Tagged “pip”
CVEs tagged pip, newest first.
5528 CVEsRSS
MAL-2026-17191Critical⚠ ExploitedMalicious code in requests-cache-utils (PyPI)
Malicious code in requests-cache-utils (PyPI)
CVE-2026-100650Medium· 6.5PoCvLLM through 0.29.0 fetches and fully materializes remote or inline media before enforcing its documented media controls (the VLLM_MAX_AUDIO_CLIP_FILESIZE_MB compressed-audio size cap, default 25 MB, and the per-modality --limit-mm-per-p…
vLLM through 0.29.0 fetches and fully materializes remote or inline media before enforcing its documented media controls (the VLLM_MAX_AUDIO_CLIP_FILESIZE_MB compressed-audio size cap, default 25 MB, and the per-modality --limit-mm-per-p…
CVE-2026-100653Medium· 6.5PoCvLLM is an inference and serving engine for large language models
vLLM is an inference and serving engine for large language models. In versions from 0.22.1 through 0.28.0, the operator-supplied model revision pin (--revision / --code-revision) is not propagated to several Hugging Face artifact loads f…
CVE-2026-100652Medium· 5.9vLLM versions 0.22.0 through 0.23.0 fail to validate stop_token_ids against vocabulary bounds in Rust HTTP and gRPC frontends, allowing out-of-vocabulary token IDs to reach MinTokensLogitsProcessor
vLLM versions 0.22.0 through 0.23.0 fail to validate stop_token_ids against vocabulary bounds in Rust HTTP and gRPC frontends, allowing out-of-vocabulary token IDs to reach MinTokensLogitsProcessor. Attackers can submit requests with min…
CVE-2026-100689Medium· 5.9GitPython before 3.1.62 does not validate the `path` field read from an untrusted .gitmodules file when updating submodules
GitPython before 3.1.62 does not validate the `path` field read from an untrusted .gitmodules file when updating submodules. While a prior fix (GHSA-hmq2-w58f-27jc) added Submodule._validated_name() to constrain the `name` field, and Git…
MAL-2026-17188Critical⚠ ExploitedMalicious code in sherpy (PyPI)
Malicious code in sherpy (PyPI)
MAL-2026-17183Critical⚠ ExploitedMalicious code in tego-managed-agents-test (PyPI)
Malicious code in tego-managed-agents-test (PyPI)
MAL-2026-17181Critical⚠ ExploitedMalicious code in reqparser (PyPI)
Malicious code in reqparser (PyPI)
GHSA-62mm-xwmv-crhgHighkhoj has an unauthenticated path traversal in /home/ endpoint that allows file read from server filesystem
khoj has an unauthenticated path traversal in /home/ endpoint that allows file read from server filesystem
CVE-2026-57443High· 7.5PoCSCBE-AETHERMOORE is a geometric AI governance and evaluation framework
SCBE-AETHERMOORE is a geometric AI governance and evaluation framework. Starting in version 4.0.2 and prior to version 4.2.1, the AetherBrowser API server (`scripts/aetherbrowser/api_server.py`) exposes the `POST /api/ops/check-email` en…
MAL-2026-17180Critical⚠ ExploitedMalicious code in my-private-pkg (PyPI)
Malicious code in my-private-pkg (PyPI)
MAL-2026-17168Critical⚠ ExploitedMalicious code in vercel-runtime-python (PyPI)
Malicious code in vercel-runtime-python (PyPI)
MAL-2026-17167Critical⚠ ExploitedMalicious code in prosocks (PyPI)
Malicious code in prosocks (PyPI)
GHSA-g28h-2cmm-rj9xHigh· 7.5langchain-nvidia-ai-endpoints has local file disclosure through VLM image inputs
langchain-nvidia-ai-endpoints has local file disclosure through VLM image inputs
CVE-2026-96747Medium· 5.0The client-side field level encryption support in the MongoDB Python Driver can treat a key management endpoint value ending in ".sock" as a local Unix domain socket path rather than a remote host
The client-side field level encryption support in the MongoDB Python Driver can treat a key management endpoint value ending in ".sock" as a local Unix domain socket path rather than a remote host. A user with write access to the encrypt…
CVE-2026-96749High· 8.4⚖ disputedAn integer overflow in the BSON document encoding component of the MongoDB Python Driver's bundled native extension may occur when a single document is built from an unusually large amount of caller-supplied data
