# PyPI Advisories.

Every PyPI Advisory we hold (Python), newest first.

## Records, newest first (an older page)

- [Headroom vulnerable to Cross-Site WebSocket Hijacking (CSWSH)](https://agentprime.io/advisories/GHSA-h46j-26q3-rggf.md)
  `GHSA-h46j-26q3-rggf`, `CVE-2026-71416`, `PYSEC-2026-4220` · PyPI `headroom-ai`: affected `<0.35.0`, fixed in `0.35.0` · CVSS 8.8 High · Not analysed yet · Published 2 Oct 2026 · Tags: Authentication bypass, CWE-1385
- [Vibe-Trading FastAPI endpoints permit unauthenticated access, file upload, and an RCE chain](https://agentprime.io/advisories/GHSA-v2f8-6655-7grj.md)
  `GHSA-v2f8-6655-7grj`, `CVE-2026-114108` · PyPI `vibe-trading-ai`: affected `>=0.1.0, <0.1.7`, fixed in `0.1.7` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Oct 2026 · Tags: Information disclosure, Authentication bypass, Unrestricted file upload, Broken access control
- [Vibe-Trading file-read tools expose arbitrary server-readable files](https://agentprime.io/advisories/GHSA-5rmq-chc7-m22f.md)
  `GHSA-5rmq-chc7-m22f`, `CVE-2026-114106` · PyPI `vibe-trading-ai`: affected `>=0.1.0, <0.1.7`, fixed in `0.1.7` · CVSS 8.7 High · Not analysed yet · Published 2 Oct 2026 · Tags: Path traversal, Information disclosure
- [Vibe-Trading LLM-callable tools permit command execution, code injection, and SSRF](https://agentprime.io/advisories/GHSA-jqmf-mx4f-hfr6.md)
  `GHSA-jqmf-mx4f-hfr6`, `CVE-2026-114107` · PyPI `vibe-trading-ai`: affected `>=0.1.0, <0.1.7`, fixed in `0.1.7` · CVSS 8.7 High · Not analysed yet · Published 2 Oct 2026 · Tags: Command injection, Code injection, Server-side request forgery (SSRF), CWE-116
- [geopy: Regular Expression Denial of Service (ReDoS) in geopy.Point](https://agentprime.io/advisories/GHSA-mhvh-fq92-pfmr.md)
  `GHSA-mhvh-fq92-pfmr`, `CVE-2026-77387`, `PYSEC-2026-4218` · PyPI `geopy`: affected `<2.5.0`, fixed in `2.5.0` · CVSS 4.0 Medium · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [Dulwich: Arbitrary File Write (RCE) on Windows via Unvalidated Drive Letters in Tree Paths](https://agentprime.io/advisories/GHSA-8mcx-5rqc-vhmf.md)
  `GHSA-8mcx-5rqc-vhmf`, `CVE-2026-114094` · PyPI `dulwich`: affected `<1.2.9`, fixed in `1.2.9` · CVSS 8.7 High · Not analysed yet · Published 2 Oct 2026 · Tags: Path traversal
- [Dulwich: Infinite Loop Denial of Service (DoS) in Packfile Object Resolution](https://agentprime.io/advisories/GHSA-35mr-4567-66vg.md)
  `GHSA-35mr-4567-66vg`, `CVE-2026-114095` · PyPI `dulwich`: affected `<1.2.9`, fixed in `1.2.9` · CVSS 7.1 High · Not analysed yet · Published 2 Oct 2026 · Tags: Denial of service
- [Dulwich: Symlink write-through in checkout(paths=\[\]) via raw os.open bypasses all symlink protections](https://agentprime.io/advisories/GHSA-8w8g-wq8h-fq33.md)
  `GHSA-8w8g-wq8h-fq33`, `CVE-2026-114096` · PyPI `dulwich`: affected `>=0.24.0, <1.2.8`, fixed in `1.2.8` · CVSS 7.3 High · Not analysed yet · Published 2 Oct 2026 · Tags: Path traversal, CWE-61
