Tagged “pip”
CVEs tagged pip, newest first.
5542 CVEsRSS
CVE-2026-34730Medium· 5.5Copier `_external_data` allows path traversal and absolute-path local file read without unsafe mode
Copier `_external_data` allows path traversal and absolute-path local file read without unsafe mode
CVE-2026-34513LowAIOHTTP Affected by Denial of Service (DoS) via Unbounded DNS Cache in TCPConnector
AIOHTTP Affected by Denial of Service (DoS) via Unbounded DNS Cache in TCPConnector
CVE-2026-34544Medium· 6.6OpenEXR: OpenEXR: Memory corruption and Denial of Service via crafted EXR file processing (CVE-2026-34544)
A flaw was found in OpenEXR, an image storage format for the motion picture industry. A remote attacker or local user could exploit this vulnerability by providing a specially crafted B44 or B44A EXR file. This crafted file can cause an ou…
CVE-2026-34446Medium· 4.7ONNX: Arbitrary File Read via ExternalData Hardlink Bypass in ONNX load
ONNX: Arbitrary File Read via ExternalData Hardlink Bypass in ONNX load
CVE-2026-34525MediumAIOHTTP accepts duplicate Host headers
AIOHTTP accepts duplicate Host headers
CVE-2026-34518Medium· 5.3AIOHTTP leaks Cookie and Proxy-Authorization headers on cross-origin redirect
AIOHTTP leaks Cookie and Proxy-Authorization headers on cross-origin redirect
CVE-2026-34939Medium· 6.5PraisonAI Has ReDoS via Unvalidated User-Controlled Regex in MCPToolIndex.search_tools()
PraisonAI Has ReDoS via Unvalidated User-Controlled Regex in MCPToolIndex.search_tools()
CVE-2026-34726Medium· 4.4Copier `_subdirectory` allows template root escape via parent-directory traversal
Copier `_subdirectory` allows template root escape via parent-directory traversal
CVE-2026-34222High· 7.7Open WebUI has Broken Access Control in Tool Valves
Open WebUI has Broken Access Control in Tool Valves
CVE-2026-34520Critical· 9.1AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection/security bypass
AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection/security bypass
CVE-2026-34445High· 7.3ONNX: ONNX: Denial of Service and potential information disclosure via malicious model metadata (CVE-2026-34445)
A flaw was found in Open Neural Network Exchange (ONNX). An attacker could exploit a vulnerability in how ONNX processes model metadata, specifically within the ExternalDataInfo class. By crafting a malicious ONNX model, an attacker could …
CVE-2026-34954High· 8.6PraisonAI Has SSRF in FileTools.download_file() via Unvalidated URL
PraisonAI Has SSRF in FileTools.download_file() via Unvalidated URL
CVE-2026-34517LowAIOHTTP has late size enforcement for non-file multipart fields causes memory DoS
AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS
CVE-2026-34514LowAIOHTTP has CRLF injection through multipart part content type header construction
AIOHTTP has CRLF injection through multipart part content type header construction
CVE-2026-34591Medium· 6.5Poetry Has Wheel Path Traversal Which Can Lead to Arbitrary File Write
Poetry Has Wheel Path Traversal Which Can Lead to Arbitrary File Write
CVE-2026-34073Medium· 5.3⚖ disputedcryptography is a package designed to expose cryptographic primitives and recipes to Python developers
cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. Prior to version 46.0.6, DNS name constraints were only validated against SANs within child certificates, and not the "peer name" pre…
CVE-2026-34203Low· 2.7Nautobot: Management of users via REST API does not apply configured password validators
Nautobot: Management of users via REST API does not apply configured password validators
CVE-2026-32794Medium· 4.8PoCApache Airflow Provider for Databricks: TLS Certificate Verification is Disabled in Databricks Provider K8s Token Exchange
Apache Airflow Provider for Databricks: TLS Certificate Verification is Disabled in Databricks Provider K8s Token Exchange
CVE-2026-32716High· 8.1SciTokens has an Authorization Bypass via Incorrect Scope Path Prefix Checking
SciTokens has an Authorization Bypass via Incorrect Scope Path Prefix Checking
CVE-2026-27124HighFastMCP: Missing Consent Verification in OAuth Proxy Callback Facilitates Confused Deputy Vulnerabilities
FastMCP: Missing Consent Verification in OAuth Proxy Callback Facilitates Confused Deputy Vulnerabilities
CVE-2026-34531Medium· 6.5Flask-HTTPAuth invokes token verification callback when missing or empty token was given by client
Flask-HTTPAuth invokes token verification callback when missing or empty token was given by client
CVE-2026-34881Medium· 5.0OpenStack Glance is affected by Server-Side Request Forgery (SSRF)
OpenStack Glance is affected by Server-Side Request Forgery (SSRF)
CVE-2025-64340Medium· 6.7FastMCP has a Command Injection vulnerability - Gemini CLI
FastMCP has a Command Injection vulnerability - Gemini CLI
CVE-2026-34400Mediumalerta-server has potential SQL Injection vulnerability in Query String Syntax (q=) API
alerta-server has potential SQL Injection vulnerability in Query String Syntax (q=) API
CVE-2026-32727High· 8.1SciTokens has an Authorization Bypass via Path Traversal in Scope Validation
SciTokens has an Authorization Bypass via Path Traversal in Scope Validation
CVE-2026-27489High· 7.5onnx Vulnerable to Path Traversal via Symlink
onnx Vulnerable to Path Traversal via Symlink
CVE-2026-34070High· 7.5PoCLangChain is a framework for building agents and LLM-powered applications
LangChain is a framework for building agents and LLM-powered applications. Prior to version 1.2.22, multiple functions in langchain_core.prompts.loading read files from paths embedded in deserialized config dicts without validating again…
CVE-2025-15036Critical· 9.6MLFlow path traversal vulnerability
MLFlow path traversal vulnerability
CVE-2025-15379Critical· 10.0A command injection vulnerability exists in MLflow's model serving container initialization code, specifically in the `_install_model_dependencies_to_env()` function
A command injection vulnerability exists in MLflow's model serving container initialization code, specifically in the `_install_model_dependencies_to_env()` function. When deploying a model with `env_manager=LOCAL`, MLflow reads dependen…
CVE-2026-34231Medium· 6.1Slippers Vulnerable to Cross-Site Scripting (XSS) in `attrs` Template Tag
Slippers Vulnerable to Cross-Site Scripting (XSS) in `attrs` Template Tag