Path Traversal] agent tools escape the configured workspace via symlinks
    pypi
  14. 6.1
    CVE-2026-55530 PraisonAI: ast_grep_rewrite rewrites arbitrary files without the @require_approval gate enforced on every sibling mutation tool
    pypi
  15. 8.6
    CVE-2026-55534 PraisonAI serve agents --api-key is ignored, allowing unauthenticated remote agent execution
    pypi
  16. 8.5
    CVE-2026-55526 PraisonAI: SSRF protection bypass in `spider_tools._host_is_blocked()` via DNS-resolved hostnames (`127.0.0.1.nip.io`)
    pypi
  17. 6.5
    CVE-2026-55531 PraisonAI: Unauthenticated unbounded session accumulation in the PraisonAI MCP HTTP server (memory exhaustion; session TTL never enforced)
    pypi
  18. 8.2
    CVE-2026-55528 praisonaiagents: AgentServer declares auth_token but never enforces it on any route (CWE-862)
    pypi
  19. 6.9
    CVE-2026-55529 PraisonAI: Origin validation bypass in MCP HTTP Stream transport allows browser-mediated unauthenticated tool execution on local MCP server
    pypi
  20. 7.5
    CVE-2026-55525 PraisonAI: SSRF via redirect-following in praisonaiagents web_crawl
    pypi
  21. 10.0
    CVE-2026-53710 MCP Context Forge: RestrictedPython sandbox bypass via getattr builtin in python_sandbox_server
    pypi
    EPSS 1.1% chance of exploitation in 30 days, percentile 67%
  22. 7.5
    GHSA-8m2q-wq3r-6hq8 Quadratic complexity in LinkifyIt.match() enables denial of service
    pypi unreviewed · maintainers only
  23. 3.1
    GHSA-q39v-c6jg-x6gj Unhandled ValueError in Screen.get_input when a "window resize" command carries non-integer arguments
    pypi unreviewed · maintainers only
  24. 2.5
    CVE-2026-71514 NLTK 3.9.4 through 3.10.2 Path Traversal via CrubadanCorpusReader pathsec Bypass
    pypi
  25. 8.8
    CVE-2026-71513 NLTK 3.10.0 through 3.10.2 Remote Code Execution via AllowlistUnpickler Dotted-Name Bypass
    pypi
    EPSS 1.1% chance of exploitation in 30 days, percentile 66%
  26. 10.0
    CVE-2026-61539 Xinference: Remote code execution via unsafe `eval()` in Llama3 tool-call parsing
    pypi
    EPSS 1.2% chance of exploitation in 30 days, percentile 69%
  27. 8.8
    CVE-2026-62675 Omnigent: Uploaded Agent Bundle Allows Authenticated Runner RCE via Python Callable Tools
    pypi
  28. 9.0
    CVE-2026-62674 Omnigent: Shared Agent Bundle Overwrite Leads to Authenticated Runner RCE
    pypi
  29. 8.8
    CVE-2026-62677 Omnigent: Unvalidated os_env.cwd in agent bundle yields arbitrary host filesystem access on runners without OMNIGENT_RUNNER_WORKSPACE
    pypi
  30. 7.1
    CVE-2026-62676 Omnigent Guardrail policy bypass: shell-command parser fails open in policies/builtins/_shell.py
    pypi