An integer overflow in the BSON document encoding component of the MongoDB Python Driver's bundled native extension may occur when a single document is built from an unusually large amount of caller-supplied data. Size arithmetic is perf…
CVE-2026-96748Medium· 6.5PyMongo's connection string parsing decodes percent-encoded characters in the host portion before the host list is separated on its delimiters
PyMongo's connection string parsing decodes percent-encoded characters in the host portion before the host list is separated on its delimiters. When an application places a hostname value supplied by an unauthenticated party into a conne…
CVE-2026-57175Medium· 6.4Python Social Auth is a social authentication/registration mechanism
Python Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the SAML backend accepted SAML responses on the Assertion Consumer Service endpoint without verifying that they matched a previously issued `Au…
CVE-2026-57178High· 7.4Python Social Auth is a social authentication/registration mechanism
Python Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the `vk-app` backend accepted VK application callback data without verifying the callback signature when the `auth_key` parameter was omitted. …
CVE-2026-57176Medium· 6.8Python Social Auth is a social authentication/registration mechanism
Python Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the Vend OAuth2 backend used only the numeric Vend user_id as the social-auth UID. When multiple Vend shops authenticate through the same appli…
CVE-2026-57177Medium· 4.3Python Social Auth is a social authentication/registration mechanism
Python Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the LoginRadius backend did not validate OAuth state during the authentication flow. Applications using this backend were vulnerable to login C…
CVE-2026-57179Medium· 4.2Python Social Auth is a social authentication/registration mechanism
Python Social Auth is a social authentication/registration mechanism. Prior to version 5.0.0, the partial-pipeline resume mechanism accepted `partial_token` as a bearer credential without binding it to the browser session that created it…
CVE-2026-61732Critical· 10.0PoCDecepticon is an autonomous hacking agent for red teams
Decepticon is an autonomous hacking agent for red teams. Versions prior to 1.1.17 wrap web crawl results — the output of agent reconnaissance against target services — into LLM messages without neutralizing ChatML special-token literals.…
PYSEC-2026-3987NoneMemoryOS 2.0.34 was published with a credential-stealing binary
MemoryOS 2.0.34 was published with a credential-stealing binary
MAL-2026-16475Critical⚠ ExploitedMalicious code in memoryos (PyPI)
Malicious code in memoryos (PyPI)
CVE-2026-59980Medium· 6.3hpack is an HTTP/2 Header Encoding for Python
hpack is an HTTP/2 Header Encoding for Python. Prior to version 4.2.0, unbounded variable integer decoding can cause run-away computation on malformed input leading to O(n^2) runtime, effectively blocking further processing with large en…
GHSA-8pcw-h6w9-h46gMedium· 6.5plone.app.contenttypes has a Denial of Service in File Upload due to excessive filename length
plone.app.contenttypes has a Denial of Service in File Upload due to excessive filename length
CVE-2026-93421Medium· 5.3Mesop is a Python-based UI framework that allows users to build web applications
Mesop is a Python-based UI framework that allows users to build web applications. Prior to 1.3.4, the unauthenticated /__csp__ endpoint passes attacker-controlled document-uri, blocked-uri, and violated-directive values to the csp_report…
CVE-2026-92164Medium· 6.5PoCStreamlink is a CLI utility which pipes video streams from various services into a video player
Streamlink is a CLI utility which pipes video streams from various services into a video player. Prior to 8.6.0, HTTPSession mounts a FileAdapter for the file scheme and inherits redirect handling from requests.Session without rejecting …
GHSA-8qpc-6rxx-4pxfHigh· 7.5Duplicate Advisory: vllm p2p never connected zmq_exhaustion
Duplicate Advisory: vllm p2p never connected zmq_exhaustion