Tagged “pip”
CVEs tagged pip, newest first.
5375 CVEsRSS
CVE-2026-114610Medium· 6.5fpdf2: Exponential SVG '<use>' expansion causes CPU and memory exhaustion in 'FPDF.image()'
fpdf2: Exponential SVG '<use>' expansion causes CPU and memory exhaustion in 'FPDF.image()'
CVE-2026-114609Medium· 5.8fpdf2 implicitly loads external URLs and local image paths when rendering attacker-controlled content
fpdf2 implicitly loads external URLs and local image paths when rendering attacker-controlled content
CVE-2026-114608Medium· 5.4Pylint: Arbitrary code execution via pickle deserialization of the stats cache in PYLINT_HOME
Pylint: Arbitrary code execution via pickle deserialization of the stats cache in PYLINT_HOME
CVE-2026-114605High· 7.5dnspython dns.name.from_wire_parser() excessive CPU use
dnspython dns.name.from_wire_parser() excessive CPU use
CVE-2026-114510High· 7.1Flexible GraphRAG: Cypher/Graph Injection via broken string-escaping in FalkorDB adapter (_escape()) - full graph wipe from ingested-docu…
Flexible GraphRAG: Cypher/Graph Injection via broken string-escaping in FalkorDB adapter (_escape()) - full graph wipe from ingested-document content
CVE-2026-114053High· 8.1vLLM: Request-controlled mm_processor_kwargs.code_revision allows remote code execution
vLLM: Request-controlled mm_processor_kwargs.code_revision allows remote code execution
MAL-2026-18328Critical⚠ ExploitedMalicious code in netweavex (PyPI)
Malicious code in netweavex (PyPI)
MAL-2026-18327Critical⚠ ExploitedMalicious code in zagents-framework (PyPI)
Malicious code in zagents-framework (PyPI)
MAL-2026-18326Critical⚠ ExploitedMalicious code in changes-lxc-wrapper (PyPI)
Malicious code in changes-lxc-wrapper (PyPI)
MAL-2026-18301Critical⚠ ExploitedMalicious code in dictmerge-lite (PyPI)
Malicious code in dictmerge-lite (PyPI)
MAL-2026-18300Critical⚠ ExploitedMalicious code in claudeopusenifile (PyPI)
Malicious code in claudeopusenifile (PyPI)
MAL-2026-18299Critical⚠ ExploitedMalicious code in claudeopuseni (PyPI)
Malicious code in claudeopuseni (PyPI)
MAL-2026-18298Critical⚠ ExploitedMalicious code in claudeopusfile (PyPI)
Malicious code in claudeopusfile (PyPI)
MAL-2026-18297Critical⚠ ExploitedMalicious code in nebulallm (PyPI)
Malicious code in nebulallm (PyPI)
MAL-2026-18296Critical⚠ ExploitedMalicious code in zagents-message-bus (PyPI)
Malicious code in zagents-message-bus (PyPI)
MAL-2026-18271Critical⚠ ExploitedMalicious code in fontus (PyPI)
Malicious code in fontus (PyPI)
MAL-2026-18242Critical⚠ ExploitedMalicious code in sitecard (PyPI)
Malicious code in sitecard (PyPI)
MAL-2026-18241Critical⚠ ExploitedMalicious code in workslip (PyPI)
Malicious code in workslip (PyPI)
MAL-2026-18240Critical⚠ ExploitedMalicious code in thornqueue (PyPI)
Malicious code in thornqueue (PyPI)
MAL-2026-18239Critical⚠ ExploitedMalicious code in thistlerun (PyPI)
Malicious code in thistlerun (PyPI)
MAL-2026-18238Critical⚠ ExploitedMalicious code in taskquay (PyPI)
Malicious code in taskquay (PyPI)
MAL-2026-18237Critical⚠ ExploitedMalicious code in slatejob (PyPI)
Malicious code in slatejob (PyPI)
MAL-2026-18236Critical⚠ ExploitedMalicious code in sedgehaul (PyPI)
Malicious code in sedgehaul (PyPI)
MAL-2026-18235Critical⚠ ExploitedMalicious code in runpier (PyPI)
Malicious code in runpier (PyPI)
MAL-2026-18234Critical⚠ ExploitedMalicious code in reedworker (PyPI)
Malicious code in reedworker (PyPI)
MAL-2026-18233Critical⚠ ExploitedMalicious code in otterload (PyPI)
Malicious code in otterload (PyPI)
MAL-2026-18232Critical⚠ ExploitedMalicious code in marshrunner (PyPI)
Malicious code in marshrunner (PyPI)
MAL-2026-18231Critical⚠ ExploitedMalicious code in loadferry (PyPI)
Malicious code in loadferry (PyPI)
MAL-2026-18230Critical⚠ ExploitedMalicious code in larchworker (PyPI)
Malicious code in larchworker (PyPI)
MAL-2026-18229Critical⚠ ExploitedMalicious code in juniperrun (PyPI)
Malicious code in juniperrun (PyPI)