Skip to content
Fencer Intel

All · pypi

Newest first, late arrivals on top. Also a feed.

  1. 6.2
    CVE-2026-115921 ONNX: Null Pointer Dereference in ScanInferenceFunction Due to Missing Required Attribute
    pypi
  2. 6.2
    CVE-2026-115919 ONNX: Out-of-Bounds Read in RNN/GRU/LSTM Shape Inference (Old Opsets, Missing Rank Check)
    pypi
  3. —
    GHSA-6q48-6c7w-9gw2 certifi bundles emSign root CAs with compromised intermediate CA keys
    pypi
  4. 6.5
    GHSA-xv4x-g8mx-ch56 Provider-native MCP credentials and URL-derived MCP identifiers could reach traces
    pypi unreviewed · maintainers only
  5. 5.4
    GHSA-5pfm-2g3g-gh85 UI adapters: a client-submitted tool call can execute because the compaction-part drop runs after the dangling-call strip
    pypi unreviewed · maintainers only
  6. 8.2
    CVE-2026-53995 MLflow < 3.18.0 Path Traversal via Trace ID API
    pypibitnami
  7. —
    GHSA-xmj3-9gf7-h52w setuptools: Windows path escape via namespace_packages.txt during legacy wheel installation Description
    pypi
  8. —
    GHSA-pcc4-rvhr-2pr8 Graphify Fortran extractor: incomplete cpp #include hardening allows arbitrary host-file read/exfiltration when indexing an untrusted repo
    pypi
  9. 6.1
    CVE-2026-111059 Mercury: Stored / DOM Cross-Site Scripting (XSS): mr.Markdown renders untrusted content as raw, unsanitized HTML
    pypi
  10. 9.8
    CVE-2026-111058 Mercury: Unauthenticated Remote Code Execution via /api/kernels
    pypi
  11. 10.0
    CVE-2026-111057 Mercury: Unauthenticated Remote Code Execution in /api/terminals - access control bypass
    pypi
  12. 5.4
    CVE-2026-115885 LangGraph CLI prints the registry push token in `langgraph deploy --verbose` output
    pypi
  13. 5.3
    CVE-2026-121438 Mistune before 3.3.3 Denial of Service via Balanced Bracket Link Parsing
    pypi maintainer advisory
  14. 7.5
    GHSA-phmp-hrw4-r36r Quadratic-time DoS in parse_link_href via unbounded parenthesis scan on empty-label links
    pypi unreviewed · maintainers only
  15. 7.5
    GHSA-ww7q-mxrj-5ffg Quadratic-time DoS in inline image parsing (precedence_scan) bypasses not-is-image guards
    pypi unreviewed · maintainers only
  16. 7.5
    CVE-2026-121437 Mistune 3.3.0 before 3.3.4 Quadratic-Time DoS via _process_emphasis_delimiters
    pypi maintainer advisory
  17. 5.3
    CVE-2026-114501 Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1
    pypibitnami
  18. 5.9
    CVE-2026-116579 Autobahn Python: permessage-brotli inflates a whole frame before maxMessagePayloadSize is checked (incomplete fix of GHSA-hxp9-w8x3-p566)
    pypi
  19. 7.5
    GHSA-cg3c-5x66-h9cc Attacker-controlled regex in RegexSearchTransform can block a FastMCP worker
    pypi unreviewed · maintainers only
  20. 9.8
    CVE-2026-112398 Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution
    pypibitnami
  21. 4.7
    CVE-2026-112939 filelock: SoftFileLock removes a live holder's marker when another user forges the PID in a writable marker
    pypi
  22. 6.1
    CVE-2026-112936 filelock: ReadWriteLock follows a symlink at the lock path into SQLite
    pypi
  23. 4.7
    CVE-2026-112906 filelock: SoftFileLock evicts a fresh lock file whose watched age another local user's pre-dated file passed on through inode reuse
    pypi
  24. 7.1
    CVE-2026-112940 filelock ReadWriteLock: SQLite reopens the lock database by name, so a planted symlink or journal file makes the lock user's process overwrite or unlink its own files
    pypi
  25. 3.3
    CVE-2026-112941 filelock: SoftReadWriteLock follows a lock tree swapped in after its first acquire and writes lock records into directories of the user running the lock
    pypi
  26. 6.3
    CVE-2026-112911 filelock: StrictSoftFileLock and SoftReadWriteLock adopt a protocol directory another user created first, losing mutual exclusion
    pypi
  27. 6.1
    CVE-2026-112909 filelock: UnixFileLock truncates and chmods any regular file another user renames or hard-links onto the lock path
    pypi
  28. 6.1
    CVE-2026-112937 filelock: ReadWriteLock on the hard-link route deletes any directory another user renames onto its .filelock-* link directory name
    pypi
  29. 4.7
    CVE-2026-112935 filelock: SoftFileLock stale-lock break removes a live lock file on a reused inode number and admits two holders
    pypi
  30. 5.3
    CVE-2026-112914 filelock: SoftFileLock stale-break restore follows a swapped-in symbolic link and hard-links a file of the user running the lock into the lock directory
    pypi