Tagged “pip”

CVEs tagged pip, newest first.

5542 CVEsRSS

CVE-2026-40576Critical· 9.4

6mo ago

excel-mcp-server has a Path Traversal issue

▾ Midnightexcel-mcp-server · excel-mcp-serverEPSS 0.46%via OSV

CVE-2026-40319Medium· 5.5

6mo ago

Giskard has a Regular Expression Denial of Service (ReDoS) in RegexMatching Check

▾ Sunlitgiskard-checks · giskard-checksEPSS 0.15%via OSV

CVE-2026-40683High· 7.7

6mo ago

OpenStack Keystone: OpenStack Keystone: Unauthorized access due to incorrect LDAP user status handling (CVE-2026-40683)

A flaw was found in OpenStack Keystone. When using the LDAP identity backend, the system incorrectly processes the user enabled attribute if the user_enabled_invert configuration option is set to False. This error causes users marked as di…

▾ TwilightRed Hat · Red Hat OpenStack Platform 13 (Queens)EPSS 0.34%via CSAF

CVE-2026-40320High· 7.8

6mo ago

Giskard has Unsandboxed Jinja2 Template Rendering in ConformityCheck

▾ Twilightgiskard-checks · giskard-checksEPSS 0.14%via OSV

CVE-2026-40491Medium· 6.5

6mo ago

gdown Affected by Arbitrary File Write via Path Traversal in gdown.extractall

▾ Sunlitgdown · gdownEPSS 0.57%via OSV

CVE-2026-41133High· 8.8

6mo ago

pyLoad has Stale Session Privilege After Role/Permission Change (Privilege Revocation Bypass)

▾ Twilightpyload-ng · pyload-ngEPSS 0.33%via OSV

CVE-2025-66236High· 7.5

6mo ago

Before Airflow 3.2.0, it was unclear that secure Airflow deployments require the Deployment Manager to take appropriate actions and pay attention to security details and security model of Airflow

Before Airflow 3.2.0, it was unclear that secure Airflow deployments require the Deployment Manager to take appropriate actions and pay attention to security details and security model of Airflow. Some assumptions the Deployment Manager …

▾ Twilightapache · airflowEPSS 0.44%via NVD

CVE-2026-1462High· 7.8

6mo ago

A vulnerability in the `TFSMLayer` class of the `keras` package, version 3.13.0, allows attacker-controlled TensorFlow SavedModels to be loaded during deserialization of `.keras` models, even when `safe_mode=True`

A vulnerability in the `TFSMLayer` class of the `keras` package, version 3.13.0, allows attacker-controlled TensorFlow SavedModels to be loaded during deserialization of `.keras` models, even when `safe_mode=True`. This bypasses the secu…

Tagged “pip”

excel-mcp-server has a Path Traversal issue

Giskard has a Regular Expression Denial of Service (ReDoS) in RegexMatching Check

OpenStack Keystone: OpenStack Keystone: Unauthorized access due to incorrect LDAP user status handling (CVE-2026-40683)

Giskard has Unsandboxed Jinja2 Template Rendering in ConformityCheck

gdown Affected by Arbitrary File Write via Path Traversal in gdown.extractall

pyLoad has Stale Session Privilege After Role/Permission Change (Privilege Revocation Bypass)

Before Airflow 3.2.0, it was unclear that secure Airflow deployments require the Deployment Manager to take appropriate actions and pay attention to security details and security model of Airflow

A vulnerability in the `TFSMLayer` class of the `keras` package, version 3.13.0, allows attacker-controlled TensorFlow SavedModels to be loaded during deserialization of `.keras` models, even when `safe_mode=True`

A Cross-site Scripting (XSS) vulnerability was identified in the `from_dict` method of the `AppLollmsMessage` class in parisneo/lollms pr…

MetaGPT has an eval injection in metagpt/strategy/tot.py

MetaGPT has an eval injection via a cross-site request forgery attack

MetaGPT affected by server-side request forgery in metagpt/utils/common.py

aws-mcp has a Command Injection Remote Code Execution Vulnerability

PraisonAIAgents has an OS Command Injection via shell=True in Memory Hooks Executor (memory/hooks.py)

gramps-webapi: Zip Slip Path Traversal in Media Archive Import

uv vulnerable to arbitrary file deletion through RECORD entries

PraisonAI: Cross-Origin Agent Execution via Hardcoded Wildcard CORS and Missing Authentication on AGUI Endpoint

uv vulnerable to arbitrary file deletion through RECORD entries

GeoNode < 4.4.5, 5.0.2 SSRF via Document Upload

PraisonAI: SQLiteConversationStore didn't validate table_prefix when constructing SQL queries

PraisonAIAgents: Environment Variable Secret Exfiltration via os.path.expandvars() Bypassing shell=False in Shell Tool

PraisonAIAgents: SSRF via unvalidated URL in `web_crawl` httpx fallback

PraisonAI: Unauthenticated WebSocket Endpoint Proxies to Paid OpenAI Realtime API Without Rate Limits

PraisonAI: Unauthenticated Information Disclosure of Agent Instructions via /api/agents in AgentOS

PraisonAI Vulnerable to Sensitive Environment Variable Exposure via Untrusted MCP Subprocess Execution

PraisonAIAgents: Arbitrary File Read via read_skill_file Missing Workspace Boundary and Approval Gate

PraisonAI Vulnerable to RCE via Automatic tools.py Import

PraisonAI Vulnerable to Argument Injection into Cloud Run Environment Variables via Unsanitized Comma in gcloud --set-env-vars

PraisonAI Vulnerable to Decompression Bomb DoS via Recipe Bundle Extraction Without Size Limits

PraisonAI Vulnerable to Stored XSS via Unsanitized Agent Output in HTML Rendering (nh3 Not a Required Dependency)