- [Dulwich: Symlink directory traversal in filter-branch index_filter via cross-commit state persistence](https://agentprime.io/advisories/GHSA-5fqc-mrg8-w798.md)
  `GHSA-5fqc-mrg8-w798`, `CVE-2026-114097` · PyPI `dulwich`: affected `>=0.23.1, <1.2.8`, fixed in `1.2.8` · CVSS 7.3 High · Not analysed yet · Published 2 Oct 2026 · Tags: Path traversal
- [Dulwich: Symlink directory traversal in stash pop allows arbitrary file write via intermediate directory symlinks](https://agentprime.io/advisories/GHSA-cm62-gvxx-vmxx.md)
  `GHSA-cm62-gvxx-vmxx`, `CVE-2026-114098` · PyPI `dulwich`: affected `>=0.22.5, <1.2.8`, fixed in `1.2.8` · CVSS 7.3 High · Not analysed yet · Published 2 Oct 2026 · Tags: Path traversal
- [Duplicate Advisory: Title Authenticated Remote Code Execution in validate_code via Malicious Decorators Description](https://agentprime.io/advisories/GHSA-qqw9-2vj9-hx7r.md)
  `GHSA-qqw9-2vj9-hx7r` · PyPI `langflow`: affected `>=1.7.2`, no fixed version yet · No CVSS score · Withdrawn · Not analysed yet · Published 2 Oct 2026
- [JupyterLab: Cross-site scripting (XSS) in JupyterLab via notebook cells pasted from the system clipboard](https://agentprime.io/advisories/GHSA-6966-vjj6-99xv.md)
  `GHSA-6966-vjj6-99xv`, `CVE-2026-102831`, `PYSEC-2026-4057`, `PYSEC-2026-4058`, `PYSEC-2026-4060`, `PYSEC-2026-4112` · PyPI `notebook`: affected `>=7.5.0, <7.6.3`, fixed in `7.6.3` · CVSS 8.1 High · Not analysed yet · Published 1 Oct 2026 · Tags: Cross-site scripting (XSS), CWE-345
- [OpenStack Swift vulnerable to authenticated server-side request forgery](https://agentprime.io/advisories/GHSA-h8rc-w822-q8vq.md)
  `GHSA-h8rc-w822-q8vq`, `CVE-2026-50221`, `PYSEC-2026-4173` · PyPI `swift`: affected `<2.37.2`, fixed in `2.37.2` · CVSS 5.3 Medium · Not analysed yet · Published 1 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [JupyterLab: Cross-site scripting (XSS) in JupyterLab via crafted language package (jupyterlab.json)](https://agentprime.io/advisories/GHSA-3jqq-pw4j-pqcj.md)
  `GHSA-3jqq-pw4j-pqcj`, `CVE-2026-102830`, `PYSEC-2026-4056`, `PYSEC-2026-4059` · PyPI `jupyterlab` and 1 more: affected `>=3.0.0, <4.5.11 || >=4.6.0, <4.6.4`, fixed in `4.5.11`, `4.6.4` · CVSS 6.8 Medium · Not analysed yet · Published 1 Oct 2026 · Tags: Cross-site scripting (XSS), Code injection, CWE-625
- [JupyterLab: Argument injection in JupyterLab extension uninstall exposes server-readable files and internal URLs](https://agentprime.io/advisories/GHSA-3325-v43h-43rv.md)
  `GHSA-3325-v43h-43rv`, `BIT-jupyterlab-2026-102904`, `CVE-2026-102904`, `PYSEC-2026-4055` · PyPI `jupyterlab`: affected `>=4.0.0, <4.5.11 || >=4.6.0, <4.6.4`, fixed in `4.5.11`, `4.6.4` · CVSS 5.4 Medium · Not analysed yet · Published 1 Oct 2026 · Tags: Command injection, Information disclosure, Server-side request forgery (SSRF)
- [virtualenv bash and fish activation scripts execute commands embedded in paths](https://agentprime.io/advisories/GHSA-p58f-9548-mpm2.md)
