Tagged “pip”
CVEs tagged pip, newest first.
5541 CVEsRSS
CVE-2022-46291High· 7.8Open Babel has out-of-bounds write in Gaussian translationVectors[]
Open Babel has out-of-bounds write in Gaussian translationVectors[]
CVE-2022-46293High· 7.8Open Babel has out-of-bounds write in MOPAC translationVectors[] (FINAL POINT)
Open Babel has out-of-bounds write in MOPAC translationVectors[] (FINAL POINT)
CVE-2022-46294High· 7.8Open Babel has out-of-bounds write in MOPAC IN translationVectors[] (Tv atom)
Open Babel has out-of-bounds write in MOPAC IN translationVectors[] (Tv atom)
CVE-2022-46295High· 7.8Open Babel has out-of-bounds write in MSI translationVectors[]
Open Babel has out-of-bounds write in MSI translationVectors[]
CVE-2026-7873Critical· 9.9PoCLangflow: Code Injection Vulnerability in Code Validation Endpoint
Langflow: Code Injection Vulnerability in Code Validation Endpoint
CVE-2026-58168High· 8.8PoCDeepTutor < 1.4.10 - Insecure Default Grants Unrestricted MCP Tool Access to Non-Admin Users
DeepTutor before version 1.4.10 contains an authorization bypass vulnerability that allows low-privilege users to invoke unrestricted MCP tools due to the allowed_mcp_tools function returning None instead of a denied result when mcp_tool…
CVE-2026-12243High· 7.5PoCRejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
CVE-2025-71374High· 8.1picklescan before 0.0.29 fails to detect the built-in python profile.Profile.run function when used in pickle reduce methods, allowing attackers to execute arbitrary code
picklescan before 0.0.29 fails to detect the built-in python profile.Profile.run function when used in pickle reduce methods, allowing attackers to execute arbitrary code. Remote attackers can craft malicious pickle files that bypass pic…
CVE-2025-71352High· 8.1picklescan before 0.0.29 fails to detect the built-in Python trace.Trace.runctx function when used in pickle file reduce methods, allowing attackers to execute arbitrary code
picklescan before 0.0.29 fails to detect the built-in Python trace.Trace.runctx function when used in pickle file reduce methods, allowing attackers to execute arbitrary code. Remote attackers can craft malicious pickle files with trace.…
CVE-2025-71368High· 8.1picklescan before 0.0.30 fails to detect the doctest.debug_script function when analyzing pickle files, allowing attackers to execute arbitrary code
picklescan before 0.0.30 fails to detect the doctest.debug_script function when analyzing pickle files, allowing attackers to execute arbitrary code. Remote attackers can craft malicious pickle files embedding doctest.debug_script calls …
CVE-2025-71355MediumPicklescan before 0.0.25 fails to detect unsafe global functions in the Numpy library, allowing attackers to bypass static analysis and execute arbitrary code during deserialization
Picklescan before 0.0.25 fails to detect unsafe global functions in the Numpy library, allowing attackers to bypass static analysis and execute arbitrary code during deserialization. Attackers can craft malicious pickle files using numpy…
CVE-2025-71350High· 8.1picklescan before 0.0.28 fails to detect malicious pickle files using torch.utils.collect_env.run function in reduce methods
picklescan before 0.0.28 fails to detect malicious pickle files using torch.utils.collect_env.run function in reduce methods. Attackers can embed undetected code in pickle files that executes remote commands when loaded by victims.
