Skip to content
Fencer Intel

All · pypi

Newest first, late arrivals on top. Also a feed.

  1. 8.1
    CVE-2026-58273 Rucio: Authorisation Bypass on REST API endpoint for signing URLs
    pypi
  2. 3.3
    GHSA-9w45-w2cj-r5hx Runtime directory created through another user's symlink at XDG_RUNTIME_DIR
    pypi unreviewed · maintainers only
  3. 3.3
    GHSA-mmf6-974m-4f43 macOS user_runtime_dir accepts another user's XDG_RUNTIME_DIR
    pypi unreviewed · maintainers only
  4. 3.3
    GHSA-jmm4-8x35-q6fq Runtime directory created through another user's symlink in a parent of XDG_RUNTIME_DIR
    pypi unreviewed · maintainers only
  5. 3.3
    GHSA-2gh9-8m4r-2xwh Another local user can plant the Unix runtime directory in the shared temporary directory
    pypi unreviewed · maintainers only
  6. 2.5
    GHSA-rjcv-6975-fwqp macOS site cache creation follows another user's entry in /Library/Caches
    pypi unreviewed · maintainers only
  7. 2.2
    GHSA-5pjc-393q-rwmf multipath site directories gain an entry outside the base chosen by appname or version
    pypi unreviewed · maintainers only
  8. 5.5
    CVE-2026-119203 pypdf: Possible infinite loop when hitting EOF in standard xref table during trailer search
    pypi
  9. 5.5
    CVE-2026-119204 pypdf: Possible large memory usage when parsing page tree
    pypi
  10. 5.5
    CVE-2026-119205 pypdf: Possible infinite loop when cloning dictionaries
    pypi
  11. 5.9
    GHSA-34f4-24c9-rgcm Unverified ownership of the default Athena query result location in AWS SDK for pandas
    pypi unreviewed · maintainers only
  12. 4.3
    GHSA-4449-4cjp-ffp5 Missing authorization on gateway secret creation in MLflow basic-auth with workspaces enabled
    pypi unreviewed · maintainers only
  13. 5.3
    GHSA-vxg4-47v8-5phf Windows static file serving exposes sibling directories sharing the mount prefix
    pypi unreviewed · maintainers only
  14. 10.0
    GHSA-w4c7-34wj-hqm8 Unauthenticated file read leaks master key on Enterprise proxy
    pypi unreviewed · maintainers only
  15. 5.3
    CVE-2026-116677 OpenWISP Controller CA CRL REST API does not scope requests to managed organizations
    pypi
  16. 7.8
    GHSA-wf6j-7hvr-gr93 Hydra legacy target blacklist permits unsafe PyYAML loading
    pypi
  17. 9.3
    CVE-2026-48705 MONAI: MONAILabel Server Crash and Silent Inference Corruption via Crafted DICOM (pydicom DS/IS Validation Bypass)
    pypi
  18. 7.5
    CVE-2026-117601 Electrum before 4.8.3 Missing Signature Verification of Mempool Transactions
    pypi
  19. 5.5
    CVE-2026-119206 pypdf: Possible long runtimes when retrieving page labels
    pypi
  20. 5.5
    CVE-2026-119207 pypdf: Possible large memory usage for exceptions in strict mode
    pypi
  21. 5.5
    CVE-2026-119208 pypdf: Possible long runtimes/large memory usage for encrypted PDF files
    pypi
  22. 5.5
    CVE-2026-119209 pypdf: Possible large memory usage when parsing cross-reference streams
    pypi
  23. 9.1
    GHSA-2xm2-c8xx-p9vh gRPC Python (grpcio): bundled CA store trusts compromised eMudhra intermediate CAs
    pypi unreviewed · maintainers only
  24. 7.5
    GHSA-p6xp-9h6j-r278 CPU denial of service in cbor2 through hash-colliding map keys
    pypi unreviewed · maintainers only
  25. 6.3
    CVE-2026-116575 Mem0: Cross-tenant conversation leak via unescaped delimiter collision in session-scope key (_build_session_scope)
    pypinpm
  26. 8.6
    CVE-2026-115924 Rembg: Unauthenticated SAM model injection permits local-file disclosure through malicious ONNX graphs
    pypi
  27. 4.8
    GHSA-xh55-3p42-7v2h Permission classes returning a non-boolean value, such as an async generator, can grant access
    pypi unreviewed · maintainers only
  28. 7.8
    GHSA-757g-8w3h-hp29 Hydra legacy target blacklist permits unsafe PyYAML loading
    pypi unreviewed · maintainers only
  29. 6.5
    CVE-2026-115918 vLLM: Responses API bypasses trust_request_chat_template for chat_template_kwargs
    pypi
  30. 3.4
    CVE-2026-115917 vLLM: Permissive default CORS origins allow cross-origin requests to the vLLM HTTP server
    pypi