Tagged “pip”
CVEs tagged pip, newest first.
5513 CVEsRSS
GHSA-9v8h-qqgm-4m35CriticalBrotli: Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package
Brotli: Out-of-bounds write in the Brotli decoder ("Node2Shell") also affects the PyPI Brotli package
MAL-2026-18203Critical⚠ ExploitedMalicious code in journey-teste-shellhello (PyPI)
Malicious code in journey-teste-shellhello (PyPI)
MAL-2026-18189Critical⚠ ExploitedMalicious code in aanthropic (PyPI)
Malicious code in aanthropic (PyPI)
MAL-2026-18188Critical⚠ ExploitedMalicious code in 1h1 (PyPI)
Malicious code in 1h1 (PyPI)
CVE-2026-114620Medium· 5.4PoCAuthlib: Unvalidated request_uri fetch in JWT-secured authorization request (JAR) leading to SSRF
Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.0, Authlib's RFC 9101 JWTAuthenticationRequest passes the unauthenticated, client-controlled request_uri parameter to the abstract get_request_object…
CVE-2026-114616High· 7.4Authlib accepts an empty HMAC key, allowing JWS/JWT signature forgery (HS256/HS384/HS512)
Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to 1.9.1, Authlib's OctKey.import_key() and HMAC signing and verification path accept zero-length key material. If an application's secret lookup can return…
CVE-2026-115419High· 8.1Unintended disclosure of data element to wrong session in Strands Agents SDK A2A Server
The A2A server component in Amazon Strands Agents SDK for Python before 1.43.0 and Amazon Strands Agents SDK for TypeScript before 1.5.0 does not properly isolate conversation state between callers. An authenticated remote user could rea…
CVE-2026-115355High· 7.5Mistune before 3.3.0 Path Traversal and XSS via Include Directive
Mistune before 3.3.0 contains a path traversal vulnerability in the Include directive that allows attackers to read arbitrary files by supplying ../ sequences in include paths. Attackers can also inject HTML through unescaped error messa…
CVE-2026-111497Critical· 9.2CISA KEVPoCOut-of-Bounds Write in Google Brotli Decoder
A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive m…
CVE-2026-114612Critical· 9.9PoCLiteLLM: Privilege Escalation to Proxy Admin via Cross-Domain Reuse of the Salt Key
LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From 1.87.0 until 1.100.4, 1.101.3, 1.102.2, 1.103.1, and 1.104.0-rc.2, the proxy reuses one cryptographic context for at-rest secrets and session toke…
CVE-2026-114610Medium· 6.5PoCfpdf2: Exponential SVG '<use>' expansion causes CPU and memory exhaustion in 'FPDF.image()'
fpdf2 is a PDF creation library for Python. From 2.5.0 until 2.8.8, fpdf2's SVGObject.build_xref() passes nested SVG <use> references to GraphicsContext.add_item(), whose default clone=True deep-copy behavior copies the complete referenc…
CVE-2026-114609Medium· 5.8fpdf2 implicitly loads external URLs and local image paths when rendering attacker-controlled content
fpdf2 is a PDF creation library for Python. Prior to 2.8.8, fpdf2's shared image loader automatically dereferences attacker-controlled HTTP(S) URLs and raw local paths supplied through FPDF.image(), FPDF.write_html() HTML <img src> value…
CVE-2026-114608Medium· 5.4Pylint: Arbitrary code execution via pickle deserialization of the stats cache in PYLINT_HOME
Pylint is a static code analyser for Python. From 0.15.2 until 4.0.9, Pylint stores module statistics in predictable files under PYLINT_HOME and loads those files with pickle.load on a later run. An attacker who can write to a shared, gr…