  `GHSA-p58f-9548-mpm2`, `BIT-virtualenv-2026-102925`, `CVE-2026-102925`, `PYSEC-2026-4013` · PyPI `virtualenv`: affected `<21.7.13`, fixed in `21.7.13` · CVSS 7.8 High · Not analysed yet · Published 1 Oct 2026 · Tags: Command injection
- [virtualenv: Command injection via --prompt in activate.bat (batch activator)](https://agentprime.io/advisories/GHSA-x78j-v8h9-3j2q.md)
  `GHSA-x78j-v8h9-3j2q`, `BIT-virtualenv-2026-102937`, `CVE-2026-102937`, `PYSEC-2026-4014` · PyPI `virtualenv`: affected `<21.7.12`, fixed in `21.7.12` · CVSS 7.3 High · Not analysed yet · Published 1 Oct 2026 · Tags: Command injection
- [pypdf: Possible long runtimes with large amount of embedded files](https://agentprime.io/advisories/GHSA-v247-6f48-mgcj.md)
  `GHSA-v247-6f48-mgcj`, `CVE-2026-102999`, `PYSEC-2026-4159` · PyPI `pypdf`: affected `<6.19.0`, fixed in `6.19.0` · CVSS 8.7 High · Not analysed yet · Published 1 Oct 2026 · Tags: Denial of service
- [pypdf: Possible long runtimes when generating appearance streams](https://agentprime.io/advisories/GHSA-php9-fj8v-98fj.md)
  `GHSA-php9-fj8v-98fj`, `CVE-2026-102998`, `PYSEC-2026-4157` · PyPI `pypdf`: affected `<6.19.0`, fixed in `6.19.0` · CVSS 8.7 High · Not analysed yet · Published 1 Oct 2026 · Tags: Denial of service
- [pypdf: Possible large memory usage when retrieving alphabetical page labels](https://agentprime.io/advisories/GHSA-w23x-9jrw-r45c.md)
  `GHSA-w23x-9jrw-r45c`, `CVE-2026-103000`, `PYSEC-2026-4160` · PyPI `pypdf`: affected `<6.19.0`, fixed in `6.19.0` · CVSS 8.7 High · Not analysed yet · Published 1 Oct 2026 · Tags: Denial of service
- [pypdf: Possible long runtimes for partially malformed FlateDecode streams (Follow-up)](https://agentprime.io/advisories/GHSA-jw7q-gvrg-4vj3.md)
  `GHSA-jw7q-gvrg-4vj3`, `CVE-2026-102997`, `PYSEC-2026-4156` · PyPI `pypdf`: affected `<6.18.1`, fixed in `6.18.1` · CVSS 8.7 High · Not analysed yet · Published 1 Oct 2026 · Tags: Denial of service
- [pypdf: Possible large memory usage when parsing font data](https://agentprime.io/advisories/GHSA-g9cg-prrw-2r8q.md)
  `GHSA-g9cg-prrw-2r8q`, `CVE-2026-102996`, `PYSEC-2026-4155` · PyPI `pypdf`: affected `<6.18.1`, fixed in `6.18.1` · CVSS 8.7 High · Not analysed yet · Published 1 Oct 2026 · Tags: Denial of service
- [pypdf: Possible large memory usage for large /ToUnicode streams (Follow-up 2)](https://agentprime.io/advisories/GHSA-fp3h-c4fm-7vvf.md)
  `GHSA-fp3h-c4fm-7vvf`, `CVE-2026-102995`, `PYSEC-2026-4154` · PyPI `pypdf`: affected `<6.18.1`, fixed in `6.18.1` · CVSS 8.7 High · Not analysed yet · Published 1 Oct 2026 · Tags: Denial of service
- [pypdf: Possible long runtimes/large memory usage when parsing indirect objects](https://agentprime.io/advisories/GHSA-5jq2-8x83-x246.md)
  `GHSA-5jq2-8x83-x246`, `CVE-2026-102994`, `PYSEC-2026-4153` · PyPI `pypdf`: affected `<6.18.0`, fixed in `6.18.0` · CVSS 8.7 High · Not analysed yet · Published 1 Oct 2026 · Tags: Denial of service
- [pypdf: Possible large memory usage when retrieving Roman page labels](https://agentprime.io/advisories/GHSA-qv6h-rv94-w285.md)
