pip

• CVE-2026-55166 - Lemur ACME SSRF and creator-equality IDOR 2026-06-26
• CVE-2026-48818 - Starlette StaticFiles UNC SSRF and NTLM leak 2026-06-15
• CVE-2026-49853 - Tornado cross-origin redirect credential leak 2026-06-15
• CVE-2026-42271 - LiteLLM MCP stdio command execution 2026-06-11
• CVE-2026-44023 - Docling Core remote filename SSRF 2026-06-08
• CVE-2026-47412 - PraisonAI Platform workspace delete RBAC bypass 2026-06-08
• CVE-2026-47418 - PraisonAI Platform project IDOR 2026-06-08
• CVE-2026-40576 - excel-mcp-server path traversal 2026-06-07
• CVE-2026-47214 - Docling HTML backend URI and path handling 2026-06-07
• CVE-2026-47391 - PraisonAI A2A eval tool RCE 2026-06-07
• CVE-2026-47397 - PraisonAI arbitrary file write 2026-06-07
• CVE-2026-47407 - PraisonAI Platform workspace takeover 2026-06-07
• CVE-2026-47413 - PraisonAI Platform member-add owner injection 2026-06-07
• CVE-2026-47416 - PraisonAI Platform workspace owner promotion 2026-06-07
• CVE-2026-48169 - PraisonAI Platform cross-workspace IDOR 2026-06-07
• CVE-2026-47410 - PraisonAI Platform default JWT secret 2026-06-06
• CVE-2026-44513 - Diffusers trust_remote_code bypass 2026-05-10
• CVE-2026-41490 - Dagster dynamic partition SQL injection 2026-05-08
• CVE-2026-42601 - ArchiveBox AddView config override RCE 2026-05-06
• CVE-2026-41497 - PraisonAI MCP command injection incomplete fix 2026-05-02
• GHSA-rpm5/GHSA-x2qx - GitPython command injection 2026-05-02