Tagged “pip”
CVEs tagged pip, newest first.
5517 CVEsRSS
CVE-2026-96760Critical· 9.8PoC⚖ disputedAuthlib (v1.7.2 and below) contains a signature verification bypass vulnerability
Authlib (v1.7.2 and below) contains a signature verification bypass vulnerability. The JsonWebSignature.deserialize_json() method accepts a JSON Serialization JWS object and returns the payload as successfully verified without checking f…
MAL-2026-17200Critical⚠ ExploitedMalicious code in aseity (PyPI)
Malicious code in aseity (PyPI)
MAL-2026-17199Critical⚠ ExploitedMalicious code in scrapetools2 (PyPI)
Malicious code in scrapetools2 (PyPI)
MAL-2026-17198Critical⚠ ExploitedMalicious code in caracas4check (PyPI)
Malicious code in caracas4check (PyPI)
MAL-2026-17197Critical⚠ ExploitedMalicious code in coinscan (PyPI)
Malicious code in coinscan (PyPI)
MAL-2026-17196Critical⚠ ExploitedMalicious code in donutpromotion (PyPI)
Malicious code in donutpromotion (PyPI)
MAL-2026-17195Critical⚠ ExploitedMalicious code in claudedashbord (PyPI)
Malicious code in claudedashbord (PyPI)
MAL-2026-17194Critical⚠ ExploitedMalicious code in metrics-sdk (PyPI)
Malicious code in metrics-sdk (PyPI)
MAL-2026-17193Critical⚠ ExploitedMalicious code in metrio (PyPI)
Malicious code in metrio (PyPI)
MAL-2026-17192Critical⚠ ExploitedMalicious code in donutautosellsrc (PyPI)
Malicious code in donutautosellsrc (PyPI)
CVE-2026-100846High· 7.6PoCMONAI before 1.5.2 contains a deserialization of untrusted data vulnerability in the algo_from_pickle function in monai/auto3dseg/utils.py
MONAI before 1.5.2 contains a deserialization of untrusted data vulnerability in the algo_from_pickle function in monai/auto3dseg/utils.py. The function reads a .pkl file and passes its contents to pickle.loads without validating the dat…
CVE-2026-100845High· 7.8PoCMONAI before 1.6.0 contains an unsafe deserialization vulnerability in the NumpyReader class that unconditionally uses numpy.load with allow_pickle=True when loading .npy and .npz files
MONAI before 1.6.0 contains an unsafe deserialization vulnerability in the NumpyReader class that unconditionally uses numpy.load with allow_pickle=True when loading .npy and .npz files. Attackers can craft malicious .npy files with pick…
CVE-2026-100844High· 8.4PoCMONAI before 1.6.0 is vulnerable to OS command injection in the nnUNetV2Runner component (monai.apps.nnunet.nnunetv2_runner)
MONAI before 1.6.0 is vulnerable to OS command injection in the nnUNetV2Runner component (monai.apps.nnunet.nnunetv2_runner). User-controlled values taken from the YAML configuration file (notably dataset_name_or_id) and from CLI/kwargs …
CVE-2026-100843High· 7.8PoCMONAI versions before 1.6.0 contain a remote code execution vulnerability in the algo_from_pickle() function due to unsafe pickle.loads() deserialization in monai/auto3dseg/utils.py
MONAI versions before 1.6.0 contain a remote code execution vulnerability in the algo_from_pickle() function due to unsafe pickle.loads() deserialization in monai/auto3dseg/utils.py. Attackers can craft malicious pickle files that execut…
CVE-2026-100842High· 7.0PoCMONAI through 1.6.0 contains an eval injection vulnerability in _get_fake_spatial_shape() in monai/bundle/scripts.py
MONAI through 1.6.0 contains an eval injection vulnerability in _get_fake_spatial_shape() in monai/bundle/scripts.py. The function validates shape expressions with a helper that walks the AST and only collects ast.Name nodes, rejecting a…
CVE-2026-100841High· 7.8In MONAI 1.6.0, PersistentDataset (monai/data/dataset.py) explicitly rejects the combination track_meta=True with weights_only=True, forcing users who cache MetaTensors (the default tensor type in MONAI >= 1.0) to run torch.load(hashfile…