  `GHSA-qv6h-rv94-w285`, `CVE-2026-102993`, `PYSEC-2026-4158` · PyPI `pypdf`: affected `<6.17.0`, fixed in `6.17.0` · CVSS 8.7 High · Not analysed yet · Published 1 Oct 2026 · Tags: Denial of service
- [virtualenv: Downloaded seed wheels (pip/setuptools) are not integrity-checked before use](https://agentprime.io/advisories/GHSA-94p9-xgh2-xp45.md)
  `GHSA-94p9-xgh2-xp45`, `BIT-virtualenv-2026-102930`, `CVE-2026-102930`, `PYSEC-2026-4011` · PyPI `virtualenv`: affected `<21.7.12`, fixed in `21.7.12` · CVSS 7.7 High · Not analysed yet · Published 30 Sept 2026 · Tags: CWE-494
- [virtualenv writes prompt values into pyvenv.cfg without sanitizing line boundaries, allowing configuration injection](https://agentprime.io/advisories/GHSA-9h9j-4vrj-gf7g.md)
  `GHSA-9h9j-4vrj-gf7g`, `BIT-virtualenv-2026-102938`, `CVE-2026-102938`, `PYSEC-2026-4012` · PyPI `virtualenv`: affected `<21.7.11`, fixed in `21.7.11` · CVSS 5.8 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: Other injection
- [PyJWT.decode() reintroduces options-dict mutation, enabling silent claim-verification bypass on dict reuse](https://agentprime.io/advisories/GHSA-gvp8-978c-rx2q.md)
  `GHSA-gvp8-978c-rx2q`, `CVE-2026-103001`, `PYSEC-2026-4146` · PyPI `pyjwt`: affected `>=2.11.0, <=2.13.0`, no fixed version yet · CVSS 6.5 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: CWE-471
- [Tornado: Unbounded query-string argument count allows event-loop-stalling DoS](https://agentprime.io/advisories/GHSA-3hv7-mjh2-fv65.md)
  `GHSA-3hv7-mjh2-fv65`, `CVE-2026-103261` · PyPI `tornado`: affected `<6.5.9`, fixed in `6.5.9` · CVSS 6.9 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: Denial of service
- [tornado: CurlAsyncHTTPClient enforces no response-size limit — decompression bomb drives unbounded memory accumulation to OOM](https://agentprime.io/advisories/GHSA-chx6-46f5-w4vp.md)
  `GHSA-chx6-46f5-w4vp`, `CVE-2026-103262` · PyPI `tornado`: affected `<6.5.9`, fixed in `6.5.9` · CVSS 8.7 High · Not analysed yet · Published 30 Sept 2026 · Tags: Denial of service, CWE-409
- [Tornado: StaticFileHandler follows symlinks outside static root (path traversal)](https://agentprime.io/advisories/GHSA-c2m8-h5v5-343r.md)
  `GHSA-c2m8-h5v5-343r`, `CVE-2026-103263` · PyPI `tornado`: affected `<6.5.9`, fixed in `6.5.9` · CVSS 8.2 High · Not analysed yet · Published 30 Sept 2026 · Tags: Path traversal
- [GitPython submodule update path traversal can write outside the repository](https://agentprime.io/advisories/GHSA-59cr-6r3x-644w.md)
  `GHSA-59cr-6r3x-644w`, `CVE-2026-100689` · PyPI `gitpython`: affected `<3.1.62`, fixed in `3.1.62` · CVSS 8.7 High · Not analysed yet · Published 30 Sept 2026 · Tags: Path traversal
- [GitPython: Denial of Service via catastrophic backtracking (ReDoS) in Actor.name_email_regex — commit author/committer field parsing](https://agentprime.io/advisories/GHSA-g5vv-9gxw-82hx.md)
  `GHSA-g5vv-9gxw-82hx`, `CVE-2026-87819`, `PYSEC-2026-3984` · PyPI `gitpython`: affected `<3.1.60`, fixed in `3.1.60` · CVSS 8.7 High · Not analysed yet · Published 30 Sept 2026 · Tags: Denial of service