CVE-2025-71371High· 8.1picklescan before 0.0.29 fails to detect malicious pickle files using code.InteractiveInterpreter.runcode in reduce methods
picklescan before 0.0.29 fails to detect malicious pickle files using code.InteractiveInterpreter.runcode in reduce methods. Attackers can craft pickle payloads that bypass picklescan detection and execute arbitrary code when loaded via …
CVE-2026-57585High· 7.5msgpack: MessagePack for Python: Denial of Service via Unpacker reuse after error (CVE-2026-57585)
A flaw was found in MessagePack for Python, a serializer implementation. This vulnerability, categorized as a Use-After-Free (CWE-416), occurs when the Unpacker component is reused after an error. A remote attacker could exploit this by re…
CVE-2025-71349High· 8.1picklescan before 0.0.29 fails to detect the built-in trace.Trace.run function when analyzing pickle files, allowing attackers to embed undetected malicious code
picklescan before 0.0.29 fails to detect the built-in trace.Trace.run function when analyzing pickle files, allowing attackers to embed undetected malicious code. Remote attackers can craft malicious pickle files using trace.Trace.run in…
CVE-2025-71363High· 8.1picklescan before 0.0.30 fails to detect cProfile.run function calls in pickle reduce methods, allowing attackers to execute arbitrary code
picklescan before 0.0.30 fails to detect cProfile.run function calls in pickle reduce methods, allowing attackers to execute arbitrary code. Remote attackers can craft malicious pickle files with cProfile.run payloads that bypass pickles…
CVE-2025-10995Low· 7.8Open Babel has out-of-bounds write (overlapping memcpy) in zipstream basic_unzip_streambuf::underflow
Open Babel has out-of-bounds write (overlapping memcpy) in zipstream basic_unzip_streambuf::underflow
CVE-2025-10996High· 7.8Open Babel has heap buffer overflow in SMILES OBSmilesParser::ParseSmiles
Open Babel has heap buffer overflow in SMILES OBSmilesParser::ParseSmiles
CVE-2026-2704Low· 4.4Open Babel has an out-of-bounds read in CIF transform3d::DescribeAsString
Open Babel has an out-of-bounds read in CIF transform3d::DescribeAsString
CVE-2026-2705Low· 5.5Open Babel has NULL pointer dereference in MOL2 OBAtom::SetFormalCharge
Open Babel has NULL pointer dereference in MOL2 OBAtom::SetFormalCharge
CVE-2026-3408Low· 5.5Open Babel has a NULL pointer dereference in CDXML OBAtom::GetExplicitValence
Open Babel has a NULL pointer dereference in CDXML OBAtom::GetExplicitValence
CVE-2025-10994Low· 7.8Open Babel has Use-after-free in GAMESS GAMESSOutputFormat::ReadMolecule
Open Babel has Use-after-free in GAMESS GAMESSOutputFormat::ReadMolecule
CVE-2026-27197Critical· 9.1Sentry: Improper authentication on SAML SSO process allows user identity linking
Sentry: Improper authentication on SAML SSO process allows user identity linking
CVE-2020-7941Critical· 9.8Plone Unauthenticated Write Vulnerability
Plone Unauthenticated Write Vulnerability
MAL-2026-6593NoneMalicious code in django-bkvision (PyPI)
Malicious code in django-bkvision (PyPI)
MAL-2026-6561NoneMalicious code in skillspector (PyPI)
Malicious code in skillspector (PyPI)
CVE-2026-6658Medium· 5.4jupyter/nbconvert allows Cross-site Scripting (XSS) via unsanitized `text/vnd.mermaid` output in HTML exports
jupyter/nbconvert allows Cross-site Scripting (XSS) via unsanitized `text/vnd.mermaid` output in HTML exports
GHSA-mq7r-vm99-p7vxHigh· 8.1Duplicate Advisory : Picklescan is missing detection when calling built-in python idlelib.pyshell.ModifiedInterpreter.runcode
Duplicate Advisory : Picklescan is missing detection when calling built-in python idlelib.pyshell.ModifiedInterpreter.runcode
CVE-2026-49486High· 7.5The Apache Airflow FTP provider's `FTPSHook.get_conn()` created an `ftplib.FTP_TLS` connection but never called `prot_p()`, so although the control channel was TLS-protected the data channel was transmitted in cleartext
The Apache Airflow FTP provider's `FTPSHook.get_conn()` created an `ftplib.FTP_TLS` connection but never called `prot_p()`, so although the control channel was TLS-protected the data channel was transmitted in cleartext. Any deployment u…
MAL-2026-6515NoneMalicious code in sqligen (PyPI)
Malicious code in sqligen (PyPI)