Tagged “pip”
CVEs tagged pip, newest first.
5513 CVEsRSS
MAL-2026-18230Critical⚠ ExploitedMalicious code in larchworker (PyPI)
Malicious code in larchworker (PyPI)
MAL-2026-18229Critical⚠ ExploitedMalicious code in juniperrun (PyPI)
Malicious code in juniperrun (PyPI)
MAL-2026-18228Critical⚠ ExploitedMalicious code in jobwharf (PyPI)
Malicious code in jobwharf (PyPI)
MAL-2026-18227Critical⚠ ExploitedMalicious code in flintqueue (PyPI)
Malicious code in flintqueue (PyPI)
MAL-2026-18226Critical⚠ ExploitedMalicious code in ferretqueue (PyPI)
Malicious code in ferretqueue (PyPI)
MAL-2026-18225Critical⚠ ExploitedMalicious code in cobbleload (PyPI)
Malicious code in cobbleload (PyPI)
MAL-2026-18224Critical⚠ ExploitedMalicious code in brookworker (PyPI)
Malicious code in brookworker (PyPI)
MAL-2026-18223Critical⚠ ExploitedMalicious code in brambletask (PyPI)
Malicious code in brambletask (PyPI)
MAL-2026-18222Critical⚠ ExploitedMalicious code in badgertask (PyPI)
Malicious code in badgertask (PyPI)
MAL-2026-18221Critical⚠ ExploitedMalicious code in kestreljob (PyPI)
Malicious code in kestreljob (PyPI)
MAL-2026-18219Critical⚠ ExploitedMalicious code in onsokets (PyPI)
Malicious code in onsokets (PyPI)
GHSA-xmj3-9gf7-h52wLowsetuptools: Windows path escape via namespace_packages.txt during legacy wheel installation Description
setuptools: Windows path escape via namespace_packages.txt during legacy wheel installation Description
CVE-2026-83813Low· 3.1PoCTwisted: DNS Response Spoofing in twisted.names Due to Missing Source Address Validation
Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.names.dns.DNSDatagramProtocol accepts a UDP DNS response for a pending query when its 16-bit transaction ID matches but d…
CVE-2026-115885Medium· 4.1LangGraph CLI prints the registry push token in `langgraph deploy --verbose` output
The LangGraph CLI is the official command-line interface for LangGraph. From 0.4.15 until 0.4.32, langgraph deploy --verbose passes a temporary registry push token on standard input to docker login --password-stdin, but the CLI subproces…
CVE-2026-115883Medium· 6.0LangGraph: Namespace labels containing `.` reach other namespaces in Postgres and SQLite stores
LangGraph checkpoint savers provide Postgres- and SQLite-backed state persistence for LangGraph workflows and agents. Prior to langgraph-checkpoint-postgres 3.1.3 and langgraph-checkpoint-sqlite 3.1.2, PostgresStore, AsyncPostgresStore, …
CVE-2026-115886Medium· 6.5PoCMLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpoints
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.12.0rc0 until 3.17.0, the scorer invoke, register, and GenAI evaluate endpoints, including unauthenticated POST /ajax…
CVE-2026-115877Medium· 5.4PoCTwisted: HTTP Request Smuggling in twisted.web via a Bare CR or LF in a Header Value
Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.web.http.HTTPChannel.headerReceived rejects a NUL byte in an HTTP header value but accepts a bare carriage return or bare…
GHSA-vqqp-x5qm-5qp4Medium· 5.9FastMCP MCP client wrappers construct M2M OAuth providers without issuer binding — client secret redirectable to attacker-advertised auth…
FastMCP MCP client wrappers construct M2M OAuth providers without issuer binding — client secret redirectable to attacker-advertised authorization server
GHSA-7xgj-8392-5q4rMedium· 6.8FastMCP: Post-transform component authorization is skipped on direct calls
FastMCP: Post-transform component authorization is skipped on direct calls
CVE-2026-115572High· 7.1pypdf: Possible long runtimes for repeated references to the same missing object
pypdf is a free and open-source pure-python PDF library. Prior to 6.21.2, an attacker can craft a PDF that repeatedly references the same nonexistent indirect object, causing relevant file parts such as pages to trigger repeated full-fil…
CVE-2026-115585High· 7.1pypdf: Possible long runtimes for repeated malformed cross-reference entries (Follow-up)
pypdf is a free and open-source pure-python PDF library. Prior to 6.21.2, an incomplete remediation for repeated malformed cross-reference entries in GHSA-55h5-xmcq-c37v could still trigger a complete PDF stream reload during each recove…
CVE-2026-115580High· 7.1pypdf: Possible long runtimes for large xref table header limits
pypdf is a free and open-source pure-python PDF library. Prior to 6.21.2, an attacker can craft a PDF with a standard cross-reference table whose declared entry count exceeds what the file can contain, causing excessive processing and lo…
CVE-2026-115586High· 7.1virtualenv: Bash activator leaves the --prompt value unescaped in PS1 when promptvars is off, so prompt expansion later executes it (regr…
virtualenv: Bash activator leaves the --prompt value unescaped in PS1 when promptvars is off, so prompt expansion later executes it (regression in 21.14.9)
CVE-2026-115774Medium· 4.9PoCTwisted: Denial of Service in the Twisted IMAP4 Server via a Negative Literal Size in SEARCH
Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.mail.imap4.IMAP4Server reaches twisted.mail.imap4.parseNestedParens with a negative literal size in an authenticated SEAR…
CVE-2026-115775High· 8.7PoCTwisted: Unauthenticated Remote Denial of Service in the Twisted words domish XML Element Stream via an Unbounded Element Tree
Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, the twisted.words.xish.domish ExpatElementStream parser allows an unauthenticated remote peer to keep a container element open wh…
CVE-2026-115778High· 7.5Twisted: Unauthenticated Remote Denial of Service in the Twisted conch Telnet Transport via an Unbounded Subnegotiation Buffer
Twisted: Unauthenticated Remote Denial of Service in the Twisted conch Telnet Transport via an Unbounded Subnegotiation Buffer
CVE-2026-115776High· 7.5Twisted: Unauthenticated Remote Denial of Service in the Twisted IRC Server via an Unbounded Line Buffer
Twisted is an event-based framework for internet applications, supporting Python 3.6+. Prior to 26.10.0rc1, twisted.words.protocols.irc.IRC.dataReceived retains all bytes received without a line feed in its per-connection buffer and appl…
MAL-2026-18218Critical⚠ ExploitedMalicious code in qowa (PyPI)
Malicious code in qowa (PyPI)
CVE-2026-114050Medium· 6.5vLLM: Forged multimodal UUID + P0/P1 processor-cache eviction drift: unauthenticated remote crash of the whole vLLM engine
vLLM: Forged multimodal UUID + P0/P1 processor-cache eviction drift: unauthenticated remote crash of the whole vLLM engine
CVE-2026-113713Medium· 4.4PoCvirtualenv: Temporary app-data can leave dangling seed package links
virtualenv: Temporary app-data can leave dangling seed package links