Skip to content
Fencer Intel

All · pypi

Newest first, late arrivals on top. Also a feed.

  1. 6.7
    CVE-2026-105745 Docling: Plugin entry points are imported before the allow_external_plugins check
    pypi
  2. 7.5
    CVE-2026-105744 Docling: Arbitrary file read/write (and command execution when shell-escape is enabled) when rendering untrusted TikZ with the opt-in Tectonic engine
    pypi
  3. 4.0
    CVE-2026-105743 Docling: SSRF guard bypass in remote resource fetching (DNS rebinding / multi-record resolution; no IP validation in HTML render mode)
    pypi
  4. 3.7
    CVE-2026-105742 Docling: Configured HTTP headers sent to every remote image host named by a document
    pypi
  5. 7.1
    CVE-2026-105741 Langflow: IP Spoofing Bypass via `X-Forwarded-For` Allowing Remote Configuration Write
    pypi
  6. 7.1
    CVE-2026-105699 Langflow: Authenticated Cross-Project File Disclosure via Unscoped MCP Resource Handlers
    pypi
  7. 5.4
    CVE-2026-105698 Langflow: Cross-user flow access and vertex execution via deprecated /api/v1/build/{flow_id}/vertices endpoints
    pypi
  8. 9.9
    CVE-2026-105697 Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration
    pypi
    EPSS 1.5% chance of exploitation in 30 days, percentile 74%
  9. 6.8
    CVE-2026-116684 Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource server
    pypi
  10. 6.3
    CVE-2026-116694 OpenTelemetry Python: Unbounded memory allocation in Jaeger baggage propagation
    pypi
  11. 7.1
    GHSA-3w55-933p-8pv5 Strands Agents: Local Privilege Escalation via Symlink Attack in Default Session File Storage
    pypi
  12. —
    GHSA-763v-5pjm-fx36 Strands Agents: Default FileSessionManager storage is world-readable on shared systems
    pypi
  13. 6.5
    CVE-2026-77473 AsyncSSH: SFTP Recursive Copy Path Traversal via Unsanitized Server-Supplied Filenames
    pypi maintainer advisory
  14. 9.8
    CVE-2026-114108 HKUDS Vibe-Trading before 0.1.7 Missing Authentication in FastAPI Server Enabling RCE
    pypi
  15. 7.5
    CVE-2026-114106 HKUDS Vibe-Trading 0.1.0 before 0.1.7 Path Traversal via read_document and safe_user_path
    pypi
  16. 8.8
    CVE-2026-114107 HKUDS Vibe-Trading 0.1.0 before 0.1.7 Indirect Prompt Injection RCE via BashTool and BackgroundRunTool
    pypi
  17. 5.9
    CVE-2026-116685 Model Context Protocol Python SDK: HTTP client transports followed cross-origin redirects carrying custom headers and bodies
    pypi
  18. 7.8
    CVE-2026-113726 virtualenv activate runs commands from the environment name in zsh with PROMPT_SUBST
    pypibitnami
  19. 7.5
    CVE-2026-107286 Pydantic AI: Concurrency-limited models can keep their slot when a streamed request ends early
    pypi
  20. 8.1
    GHSA-g5ff-637f-6q2m LiteLLM: internal_user_viewer arbitrary local file read via `vertex_ai_credentials`
    pypi
  21. 7.8
    CVE-2026-113732 virtualenv activate.fish runs commands from a path or prompt with a backslash before a quote
    pypibitnami
  22. 7.8
    CVE-2026-113776 virtualenv activation scripts run code from a path that contains a placeholder name
    pypibitnami
  23. 9.8
    CVE-2026-51886 Langflow: Title Authenticated Remote Code Execution in validate_code via Malicious Decorators Description
    pypi
  24. 7.5
    CVE-2026-109527 Model Context Protocol Python SDK HTTP and OAuth endpoints allow memory exhaustion through unbounded request bodies
    pypi maintainer advisory
  25. 7.5
    CVE-2026-59951 MCP Python SDK: Unbounded Session Accumulation in StreamableHTTP Transport Enables Resource Exhaustion
    pypi
  26. 6.5
    CVE-2026-102991 Mako: Path traversal via drive-letter URI on Windows in TemplateLookup
    pypi
  27. 8.1
    GHSA-742f-8rjv-gpcr VKontakteOpenAPI (vk-openapi) backend trusts unsigned client identity data, enabling account takeover
    pypi unreviewed · maintainers only
  28. 8.1
    GHSA-xx2g-2crg-phvx Login CSRF in GithubAppAuth backend via forgeable installation flow parameters
    pypi unreviewed · maintainers only
  29. 9.1
    GHSA-xr26-vvhv-534h TwilioAuth backend uses unverified AccountSid from callback parameters as identity, enabling account takeover
    pypi unreviewed · maintainers only
  30. 8.1
    GHSA-pq5p-79rj-7c6r WeixinOAuth2APP backend allows login CSRF via unconditional validate_state() bypass
    pypi unreviewed · maintainers only