Tagged “pip”
CVEs tagged pip, newest first.
5513 CVEsRSS
CVE-2026-109956High· 7.0PoCNLTK through 3.10.3 contains a path traversal vulnerability in WekaClassifier that allows attackers to bypass nltk.pathsec containment by supplying unvalidated model paths
NLTK through 3.10.3 contains a path traversal vulnerability in WekaClassifier that allows attackers to bypass nltk.pathsec containment by supplying unvalidated model paths. Attackers controlling the model_filename or model argument can m…
CVE-2026-49265Medium· 6.8OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+
OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. From 3.0.0 until 4.0.0, OAuthLib's PKCE checks in oauthlib/oauth2/rfc6749/grant_types/authorization_code.py compare attacker-supplied code_verifier values …
CVE-2026-49264Medium· 6.1PoCOAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+
OAuthLib is an implementation of the OAuth request-signing logic for Python 3.6+. From 0.6.1 until 4.0.0, OAuthLib's RevocationEndpoint in oauthlib/oauth2/rfc6749/endpoints/revocation.py reflects an unvalidated callback request parameter…
MAL-2026-17847Critical⚠ ExploitedMalicious code in npp-ml (PyPI)
Malicious code in npp-ml (PyPI)
MAL-2026-17809Critical⚠ ExploitedMalicious code in minecraftaccfinder (PyPI)
Malicious code in minecraftaccfinder (PyPI)
CVE-2026-104102Medium· 5.3copyparty is a portable file server
copyparty is a portable file server. Prior to 1.20.19, FTP upload path handling does not confine destinations to configured copyparty volumes. When FTP or FTPS is explicitly enabled, a low-privileged authenticated user can submit travers…
CVE-2026-57118Critical· 9.8PoCPraisonAI is a multi-agent teams system
PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.59, AgentTeam.launch and the Agents alias register GET /{path}/list, POST /{path}, and `POST /{path}/{agent_id}' without access-control checks before listing agents or…
CVE-2026-57143High· 8.8PoCPraisonAI is a multi-agent teams system
PraisonAI is a multi-agent teams system. Prior to praisonaiagents 1.6.62, searxng_search and the search_web SearxNG provider pass the LLM-controlled searxng_url parameter directly to requests.get without validating its scheme, host, port…
MAL-2026-17757Critical⚠ ExploitedMalicious code in webreader (PyPI)
Malicious code in webreader (PyPI)
MAL-2026-17756Critical⚠ ExploitedMalicious code in pafer (PyPI)
Malicious code in pafer (PyPI)
MAL-2026-17755Critical⚠ ExploitedMalicious code in agent-vx (PyPI)
Malicious code in agent-vx (PyPI)
MAL-2026-17753Critical⚠ ExploitedMalicious code in media-manager5 (PyPI)
Malicious code in media-manager5 (PyPI)
MAL-2026-17752Critical⚠ ExploitedMalicious code in agentaix (PyPI)
Malicious code in agentaix (PyPI)
MAL-2026-17807Critical⚠ ExploitedMalicious code in py2ops (PyPI)
Malicious code in py2ops (PyPI)
MAL-2026-17712Critical⚠ ExploitedMalicious code in ig-gox (PyPI)
Malicious code in ig-gox (PyPI)
CVE-2026-108258Medium· 6.9Shiny for Python is a framework for building interactive web applications in Python
Shiny for Python is a framework for building interactive web applications in Python. From 1.4.0 until 1.6.4, bookmark restore accepts a client-supplied state_id and joins it into the server-side shiny_bookmarks directory without validati…
CVE-2026-107841Medium· 5.7pacioli provides least-privilege governance and a governed agent broker for ERPNext
pacioli provides least-privilege governance and a governed agent broker for ERPNext. From version 0.9.6 until version 0.10.0, the pacioli-guard document-layer consent gate allows nested cancellation operations to ride any consent establi…
GHSA-p3pr-8f3m-4qp8Medium· 6.4pyLoad WindowsPhoneNotify addon: non-admin SETTINGS user triggers SSRF via unguarded http.client notification host
pyLoad WindowsPhoneNotify addon: non-admin SETTINGS user triggers SSRF via unguarded http.client notification host
GHSA-fr26-jjhm-638cHighpyLoad: Tar extraction creates device nodes and FIFOs (member types not filtered; tarfile extractall without filter=)
pyLoad: Tar extraction creates device nodes and FIFOs (member types not filtered; tarfile extractall without filter=)
GHSA-jq7h-wrvp-3rgxHigh· 7.5pyLoad: Privilege revocation and password change through the REST API do not invalidate the user's session
pyLoad: Privilege revocation and password change through the REST API do not invalidate the user's session
GHSA-889w-m37p-88m5High· 7.5pyLoad: Api.set_user_permission never invalidates the target's session
pyLoad: Api.set_user_permission never invalidates the target's session
GHSA-9q47-3cm2-2rp8MediumpyLoad: Rate-Limit Bypass and Audit-Log Spoofing via Trusted Client-Controlled `X-Forwarded-For` Header
pyLoad: Rate-Limit Bypass and Audit-Log Spoofing via Trusted Client-Controlled `X-Forwarded-For` Header
GHSA-68w4-83fh-f2w8High· 8.1pyload-ng: getUserData/get_userdata exposed at Perms.ANY allow any authenticated account to brute-force the administrator password
pyload-ng: getUserData/get_userdata exposed at Perms.ANY allow any authenticated account to brute-force the administrator password
CVE-2026-48484Medium· 6.5PoCpyLoad is a free and open-source download manager written in Python
pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev101, the API `rpc` function in `api_blueprint.py` handles `multipart/form-data` uploads by reading the whole content of the uploaded file into memor…
CVE-2026-75597Medium· 5.3PoCpyLoad is a free and open-source download manager written in Python
pyLoad is a free and open-source download manager written in Python. Prior to 0.5.0b3.dev101, the `/web/<path:filename>` route in `src/pyload/webui/app/blueprints/app_blueprint.py` renders Jinja2 templates without any authentication requ…
GHSA-r44w-v6gf-x3p6High· 8.1pyLoad has an authentication bypass in API key validation (check_apikey cache)
pyLoad has an authentication bypass in API key validation (check_apikey cache)
GHSA-86gh-39m5-hhg6Medium· 5.1Duplicate Advisory: PYTHON-6110 Out-of-bounds read in BSON decoding via a malformed Regex element
Duplicate Advisory: PYTHON-6110 Out-of-bounds read in BSON decoding via a malformed Regex element
MAL-2026-17703Critical⚠ ExploitedMalicious code in kafka-roller (PyPI)
Malicious code in kafka-roller (PyPI)
MAL-2026-17702Critical⚠ ExploitedMalicious code in kafka-helmsman (PyPI)
Malicious code in kafka-helmsman (PyPI)
CVE-2026-107728High· 7.5PoCStrawberry GraphQL is a library for creating GraphQL APIs
Strawberry GraphQL is a library for creating GraphQL APIs. From 0.217.0 until 0.326.1, PermissionExtension.resolve() on a synchronous field resolver evaluates the result of has_permission() for truthiness. When a custom permission declar…