CVE-2026-114605High· 7.5dnspython dns.name.from_wire_parser() excessive CPU use
dnspython is a DNS toolkit for Python. Prior to 2.9.0, dns.name.from_wire_parser follows attacker-controlled DNS compression pointer chains without a hop limit. A malicious DNS wire-format message can force excessive pointer traversal du…
CVE-2026-114510High· 7.1Flexible GraphRAG: Cypher/Graph Injection via broken string-escaping in FalkorDB adapter (_escape()) - full graph wipe from ingested-document content
Flexible GraphRAG is a Python framework for building graph and retrieval-augmented generation applications across multiple graph, vector, and search backends. From 0.6.0 until 0.8.2, the _escape() helper in flexible-graphrag/langchain/gr…
GHSA-pxh4-856f-4h89High· 7.4PyJWT: HS256/384/512 verify accepts empty HMAC key via oct JWK (PyJWK/PyJWKClient) enabling token forgery
PyJWT: HS256/384/512 verify accepts empty HMAC key via oct JWK (PyJWK/PyJWKClient) enabling token forgery
CVE-2026-114603Medium· 5.3PoCOpenTelemetry Python: Unbounded tracestate parsing in opentelemetry-api
OpenTelemetry Python provides the Python API and SDK for OpenTelemetry. Prior to 1.45.1, the opentelemetry-api function TraceState.from_header in opentelemetry/trace/span.py, reached through TraceContextTextMapPropagator.extract, parses …
CVE-2026-75508High· 7.5PoCGraphQL-core: Denial of service via comment tokens bypassing the parser's max_tokens limit
GraphQL-core is a Python port of the GraphQL.js reference implementation. From 3.2.3 until 3.2.12 and 3.3.0rc1, the parser's max_tokens limit in Parser.advance_lexer counts only non-comment tokens returned after Lexer.lookahead skips com…
CVE-2026-75507High· 7.5GraphQL-core: Denial of service via quadratic complexity in the OverlappingFieldsCanBeMerged validation rule
GraphQL-core is a Python port of the GraphQL.js reference implementation. From 3.0.0 until 3.2.12 and 3.3.0rc1, the OverlappingFieldsCanBeMerged rule in specified_rules repeatedly compares fields that share response names and recursively…
GHSA-78g4-xqwv-q3g8High· 8.1Pillow: Bundled libopenjp2 2.5.4 in all wheels since 11.1.0 carries OSV-2025-219 heap-buffer-overflow write reachable from Image.open().l…
Pillow: Bundled libopenjp2 2.5.4 in all wheels since 11.1.0 carries OSV-2025-219 heap-buffer-overflow write reachable from Image.open().load()
MAL-2026-18176Critical⚠ ExploitedMalicious code in voxweaver (PyPI)
Malicious code in voxweaver (PyPI)
MAL-2026-18175Critical⚠ ExploitedMalicious code in voicekit (PyPI)
Malicious code in voicekit (PyPI)
MAL-2026-18174Critical⚠ ExploitedMalicious code in vocabblend (PyPI)
Malicious code in vocabblend (PyPI)
MAL-2026-18173Critical⚠ ExploitedMalicious code in vocabbench (PyPI)
Malicious code in vocabbench (PyPI)
MAL-2026-18172Critical⚠ ExploitedMalicious code in ttsweaver (PyPI)
Malicious code in ttsweaver (PyPI)
MAL-2026-18171Critical⚠ ExploitedMalicious code in ttsprobe (PyPI)
Malicious code in ttsprobe (PyPI)
MAL-2026-18170Critical⚠ ExploitedMalicious code in ttsflow (PyPI)
Malicious code in ttsflow (PyPI)
MAL-2026-18169Critical⚠ ExploitedMalicious code in ttsdock (PyPI)
Malicious code in ttsdock (PyPI)
MAL-2026-18168Critical⚠ ExploitedMalicious code in speechprobe (PyPI)
Malicious code in speechprobe (PyPI)
MAL-2026-18167Critical⚠ ExploitedMalicious code in speaksocket (PyPI)
Malicious code in speaksocket (PyPI)