LangGraph checkpoint savers provide Postgres- and SQLite-backed state persistence for LangGraph workflows and agents. Prior to langgraph-checkpoint-postgres 3.1.3 and langgraph-checkpoint-sqlite 3.1.2, PostgresStore, AsyncPostgresStore, …

▾ Sunlitlangchain-ai · langgraphEPSS 0.30%via CVEORG

CVE-2026-115886Medium· 6.5

4d ago

MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpoints

▾ Sunlitmlflow · mlflowEPSS 0.32%via OSV

CVE-2026-115889Critical· 9.9

4d ago

Wasmtime: Bit-packing in Cranelift compiler causes silent overflow and miscompilation

Wasmtime is a runtime for WebAssembly. Prior to 36.0.19 and 43.0.0, the Cranelift compiler backend bit-packs SSA value indices in a way that can silently overflow in release builds when compiling a sufficiently large or specially crafted…

▾ Midnightbytecodealliance · wasmtimeEPSS 0.45%via CVEORG

CVE-2026-115877Medium· 5.4

4d ago

twisted: Twisted: HTTP request smuggling via improper header delimiter handling (CVE-2026-115877)

A flaw was found in Twisted. The HTTP server component improperly accepts bare carriage return or line feed characters within header values instead of enforcing strict line endings. A remote attacker can exploit this framing disagreement a…

▾ SunlitRed Hat · Red Hat Ansible Automation Platform 2EPSS 0.26%via CSAF

GHSA-x9ff-22gv-65f4Medium

4d ago

Echo: BodyDump can discard BodyLimit overflow errors for unknown-length requests

▾ Sunlitlabstack · github.com/labstack/echo/v5via OSV

GHSA-f48p-c9v4-h7xvHigh

4d ago

Echo: BodyDump captures request and response bodies without size limits in v4

▾ Twilightlabstack · github.com/labstack/echo/v4via OSV

GHSA-h7wr-284f-5qvcHigh

4d ago

Echo: Decompress permits unbounded gzip expansion in v4

▾ Twilightlabstack · github.com/labstack/echo/v4via OSV

GHSA-cxf3-9h37-7rr8Critical

4d ago

Echo: Rejected WebSocket upgrades can bypass Echo route-level access controls

▾ Midnightlabstack · github.com/labstack/echo/v4via OSV

GHSA-h53f-rm2w-w7rgMedium· 5.3

4d ago

Echo: X-Real-IP extractor trusts the header value instead of the sending peer

▾ Sunlitlabstack · github.com/labstack/echo/v5via OSV

GHSA-9969-6676-49h5High

4d ago

Echo: WebSocket proxy can retain connections and handlers after client disconnect

▾ Twilightlabstack · github.com/labstack/echo/v4via OSV

GHSA-q54r-jf2p-rfr2High· 7.3

4d ago

gitoxide gix: untrusted .git/config disables filesystem .git-protection path checks via unfiltered protect_options()

▾ Twilightgix · gixvia OSV

GHSA-vqqp-x5qm-5qp4Medium· 5.9

4d ago

FastMCP MCP client wrappers construct M2M OAuth providers without issuer binding — client secret redirectable to attacker-advertised auth…

FastMCP MCP client wrappers construct M2M OAuth providers without issuer binding — client secret redirectable to attacker-advertised authorization server

▾ Sunlitfastmcp · fastmcpvia OSV

GHSA-7xgj-8392-5q4rMedium· 6.8

4d ago

FastMCP: Post-transform component authorization is skipped on direct calls

▾ Sunlitfastmcp · fastmcpvia OSV

CVE-2026-115572High· 7.1

4d ago

pypdf: Possible long runtimes for repeated references to the same missing object

▾ Twilightpypdf · pypdfEPSS 0.38%via OSV

Tagged “osv”

Malicious code in loadferry (PyPI)

Malicious code in larchworker (PyPI)

Malicious code in juniperrun (PyPI)

Malicious code in jobwharf (PyPI)

Malicious code in flintqueue (PyPI)

Malicious code in ferretqueue (PyPI)

Malicious code in cobbleload (PyPI)

Malicious code in brookworker (PyPI)

Malicious code in brambletask (PyPI)

Malicious code in badgertask (PyPI)

Malicious code in kestreljob (PyPI)

Malicious code in onsokets (PyPI)

setuptools: Windows path escape via namespace_packages.txt during legacy wheel installation Description

Fallow: A `.*` glob segment let an analyzed repository make Fallow test paths in the parent of the project root

filelock: On Windows an oplock on a soft lock's marker holds SoftFileLock.acquire() past its timeout and blocks the stale break

filelock: ReadWriteLock on Windows acts on SQLite side files another local user places beside its database

LangGraph: Namespace labels containing `.` reach other namespaces in Postgres and SQLite stores

MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpoints

Wasmtime: Bit-packing in Cranelift compiler causes silent overflow and miscompilation

twisted: Twisted: HTTP request smuggling via improper header delimiter handling (CVE-2026-115877)

Echo: BodyDump can discard BodyLimit overflow errors for unknown-length requests

Echo: BodyDump captures request and response bodies without size limits in v4

Echo: Decompress permits unbounded gzip expansion in v4

Echo: Rejected WebSocket upgrades can bypass Echo route-level access controls

Echo: X-Real-IP extractor trusts the header value instead of the sending peer

Echo: WebSocket proxy can retain connections and handlers after client disconnect

gitoxide gix: untrusted .git/config disables filesystem .git-protection path checks via unfiltered protect_options()

FastMCP MCP client wrappers construct M2M OAuth providers without issuer binding — client secret redirectable to attacker-advertised auth…

FastMCP: Post-transform component authorization is skipped on direct calls

pypdf: Possible long runtimes for repeated references to the same missing object