Latest vulnerabilities
Newest first, late arrivals on top. Also a feed.
-
7.1
-
9.8
-
9.8
-
6.5
-
6.5
-
6.5
-
6.5GHSA-mgmv-r532-pg36 A credential in an MCP server URL path could reach chat frontends through MCP Apps eventspypi unreviewed · maintainers only
-
3.7GHSA-5ppx-9jq6-6pmw Domain allowlists in web fetching and PlaywrightBrowser resolved refused hostnames before rejecting thempypi unreviewed · maintainers only
-
5.9GHSA-4cj4-hgwf-4hc4 Tool result data shaped like a file is rebuilt as a file download or provider file reference when message history is reloadedpypi unreviewed · maintainers only
-
4.3GHSA-r879-rxgj-3g75 UI adapters take quadratic time to load a submitted message with many partspypi unreviewed · maintainers only
-
6.5GHSA-484x-x9m4-62cj Decision models expand tool argument schemas without a limitpypi unreviewed · maintainers only
-
6.5GHSA-7494-925c-rrxv Tool schemas with repeated definition references expand exponentially for models that need inlined schemaspypi unreviewed · maintainers only
-
6.5GHSA-jp94-mmr3-2pvv Embedding `extra_headers` and `extra_body` settings are recorded in tracespypi unreviewed · maintainers only
-
6.8GHSA-5fj9-5pjw-vpwc SSRF cloud-metadata guard does not block Tencent Cloud's metadata service (169.254.0.23)pypi unreviewed · maintainers only
-
7.5GHSA-mfx5-pc32-32m8 Harness private-key redaction can take exponential time on short inputunreviewed · maintainers only
-
7.5GHSA-m5vj-8mcw-82qx Local web fetching can exhaust memory and block the event loop when it formats nested JSONpypi unreviewed · maintainers only
-
6.5CVE-2026-123125 Symfony: Ip Constraint public/private Modes Accept IPv4-Mapped and IPv4-Compatible IPv6 Addresses allowing SSRF Filter Bypassmaintainer advisory
-
4.3CVE-2026-118517 Symfony: HtmlSanitizer allowLinkHosts() / allowMediaHosts() Bypass via URLs Without a Well-Formed Authority (Incomplete Fix for CVE-2026-45066)maintainer advisory
-
5.3CVE-2026-121373 Symfony: HtmlSanitizer MetaRefreshAttributeSanitizer Matches Only a Narrow Subset of the Browser Refresh Grammar (Incomplete Fix for CVE-2026-48761)maintainer advisory
-
5.4CVE-2026-121949 Symfony: HtmlSanitizer Does Not URL-Sanitize srcset and imagesrcset: Media Scheme and Host Allow-List Bypassmaintainer advisory
-
6.3CVE-2026-123824 Symfony: XXE (Local File Read) in Config XmlUtils::parse() via validateOnParse = truemaintainer advisory
-
6.5CVE-2026-122053 Symfony: ObjectNormalizer Dotted-Key Property-Path Traversal Bypasses #[Ignore] on Nested Objectsmaintainer advisory
-
7.7CVE-2026-118513 Symfony: X.509 Authentication Impersonation via DN Value Injection (incomplete fix for CVE-2026-45063)maintainer advisory
-
6.3CVE-2026-118514 Symfony: HEAD Requests Bypass the methods Option of security.access_control Rules and Firewallsmaintainer advisory
-
6.3CVE-2026-121619 Symfony: The "private_ranges" Trusted Proxies Shortcut Trusts Clients Presenting an IPv4-Mapped, 6to4, Teredo or NAT64 Address as Reverse Proxiesmaintainer advisory
-
8.2CVE-2026-121971 Symfony: ScopingHttpClient Sends the Credentials of Its Default Scope to Other Origins Through Network-Path Referencesmaintainer advisory
-
2.3CVE-2026-123339 Symfony: Inline Fragments Let Untrusted Forwarded Headers Set the Host, Scheme and Port of the URLs Generated for the Main Requestmaintainer advisory
-
8.4CVE-2026-118515 Symfony: The Serializer Builds UploadedFile Objects From Request Data, Letting a Client Point an Upload at Any Server Filemaintainer advisory
-
6.3CVE-2026-118516 Symfony: Host Placeholders Can Match the Start of the Path in Compiled URL Matchers, Bypassing Path-Based Access Controlmaintainer advisory
-
2.3CVE-2026-123746 Symfony: Programmatic Logins Skip the checkPostAuth() Method of User Checkersmaintainer advisory