PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters…

▾ Midnightlightningai · pytorch_lightningEPSS 0.63%via NVD

CVE-2026-61440Medium· 6.5

3mo ago

PraisonAI Platform before 0.1.9 fails to properly authorize label and issue-label mutations, allowing workspace members to rename and recolor shared labels and add or remove labels on owner-created issues

PraisonAI Platform before 0.1.9 fails to properly authorize label and issue-label mutations, allowing workspace members to rename and recolor shared labels and add or remove labels on owner-created issues. Attackers with workspace member…

▾ Sunlitpraisonai-platform · praisonai-platformEPSS 0.26%via NVD

MAL-2026-10690None

3mo ago

Malicious code in qwen-asr-pvt (PyPI)

▾ Sunlitqwen-asr-pvt · qwen-asr-pvtvia OSV

MAL-2026-10689None

3mo ago

Malicious code in pylogora (PyPI)

▾ Sunlitpylogora · pylogoravia OSV

MAL-2026-10688None

3mo ago

Malicious code in log-guru (PyPI)

▾ Sunlitlog-guru · log-guruvia OSV

MAL-2026-10685None

3mo ago

Malicious code in trongridweb (PyPI)

▾ Sunlittrongridweb · trongridwebvia OSV

Tagged “pip”

Malicious code in ryry-cli (PyPI)

Malicious code in mfq-private-encoder (PyPI)

Malicious code in dde-common (PyPI)

Malicious code in darkglitch (PyPI)

Malicious code in captcha-solve-api (PyPI)

Malicious code in airflow-provider-spirit (PyPI)

Malicious code in a3s-code (PyPI)

MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal

MCP Python SDK: WebSocket server transport does not support Host/Origin validation

MCP Python SDK: Experimental task handlers allow any client to access and cancel other clients' tasks

Malicious code in discordia-telemetria (PyPI)

Malicious code in discord-telemetry (PyPI)

Duplicate Advisory: PraisonAI vulnerable to Remote Code Execution via Broken AST Sandbox

Duplicate Advisory: PraisonAI: SecurityPolicy command/path/import restrictions are completely unenforced by the default SubprocessSandbox backend

Duplicate Advisory: PraisonAI: Platform members can rewrite shared labels and owner issue labels without owner/admin authorization

Duplicate Advisory: PraisonAI: MCP HTTP-stream transport is unauthenticated by default, exposing tool enumeration and an unvalidated tool-call surface

Duplicate Advisory: PraisonAI: API deploy code generator embeds unescaped YAML fields into Python source

Duplicate Advisory: PraisonAI: Call API localhost-only authentication bypass via spoofed Host header

Duplicate Advisory: PraisonAI: DNS rebinding bypass in `web_crawl` SSRF protection allows internal response disclosure

Duplicate Advisory: PraisonAI: Human-in-the-loop tool approval is cached by tool name and silently reused for all subsequent calls with arbitrary arguments

Duplicate Advisory: PraisonAI: Plugin Auto-Discovery Executes Arbitrary Python Files Without Verification

Duplicate Advisory: PraisonAI: SkillTools Executes Scripts Without Path Containment Validation

Duplicate Advisory: PraisonAI: AgentMail webhook mode accepts forged unsigned message.received events and invokes agents

An issue in Open Source GPT Researcher v3.3.7 allows attackers to execute arbitrary commands on a victim system via user interaction with a crafted HTML page.

PyTorch Lightning through 2.6.5, fixed in commit d710d68, contains a remote code execution vulnerability in the _load_state function that imports and executes attacker-controlled module names from checkpoint _instantiator hyperparameters…

PraisonAI Platform before 0.1.9 fails to properly authorize label and issue-label mutations, allowing workspace members to rename and recolor shared labels and add or remove labels on owner-created issues

Malicious code in qwen-asr-pvt (PyPI)

Malicious code in pylogora (PyPI)

Malicious code in log-guru (PyPI)

Malicious code in trongridweb (PyPI)