- [GitPython: --no-index bypasses diff unsafe-option protections and enables a blind local-file content oracle](https://agentprime.io/advisories/GHSA-whh4-5q6c-9v3x.md)
  `GHSA-whh4-5q6c-9v3x`, `CVE-2026-87818`, `PYSEC-2026-3983` · PyPI `gitpython`: affected `>=3.1.59, <3.1.60`, fixed in `3.1.60` · CVSS 7.1 High · Not analysed yet · Published 30 Sept 2026 · Tags: Command injection, Information disclosure
- [GitPython: Repository content can impersonate the git directory, leading to arbitrary code execution](https://agentprime.io/advisories/GHSA-239g-whfq-7xj9.md)
  `GHSA-239g-whfq-7xj9`, `CVE-2026-87817`, `PYSEC-2026-3982` · PyPI `gitpython`: affected `<3.1.60`, fixed in `3.1.60` · CVSS 8.7 High · Not analysed yet · Published 30 Sept 2026 · Tags: Code injection, CWE-427
- [LiteLLM: Authenticated SSRF and provider-credential exfiltration via unvalidated request-body routing parameters](https://agentprime.io/advisories/GHSA-3cv6-jpf6-8222.md)
  `GHSA-3cv6-jpf6-8222`, `CVE-2026-84377`, `PYSEC-2026-4066` · PyPI `litellm`: affected `<1.88.6 || >=1.89.0, <1.89.7 || >=1.90.0, <1.90.7 || >=1.91.0, <1.91.5 || >=1.92.0, <1.92.2 || >=1.93.0, <1.93.2 || >=1.94.0, <1.94.3 || >=1.95.0, <1.95.1 || >=1.96.0, <1.96.2`, fixed in `1.88.6`, `1.89.7`, `1.90.7`, `1.91.5`, `1.92.2`, `1.93.2`, `1.94.3`, `1.95.1`, `1.96.2` · CVSS 6.5 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: Server-side request forgery (SSRF)
- [A flaw has been found in vllm-project vLLM up to 0.26.0. This vulnerability affects unknown code of the file rust/src/parser/src/unified/gemma4.rs of the component Gemma4UnifiedParser. Executing a ...](https://agentprime.io/advisories/PYSEC-2026-4186.md)
  `PYSEC-2026-4186`, `CVE-2026-103241` · PyPI `vllm`: affected `<0.27.0`, fixed in `0.27.0` · CVSS 6.9 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: Denial of service
- [PyJWT: Unauthenticated RecursionError DoS in pre-verification payload parse (PyJWKClient.get_signing_key_from_jwt / verify_signature=False)](https://agentprime.io/advisories/GHSA-42vr-xj54-vc7v.md)
  `GHSA-42vr-xj54-vc7v`, `CVE-2026-101918`, `PYSEC-2026-4141` · PyPI `pyjwt`: affected `>=2.0.0a1, <2.15.0`, fixed in `2.15.0` · CVSS 5.3 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: CWE-248
- [urllib3: Chunked Deflate streaming can enter an infinite loop](https://agentprime.io/advisories/GHSA-gh4c-6fx4-qh6g.md)
  `GHSA-gh4c-6fx4-qh6g`, `CVE-2026-97688`, `PYSEC-2026-4176` · PyPI `urllib3`: affected `>=2.6.2, <2.8.0`, fixed in `2.8.0` · CVSS 6.9 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: Denial of service
- [urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory](https://agentprime.io/advisories/GHSA-vxq7-64xx-v4gw.md)
  `GHSA-vxq7-64xx-v4gw`, `CVE-2026-97689`, `PYSEC-2026-4177` · PyPI `urllib3`: affected `>=1.10.3, <2.8.0`, fixed in `2.8.0` · CVSS 8.9 High · Not analysed yet · Published 30 Sept 2026 · Tags: Denial of service