In MONAI 1.6.0, PersistentDataset (monai/data/dataset.py) explicitly rejects the combination track_meta=True with weights_only=True, forcing users who cache MetaTensors (the default tensor type in MONAI >= 1.0) to run torch.load(hashfile…
CVE-2026-100840High· 7.8PoCMONAI through 1.6.0 contains a remote code execution vulnerability in the bundle configuration engine that resolves _target_ values to arbitrary importable callables without an allow list and passes $ expressions to Python eval()
MONAI through 1.6.0 contains a remote code execution vulnerability in the bundle configuration engine that resolves _target_ values to arbitrary importable callables without an allow list and passes $ expressions to Python eval(). Attack…
MAL-2026-17191Critical⚠ ExploitedMalicious code in requests-cache-utils (PyPI)
Malicious code in requests-cache-utils (PyPI)
CVE-2026-100650Medium· 6.5PoCvLLM through 0.29.0 fetches and fully materializes remote or inline media before enforcing its documented media controls (the VLLM_MAX_AUDIO_CLIP_FILESIZE_MB compressed-audio size cap, default 25 MB, and the per-modality --limit-mm-per-p…
vLLM through 0.29.0 fetches and fully materializes remote or inline media before enforcing its documented media controls (the VLLM_MAX_AUDIO_CLIP_FILESIZE_MB compressed-audio size cap, default 25 MB, and the per-modality --limit-mm-per-p…
CVE-2026-100653Medium· 6.5PoCvLLM is an inference and serving engine for large language models
vLLM is an inference and serving engine for large language models. In versions from 0.22.1 through 0.28.0, the operator-supplied model revision pin (--revision / --code-revision) is not propagated to several Hugging Face artifact loads f…
CVE-2026-100652Medium· 5.9vLLM versions 0.22.0 through 0.23.0 fail to validate stop_token_ids against vocabulary bounds in Rust HTTP and gRPC frontends, allowing out-of-vocabulary token IDs to reach MinTokensLogitsProcessor
vLLM versions 0.22.0 through 0.23.0 fail to validate stop_token_ids against vocabulary bounds in Rust HTTP and gRPC frontends, allowing out-of-vocabulary token IDs to reach MinTokensLogitsProcessor. Attackers can submit requests with min…
CVE-2026-100689Medium· 5.9GitPython before 3.1.62 does not validate the `path` field read from an untrusted .gitmodules file when updating submodules
GitPython before 3.1.62 does not validate the `path` field read from an untrusted .gitmodules file when updating submodules. While a prior fix (GHSA-hmq2-w58f-27jc) added Submodule._validated_name() to constrain the `name` field, and Git…
MAL-2026-17188Critical⚠ ExploitedMalicious code in sherpy (PyPI)
Malicious code in sherpy (PyPI)
MAL-2026-17183Critical⚠ ExploitedMalicious code in tego-managed-agents-test (PyPI)
Malicious code in tego-managed-agents-test (PyPI)
MAL-2026-17181Critical⚠ ExploitedMalicious code in reqparser (PyPI)
Malicious code in reqparser (PyPI)
GHSA-62mm-xwmv-crhgHighkhoj has an unauthenticated path traversal in /home/ endpoint that allows file read from server filesystem
khoj has an unauthenticated path traversal in /home/ endpoint that allows file read from server filesystem
CVE-2026-57443High· 7.5PoCSCBE-AETHERMOORE is a geometric AI governance and evaluation framework
SCBE-AETHERMOORE is a geometric AI governance and evaluation framework. Starting in version 4.0.2 and prior to version 4.2.1, the AetherBrowser API server (`scripts/aetherbrowser/api_server.py`) exposes the `POST /api/ops/check-email` en…
MAL-2026-17180Critical⚠ ExploitedMalicious code in my-private-pkg (PyPI)
Malicious code in my-private-pkg (PyPI)
MAL-2026-17168Critical⚠ ExploitedMalicious code in vercel-runtime-python (PyPI)
Malicious code in vercel-runtime-python (PyPI)
MAL-2026-17167Critical⚠ ExploitedMalicious code in prosocks (PyPI)
Malicious code in prosocks (PyPI)