Tagged “pip”

CVEs tagged pip, newest first.

5513 CVEsRSS

CVE-2026-53995High· 8.2PoC

MLflow 3.17.1 and prior Path Traversal via Trace ID API

MLflow 3.17.1 and earlier contains a path traversal vulnerability in the FileStore tracking backend that allows unauthenticated attackers to control filesystem paths by submitting a crafted trace ID containing traversal sequences to the …

▾ Midnightmlflow · mlflowEPSS 0.63%via CVEORG

CVE-2026-111066High· 7.5

2w ago

aiohttp: aiohttp: Denial of Service via file descriptor exhaustion in multipart request processing (CVE-2026-111066)

A flaw was found in aiohttp. When processing multipart requests, the framework fails to properly limit the number of open file descriptors retained during request handling. An unauthenticated remote attacker can exploit this issue by sendi…

▾ TwilightRed Hat · Red Hat OpenShift AI (RHOAI)EPSS 0.41%via CSAF

CVE-2026-111750Medium· 6.3

2w ago

AIOHTTP: Pure-Python parser request smuggling

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, the pure Python parser accepts ambiguous HTTP request framing. An unauthenticated attacker can consequently smuggle requests when an applica…

▾ Sunlitaio-libs · aiohttpEPSS 0.38%via CVEORG

CVE-2026-111749Low· 2.3

2w ago

AIOHTTP: Cookie from subdomain can remove Host-Only Scope from existing cookies

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, Host-Only scope on an existing parent-domain cookie can be removed by a subdomain. A user who accesses an untrusted subdomain can consequent…

▾ Sunlitaio-libs · aiohttpEPSS 0.38%via CVEORG

GHSA-pcc4-rvhr-2pr8Medium

2w ago

Graphify Fortran extractor: incomplete cpp #include hardening allows arbitrary host-file read/exfiltration when indexing an untrusted repo

▾ Sunlitgraphifyy · graphifyyvia OSV

CVE-2026-111059Medium· 6.1

2w ago

Mercury: Stored / DOM Cross-Site Scripting (XSS): mr.Markdown renders untrusted content as raw, unsanitized HTML

Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From 3.0.0 until 3.2.11, mr.Markdown converts attacker-controlled Markdown to HTML without sanitizing raw HTML before assigning it to an ipyw…

▾ Sunlitmljar · mercuryEPSS 0.28%via CVEORG

GHSA-2g87-pp6c-29x5High

2w ago

aiohttp: Multiple instances of excessive or unbounded memory/CPU use

▾ Twilightaiohttp · aiohttpvia OSV

CVE-2026-111064High· 8.2

2w ago

aiohttp server lacks an initial request/header timeout

AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.4, keepalive timeout handling is absent during the initial portion of a request. An attacker can keep an idle connection open indefinitely befo…

▾ Twilightaio-libs · aiohttpEPSS 0.40%via CVEORG

CVE-2026-111063Medium· 6.3

2w ago

AIOHTTP: Secure attribute not enforced for shared cookie

▾ Sunlitaiohttp · aiohttpEPSS 0.23%via OSV

CVE-2026-111058Critical· 9.8PoC

2w ago

Mercury: Unauthenticated Remote Code Execution via /api/kernels

Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. Prior to 3.2.6, default tokenless deployments allow anonymous clients to create Jupyter kernels and send execute_request messages containing …

▾ Abyssalmljar · mercuryEPSS 0.52%via CVEORG

CVE-2026-111057Critical· 10.0PoC

2w ago

Mercury: Unauthenticated Remote Code Execution in /api/terminals - access control bypass

Mercury is a Python framework for sharing Jupyter notebooks as web applications and dashboards. From 3.0.0 until 3.2.4, a missing comma in BLOCKED_PATTERNS concatenates the /lab and /api/terminals regular-expression literals. Requests to…

▾ Abyssalmljar · mercuryEPSS 0.70%via CVEORG

MAL-2026-17927Critical⚠ Exploited

2w ago

LoopX serve-status permissive CORS policy exposes control-plane state and private Markdown files

Open and provider-neutral, LoopX is a lightweight state kernel and local-first control plane for loop engineering. From version 0.0.1 until 0.4.5, `loopx serve-status` in `loopx/status_server.py` uses `StatusRequestHandler._send_json()` …

▾ Midnighthuangruiteng · loopxEPSS 0.30%via CVEORG

CVE-2026-68549Low· 3.3

3w ago

ClickMigrate has Path Traversal in "revision -m" argument

▾ Sunlitclickmigrate · clickmigratevia OSV

CVE-2026-96620Critical· 9.2

3w ago

Claude Agent SDK: Argument Injection via resume Option Allows Arbitrary Command Execution

Claude Agent SDK is a Python SDK for Claude Code. Prior to 0.2.121, the resume option is passed to the Claude CLI as a separate token without validation, so a dash-leading value is parsed as an independent CLI flag. An attacker can injec…

▾ Midnightanthropics · claude-agent-sdk-pythonEPSS 0.70%via CVEORG

MAL-2026-17900Critical⚠ Exploited

3w ago