- [urllib3: HTTPS proxy TLS configuration may be ignored or overridden](https://agentprime.io/advisories/GHSA-8988-9cw3-xx77.md)
  `GHSA-8988-9cw3-xx77`, `CVE-2026-97687`, `PYSEC-2026-4175` · PyPI `urllib3`: affected `>=1.26.0, <2.8.0`, fixed in `2.8.0` · CVSS 7.6 High · Not analysed yet · Published 30 Sept 2026 · Tags: Weak cryptography or TLS, CWE-440
- [PyJWT: ReDoS vulnerability when calling the \`is_pem_format\` function.](https://agentprime.io/advisories/GHSA-jwrc-g2q2-pq5p.md)
  `GHSA-jwrc-g2q2-pq5p`, `CVE-2026-102270`, `PYSEC-2026-4148` · PyPI `pyjwt`: affected `<2.14.0`, fixed in `2.14.0` · CVSS 4.4 Medium · Not analysed yet · Published 30 Sept 2026 · Tags: Denial of service
- [PyJWT: PyJWK accepts empty HMAC keys, bypassing PyJWT's empty-key validation](https://agentprime.io/advisories/GHSA-9j54-fg26-wv3r.md)
  `GHSA-9j54-fg26-wv3r`, `CVE-2026-102266`, `PYSEC-2026-4143` · PyPI `pyjwt`: affected `>=2.13.0, <2.14.0`, fixed in `2.14.0` · CVSS 7.4 High · Not analysed yet · Published 29 Sept 2026 · Tags: Weak cryptography or TLS
- [PyJWT: Uncaught RecursionError in jwt.decode() on deeply nested token header](https://agentprime.io/advisories/GHSA-8wjv-2p76-3863.md)
  `GHSA-8wjv-2p76-3863`, `CVE-2026-102265`, `PYSEC-2026-4142` · PyPI `pyjwt`: affected `>=2.13.0, <2.14.0`, fixed in `2.14.0` · CVSS 5.3 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Denial of service
- [PyJWT: Non-canonical signature segments enable raw-token revocation bypass](https://agentprime.io/advisories/GHSA-hxm8-2xgr-2p9m.md)
  `GHSA-hxm8-2xgr-2p9m`, `CVE-2026-102269`, `PYSEC-2026-4147` · PyPI `pyjwt`: affected `<2.14.0`, fixed in `2.14.0` · CVSS 4.8 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: CWE-180
- [PyJWT: Asymmetric-PEM detection bypass: whitespace/line-ending-mutated public keys skip the HS/asymmetric confusion guard](https://agentprime.io/advisories/GHSA-ffc3-869f-jxw9.md)
  `GHSA-ffc3-869f-jxw9`, `CVE-2026-102268`, `PYSEC-2026-4145` · PyPI `pyjwt`: affected `<2.14.0`, fixed in `2.14.0` · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 29 Sept 2026 · Tags: Weak cryptography or TLS
- [PyJWT accepts public JWK containers as HMAC secrets](https://agentprime.io/advisories/GHSA-w2cx-738m-mc7w.md)
  `GHSA-w2cx-738m-mc7w`, `CVE-2026-102273`, `PYSEC-2026-4151` · PyPI `pyjwt`: affected `>=2.13.0, <2.14.0`, fixed in `2.14.0` · CVSS 7.4 High · Not analysed yet · Published 29 Sept 2026 · Tags: Weak cryptography or TLS
- [PyJWT: PyJWKClient follows redirects when fetching JWKS](https://agentprime.io/advisories/GHSA-9v7f-9g4p-ffgj.md)
  `GHSA-9v7f-9g4p-ffgj`, `CVE-2026-102267`, `PYSEC-2026-4144` · PyPI `pyjwt`: affected `<2.14.0`, fixed in `2.14.0` · CVSS 7.4 High · Not analysed yet · Published 29 Sept 2026 · Tags: Information disclosure, Server-side request forgery (SSRF), CWE-345
- [PyJWT: Public keys in DER form are accepted as HMAC secrets, bypassing the CVE-2022-29217 guard](https://agentprime.io/advisories/GHSA-p4g4-x82p-q773.md)
