Tagged “pip”
CVEs tagged pip, newest first.
5376 CVEsRSS
MAL-2026-18228Critical⚠ ExploitedMalicious code in jobwharf (PyPI)
Malicious code in jobwharf (PyPI)
MAL-2026-18227Critical⚠ ExploitedMalicious code in flintqueue (PyPI)
Malicious code in flintqueue (PyPI)
MAL-2026-18226Critical⚠ ExploitedMalicious code in ferretqueue (PyPI)
Malicious code in ferretqueue (PyPI)
MAL-2026-18225Critical⚠ ExploitedMalicious code in cobbleload (PyPI)
Malicious code in cobbleload (PyPI)
MAL-2026-18224Critical⚠ ExploitedMalicious code in brookworker (PyPI)
Malicious code in brookworker (PyPI)
MAL-2026-18223Critical⚠ ExploitedMalicious code in brambletask (PyPI)
Malicious code in brambletask (PyPI)
MAL-2026-18222Critical⚠ ExploitedMalicious code in badgertask (PyPI)
Malicious code in badgertask (PyPI)
MAL-2026-18221Critical⚠ ExploitedMalicious code in kestreljob (PyPI)
Malicious code in kestreljob (PyPI)
MAL-2026-18219Critical⚠ ExploitedMalicious code in onsokets (PyPI)
Malicious code in onsokets (PyPI)
GHSA-xmj3-9gf7-h52wLowsetuptools: Windows path escape via namespace_packages.txt during legacy wheel installation Description
setuptools: Windows path escape via namespace_packages.txt during legacy wheel installation Description
CVE-2026-112907Low· 2.5filelock: On Windows an oplock on a soft lock's marker holds SoftFileLock.acquire() past its timeout and blocks the stale break
filelock: On Windows an oplock on a soft lock's marker holds SoftFileLock.acquire() past its timeout and blocks the stale break
CVE-2026-112913Low· 3.3filelock: ReadWriteLock on Windows acts on SQLite side files another local user places beside its database
filelock: ReadWriteLock on Windows acts on SQLite side files another local user places beside its database
CVE-2026-115883Medium· 6.0LangGraph: Namespace labels containing `.` reach other namespaces in Postgres and SQLite stores
LangGraph checkpoint savers provide Postgres- and SQLite-backed state persistence for LangGraph workflows and agents. Prior to langgraph-checkpoint-postgres 3.1.3 and langgraph-checkpoint-sqlite 3.1.2, PostgresStore, AsyncPostgresStore, …
CVE-2026-115886Medium· 6.5MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpoints
MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpoints
CVE-2026-115877Medium· 5.4twisted: Twisted: HTTP request smuggling via improper header delimiter handling (CVE-2026-115877)
A flaw was found in Twisted. The HTTP server component improperly accepts bare carriage return or line feed characters within header values instead of enforcing strict line endings. A remote attacker can exploit this framing disagreement a…
GHSA-vqqp-x5qm-5qp4Medium· 5.9FastMCP MCP client wrappers construct M2M OAuth providers without issuer binding — client secret redirectable to attacker-advertised auth…
FastMCP MCP client wrappers construct M2M OAuth providers without issuer binding — client secret redirectable to attacker-advertised authorization server
GHSA-7xgj-8392-5q4rMedium· 6.8FastMCP: Post-transform component authorization is skipped on direct calls
FastMCP: Post-transform component authorization is skipped on direct calls
CVE-2026-115572High· 7.1pypdf: Possible long runtimes for repeated references to the same missing object
pypdf: Possible long runtimes for repeated references to the same missing object
CVE-2026-115585High· 7.1pypdf: Possible long runtimes for repeated malformed cross-reference entries (Follow-up)
pypdf: Possible long runtimes for repeated malformed cross-reference entries (Follow-up)
CVE-2026-115580High· 7.1pypdf: Possible long runtimes for large xref table header limits
pypdf: Possible long runtimes for large xref table header limits
CVE-2026-115586High· 7.1virtualenv: Bash activator leaves the --prompt value unescaped in PS1 when promptvars is off, so prompt expansion later executes it (regr…
virtualenv: Bash activator leaves the --prompt value unescaped in PS1 when promptvars is off, so prompt expansion later executes it (regression in 21.14.9)
CVE-2026-115774Medium· 4.9Twisted: Denial of Service in the Twisted IMAP4 Server via a Negative Literal Size in SEARCH
Twisted: Denial of Service in the Twisted IMAP4 Server via a Negative Literal Size in SEARCH
CVE-2026-115775High· 8.7Twisted: Unauthenticated Remote Denial of Service in the Twisted words domish XML Element Stream via an Unbounded Element Tree
Twisted: Unauthenticated Remote Denial of Service in the Twisted words domish XML Element Stream via an Unbounded Element Tree
CVE-2026-115778High· 7.5Twisted: Unauthenticated Remote Denial of Service in the Twisted conch Telnet Transport via an Unbounded Subnegotiation Buffer
Twisted: Unauthenticated Remote Denial of Service in the Twisted conch Telnet Transport via an Unbounded Subnegotiation Buffer
CVE-2026-115776High· 7.5Twisted: Unauthenticated Remote Denial of Service in the Twisted IRC Server via an Unbounded Line Buffer
Twisted: Unauthenticated Remote Denial of Service in the Twisted IRC Server via an Unbounded Line Buffer
MAL-2026-18218Critical⚠ ExploitedMalicious code in qowa (PyPI)
Malicious code in qowa (PyPI)
CVE-2026-115419High· 8.1Strands Agents SDK: Exposure of data element to wrong session in the A2A Server
Strands Agents SDK: Exposure of data element to wrong session in the A2A Server
CVE-2026-115355High· 7.5Mistune: Path Traversal and XSS in Include directive
Mistune: Path Traversal and XSS in Include directive
CVE-2026-114501Medium· 6.3Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1
Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1
CVE-2026-114050Medium· 6.5vLLM: Forged multimodal UUID + P0/P1 processor-cache eviction drift: unauthenticated remote crash of the whole vLLM engine
vLLM: Forged multimodal UUID + P0/P1 processor-cache eviction drift: unauthenticated remote crash of the whole vLLM engine