Tagged “osv”
CVEs tagged osv, newest first.
7111 CVEsRSS
MAL-2026-18226Critical⚠ ExploitedMalicious code in ferretqueue (PyPI)
Malicious code in ferretqueue (PyPI)
MAL-2026-18225Critical⚠ ExploitedMalicious code in cobbleload (PyPI)
Malicious code in cobbleload (PyPI)
MAL-2026-18224Critical⚠ ExploitedMalicious code in brookworker (PyPI)
Malicious code in brookworker (PyPI)
MAL-2026-18223Critical⚠ ExploitedMalicious code in brambletask (PyPI)
Malicious code in brambletask (PyPI)
MAL-2026-18222Critical⚠ ExploitedMalicious code in badgertask (PyPI)
Malicious code in badgertask (PyPI)
MAL-2026-18221Critical⚠ ExploitedMalicious code in kestreljob (PyPI)
Malicious code in kestreljob (PyPI)
MAL-2026-18219Critical⚠ ExploitedMalicious code in onsokets (PyPI)
Malicious code in onsokets (PyPI)
GHSA-xmj3-9gf7-h52wLowsetuptools: Windows path escape via namespace_packages.txt during legacy wheel installation Description
setuptools: Windows path escape via namespace_packages.txt during legacy wheel installation Description
GHSA-h4fr-cmh5-qr62Low· 3.3Fallow: A `.*` glob segment let an analyzed repository make Fallow test paths in the parent of the project root
Fallow: A `.*` glob segment let an analyzed repository make Fallow test paths in the parent of the project root
CVE-2026-83813Low· 3.1PoCTwisted: DNS Response Spoofing in twisted.names Due to Missing Source Address Validation
Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.names.dns.DNSDatagramProtocol accepts a UDP DNS response for a pending query when its 16-bit transaction ID matches but d…
CVE-2026-115885Medium· 4.1LangGraph CLI prints the registry push token in `langgraph deploy --verbose` output
The LangGraph CLI is the official command-line interface for LangGraph. From 0.4.15 until 0.4.32, langgraph deploy --verbose passes a temporary registry push token on standard input to docker login --password-stdin, but the CLI subproces…
CVE-2026-115883Medium· 6.0LangGraph: Namespace labels containing `.` reach other namespaces in Postgres and SQLite stores
LangGraph checkpoint savers provide Postgres- and SQLite-backed state persistence for LangGraph workflows and agents. Prior to langgraph-checkpoint-postgres 3.1.3 and langgraph-checkpoint-sqlite 3.1.2, PostgresStore, AsyncPostgresStore, …
CVE-2026-115886Medium· 6.5PoCMLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpoints
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.12.0rc0 until 3.17.0, the scorer invoke, register, and GenAI evaluate endpoints, including unauthenticated POST /ajax…
CVE-2026-115892Medium· 5.7Wasmtime: Panic lowering a host-created component model stream into a guest that expects a different payload type
Wasmtime is a runtime for WebAssembly. From 46.0.0 until 48.0.7 and 49.0.4, lowering a host-created component-model stream or future into a guest can omit a required payload-type check after the value passes through guest code and return…
CVE-2026-115893Critical· 9.9PoCWasmtime: Cranelift backend on aarch64 can jump to incorrect target on large Wasm `br_table` instruction
Wasmtime is a runtime for WebAssembly. Prior to 36.0.19, 48.0.7, and 49.0.4, the Cranelift compiler backend on aarch64 can compile a Wasm br_table instruction with more than approximately 256,000 targets so that it has an incorrect condi…
CVE-2026-115889Critical· 9.9PoCWasmtime: Bit-packing in Cranelift compiler causes silent overflow and miscompilation
Wasmtime is a runtime for WebAssembly. Prior to 36.0.19 and 43.0.0, the Cranelift compiler backend bit-packs SSA value indices in a way that can silently overflow in release builds when compiling a sufficiently large or specially crafted…
CVE-2026-115877Medium· 5.4PoCTwisted: HTTP Request Smuggling in twisted.web via a Bare CR or LF in a Header Value
Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.web.http.HTTPChannel.headerReceived rejects a NUL byte in an HTTP header value but accepts a bare carriage return or bare…
GHSA-x9ff-22gv-65f4MediumEcho: BodyDump can discard BodyLimit overflow errors for unknown-length requests
Echo: BodyDump can discard BodyLimit overflow errors for unknown-length requests
GHSA-f48p-c9v4-h7xvHighEcho: BodyDump captures request and response bodies without size limits in v4
Echo: BodyDump captures request and response bodies without size limits in v4
GHSA-h7wr-284f-5qvcHighEcho: Decompress permits unbounded gzip expansion in v4
Echo: Decompress permits unbounded gzip expansion in v4
GHSA-cxf3-9h37-7rr8CriticalEcho: Rejected WebSocket upgrades can bypass Echo route-level access controls
Echo: Rejected WebSocket upgrades can bypass Echo route-level access controls
GHSA-h53f-rm2w-w7rgMedium· 5.3Echo: X-Real-IP extractor trusts the header value instead of the sending peer
Echo: X-Real-IP extractor trusts the header value instead of the sending peer
GHSA-9969-6676-49h5HighEcho: WebSocket proxy can retain connections and handlers after client disconnect
Echo: WebSocket proxy can retain connections and handlers after client disconnect
GHSA-q54r-jf2p-rfr2High· 7.3gitoxide gix: untrusted .git/config disables filesystem .git-protection path checks via unfiltered protect_options()
gitoxide gix: untrusted .git/config disables filesystem .git-protection path checks via unfiltered protect_options()
GHSA-vqqp-x5qm-5qp4Medium· 5.9FastMCP MCP client wrappers construct M2M OAuth providers without issuer binding — client secret redirectable to attacker-advertised auth…
FastMCP MCP client wrappers construct M2M OAuth providers without issuer binding — client secret redirectable to attacker-advertised authorization server
GHSA-7xgj-8392-5q4rMedium· 6.8FastMCP: Post-transform component authorization is skipped on direct calls
FastMCP: Post-transform component authorization is skipped on direct calls
CVE-2026-115572High· 7.1pypdf: Possible long runtimes for repeated references to the same missing object
pypdf is a free and open-source pure-python PDF library. Prior to 6.21.2, an attacker can craft a PDF that repeatedly references the same nonexistent indirect object, causing relevant file parts such as pages to trigger repeated full-fil…
CVE-2026-115585High· 7.1pypdf: Possible long runtimes for repeated malformed cross-reference entries (Follow-up)
pypdf is a free and open-source pure-python PDF library. Prior to 6.21.2, an incomplete remediation for repeated malformed cross-reference entries in GHSA-55h5-xmcq-c37v could still trigger a complete PDF stream reload during each recove…
CVE-2026-115580High· 7.1pypdf: Possible long runtimes for large xref table header limits
pypdf is a free and open-source pure-python PDF library. Prior to 6.21.2, an attacker can craft a PDF with a standard cross-reference table whose declared entry count exceeds what the file can contain, causing excessive processing and lo…
CVE-2026-115586High· 7.1virtualenv: Bash activator leaves the --prompt value unescaped in PS1 when promptvars is off, so prompt expansion later executes it (regr…
virtualenv: Bash activator leaves the --prompt value unescaped in PS1 when promptvars is off, so prompt expansion later executes it (regression in 21.14.9)