Catalog

Findings

Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.

SearchRecord typeSeveritySourceStackWeaknessSort

Known exploited only

Reset

Critical9.8LMCache: Remote code execution via unsafe deserialization in multiprocess mode transportVuln · CVE-2026-105192 · FIRST EPSS · GitHub Advisory Database · OpenSSF OSV / OSV Scanner · PyPIEPSS 0.5%Oct 16, 2026
CriticalClaude Agent SDK: Argument Injection via resume Option Allows Arbitrary Command ExecutionVuln · CVE-2026-96620 · GitHub Advisory Database · OpenSSF OSV / OSV Scanner · PyPA Advisory Database · PyPIOct 16, 2026
Low3.3ClickMigrate has Path Traversal in "revision -m" argumentVuln · CVE-2026-68549 · GitHub Advisory Database · OpenSSF OSV / OSV Scanner · PyPA Advisory Database · PyPIOct 16, 2026
UnknownMalicious code in marocolor (PyPI)Vuln · MAL-2026-17900 · OpenSSF OSV / OSV Scanner · PyPA Advisory Database · PyPIOct 16, 2026
UnknownMalicious code in fromthehotel-poems (PyPI)Vuln · MAL-2026-17897 · OpenSSF OSV / OSV Scanner · PyPA Advisory Database · PyPIOct 16, 2026
UnknownMalicious code in proxyrobika (PyPI)Vuln · MAL-2026-17889 · OpenSSF OSV / OSV Scanner · PyPA Advisory Database · PyPIOct 15, 2026
UnknownMalicious code in py-worm (PyPI)Vuln · MAL-2026-17883 · OpenSSF OSV / OSV Scanner · PyPA Advisory Database · PyPIOct 15, 2026
UnknownMalicious code in py-sock2 (PyPI)Vuln · MAL-2026-17881 · CIRCL Vulnerability Lookup · OpenSSF OSV / OSV Scanner · PyPA Advisory Database · PyPIOct 15, 2026
Medium5.6Pipecat is an open-source Python framework for building real-time voice and multimodal conversational agents.Vuln · CVE-2026-102682 · CVE.org · FIRST EPSS · GitHub Advisory Database · PyPIEPSS 0.2%Oct 14, 2026
High7.5The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol (MCP).Vuln · CVE-2026-59951 · CVE.org · FIRST EPSS · GitHub Advisory Database · PyPI, PythonEPSS 0.5%Oct 14, 2026
Medium6.1The unstructured library provides open-source components for ingesting and pre-processing images and text documents, such as PDFs, HTML, Word docs, and many more.Vuln · CVE-2026-104250 · CVE.org · FIRST EPSS · GitHub Advisory Database · PyPIEPSS 0.2%Oct 13, 2026
Medium4.2JupyterLab: Command link trust prompt in JupyterLab can trust a document other than the one clickedVuln · CVE-2026-102832 · jupyterlab · jupyterlab · CVE.org · FIRST EPSS · GitHub Advisory Database · PyPIEPSS 0.1%Oct 13, 2026
Medium5.3copyparty FTP: upload outside defined volumes (limited path traversal)Vuln · CVE-2026-104102 · 9001 · copyparty · CVE.org · FIRST EPSS · GitHub Advisory Database · PyPIEPSS 0.3%Oct 12, 2026
UnknownMalicious code in pyyi (PyPI)Vuln · MAL-2026-17866 · OpenSSF OSV / OSV Scanner · PyPA Advisory Database · PyPIOct 12, 2026
Critical9.8Duplicate Advisory: Remote code execution via unsafe deserialization in multiprocess mode transportVuln · GHSA-vv44-hjm2-qw2f · GitHub Advisory Database · OpenSSF OSV / OSV Scanner · PyPA Advisory Database · PyPIOct 7, 2026
High7.1NLTK: Missing Post-Download Integrity Verification Allows Malicious Package InjectionVuln · CVE-2026-12259 · nltk · nltk · CVE.org · FIRST EPSS · GitHub Advisory Database · PyPIEPSS 0.1%Aug 3, 2026
Medium5.5PraisonAI: Coarse-Grained Tool Approval Cache Bypasses Per-Invocation Consent for Shell CommandsVuln · CVE-2026-56074 · CVE.org · GitHub Advisory Database · OpenSSF OSV / OSV Scanner · PyPIJul 13, 2026
High7.1kedro-datasets has a path traversal vulnerability in PartitionedDataset that allows arbitrary file writeVuln · CVE-2026-111170 · CVE.org · FIRST EPSS · GitHub Advisory Database · PyPIEPSS 0.4%Apr 6, 2026
High7.2Web3.py 7.15.0 through 7.16.0 and 8.0.0b2 through 8.0.0 CCIP-Read SSRF BypassVuln · CVE-2026-111171 · ethereum · web3.py · CIRCL Vulnerability Lookup · CVE.org · FIRST EPSS · PyPIEPSS 0.3%Apr 4, 2026