python

python

CVE-2026-42208 - LiteLLM security control bypass 2026-06-29
CVE-2026-44018 - Docling simplifies document processing security control bypass 2026-06-29
CVE-2026-55166 - Lemur ACME SSRF and creator-equality IDOR 2026-06-26
CVE-2026-12191 - openpilot pickle deserialization 2026-06-16
CVE-2026-48818 - Starlette StaticFiles UNC SSRF and NTLM leak 2026-06-15
CVE-2026-49853 - Tornado cross-origin redirect credential leak 2026-06-15
CVE-2026-42563 - Dulwich merge driver path command injection 2026-06-14
CVE-2026-48039 - Meta Ads MCP HTTP tool auth bypass 2026-06-13
CVE-2025-3248 - Langflow validate/code unauthenticated RCE 2026-06-11
CVE-2025-68143 - mcp-server-git arbitrary repository creation 2026-06-11
CVE-2025-68144 - mcp-server-git diff and checkout argument injection 2026-06-11
CVE-2025-68145 - mcp-server-git repository path validation bypass 2026-06-11
CVE-2026-10142 - kafka-python frame length parser DoS 2026-06-11
CVE-2026-10143 - kafka-python SCRAM iteration count DoS 2026-06-11
CVE-2026-42271 - LiteLLM MCP stdio command execution 2026-06-11
CVE-2026-5058 - aws-mcp-server command injection RCE 2026-06-09
CVE-2026-11455 - MetaGPT Mermaid path command injection 2026-06-08
CVE-2026-27494 - n8n Python Code node sandbox escape 2026-06-08
CVE-2026-27905 - BentoML tar symlink arbitrary write 2026-06-08
CVE-2026-34070 - LangChain load_prompt path traversal 2026-06-08
CVE-2026-39922 - GeoNode service registration SSRF 2026-06-08
CVE-2026-44023 - Docling Core remote filename SSRF 2026-06-08
CVE-2026-47412 - PraisonAI Platform workspace delete RBAC bypass 2026-06-08
CVE-2026-47418 - PraisonAI Platform project IDOR 2026-06-08
CVE-2026-27893 - vLLM trust_remote_code bypass 2026-06-07
CVE-2026-40576 - excel-mcp-server path traversal 2026-06-07
CVE-2026-44180 - Jupyter Enterprise Gateway prohibited UID/GID bypass 2026-06-07
CVE-2026-44181 - Jupyter Enterprise Gateway Jinja2 SSTI RCE 2026-06-07
CVE-2026-44182 - Jupyter Enterprise Gateway YAML manifest injection 2026-06-07
CVE-2026-47214 - Docling HTML backend URI and path handling 2026-06-07
CVE-2026-47391 - PraisonAI A2A eval tool RCE 2026-06-07
CVE-2026-47397 - PraisonAI arbitrary file write 2026-06-07
CVE-2026-47407 - PraisonAI Platform workspace takeover 2026-06-07
CVE-2026-47413 - PraisonAI Platform member-add owner injection 2026-06-07
CVE-2026-47416 - PraisonAI Platform workspace owner promotion 2026-06-07
CVE-2026-47708 - stata-mcp log_file_name command injection 2026-06-07
CVE-2026-47731 - AIT-Core BSC path traversal file append 2026-06-07
CVE-2026-48169 - PraisonAI Platform cross-workspace IDOR 2026-06-07
CVE-2026-48710 - Starlette BadHost request.url path bypass 2026-06-07
CVE-2026-47410 - PraisonAI Platform default JWT secret 2026-06-06
CVE-2026-45395 - Open WebUI tool update authorization RCE 2026-05-15
CVE-2026-44336 - PraisonAI MCP tools/call path traversal RCE 2026-05-12
CVE-2026-44339 - PraisonAI unsafe tool resolution 2026-05-12
CVE-2026-44340 - PraisonAI recipe symlink extraction escape 2026-05-12
GHSA-6xcp-7mpr-m7wm - Open WebUI CORS and session RCE chain 2026-05-12
CVE-2026-44513 - Diffusers trust_remote_code bypass 2026-05-10
CVE-2026-41490 - Dagster dynamic partition SQL injection 2026-05-08
CVE-2026-42601 - ArchiveBox AddView config override RCE 2026-05-06
CVE-2026-41497 - PraisonAI MCP command injection incomplete fix 2026-05-02
CVE-2026-42354 - Sentry SAML SSO identity linking 2026-05-02
GHSA-rpm5/GHSA-x2qx - GitPython command injection 2026-05-02
CVE-2025-60455 - Modular Max Serve unsafe deserialization 2026-04-26
CVE-2026-39987 — Marimo pre-auth RCE 2026-04-26
CVE-2017-18342 — PyYAML default `load` resolves arbitrary tags 2026-04-25
Python pickle / dill on untrusted input 2026-04-25
PyYAML `yaml.load` without a safe Loader 2026-04-25