  `GHSA-p4g4-x82p-q773`, `CVE-2026-102271`, `PYSEC-2026-4149` · PyPI `pyjwt`: affected `>=2.4.0, <2.14.0`, fixed in `2.14.0` · CVSS 7.4 High · Not analysed yet · Published 29 Sept 2026 · Tags: Weak cryptography or TLS
- [PyJWT BOM Bypass](https://agentprime.io/advisories/GHSA-r6x4-923q-g947.md)
  `GHSA-r6x4-923q-g947`, `CVE-2026-102272`, `PYSEC-2026-4150` · PyPI `pyjwt`: affected `>=2.13.0, <2.14.0`, fixed in `2.14.0` · CVSS 7.4 High · Not analysed yet · Published 29 Sept 2026 · Tags: Weak cryptography or TLS
- [PyJWT: PyJWKClient still amplifies unauthenticated JWKS fetches on unknown kid values (incomplete fix of CVE-2026-48524)](https://agentprime.io/advisories/GHSA-2gx3-rcp4-g85q.md)
  `GHSA-2gx3-rcp4-g85q`, `CVE-2026-101917`, `PYSEC-2026-4140` · PyPI `pyjwt`: affected `<2.14.0`, fixed in `2.14.0` · CVSS 5.3 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Denial of service
- [PyJWT: Malformed RSA JWK aborts parsing of an entire JWK Set](https://agentprime.io/advisories/GHSA-w6j9-cwv2-h6wq.md)
  `GHSA-w6j9-cwv2-h6wq`, `CVE-2026-102274`, `PYSEC-2026-4152` · PyPI `pyjwt`: affected `>=2.9.0, <2.14.0`, fixed in `2.14.0` · CVSS 5.9 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: CWE-755
- [Oauthlib: Timing Attack Vulnerability in PKCE code_verifier Comparison (CWE-208)](https://agentprime.io/advisories/GHSA-xpv3-w29h-x7cv.md)
  `GHSA-xpv3-w29h-x7cv`, `CVE-2026-49265`, `PYSEC-2026-4114` · PyPI `oauthlib`: affected `>=3.0.0, <4.0.0`, fixed in `4.0.0` · CVSS 6.8 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: CWE-208
- [Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generation](https://agentprime.io/advisories/GHSA-hj66-6f7g-4r5v.md)
  `GHSA-hj66-6f7g-4r5v`, `CVE-2026-49264`, `PYSEC-2026-4113` · PyPI `oauthlib`: affected `>=0.6.1, <4.0.0`, fixed in `4.0.0` · CVSS 6.1 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Cross-site scripting (XSS)
- [Apache Airflow's Snowflake provider did not validate the connection's \`account\` and \`region\` fields before interpolating them into request URLs. The SQL API endpoint is built as \`https\://{account}....](https://agentprime.io/advisories/PYSEC-2026-4188.md)
  `PYSEC-2026-4188`, `CVE-2026-81930` · PyPI `apache-airflow-providers-snowflake`: affected `<6.18.0`, fixed in `6.18.0` · CVSS 6.3 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Hard-coded credentials
- [Apache Airflow's Google provider built Google Drive search expressions by interpolating file and folder names directly into single-quoted string literals, without escaping the quote character that ...](https://agentprime.io/advisories/PYSEC-2026-4187.md)
  `PYSEC-2026-4187`, `CVE-2026-81914` · PyPI `apache-airflow-providers-google`: affected `<22.6.0`, fixed in `22.6.0` · CVSS 4.3 Medium · Not analysed yet · Published 29 Sept 2026 · Tags: Other injection
- [Duplicate Advisory: Authlib: empty signatures validation in JWS JSON deserialization](https://agentprime.io/advisories/GHSA-6m87-8wg6-hh8w.md)
  `GHSA-6m87-8wg6-hh8w` · PyPI `authlib`: affected `*`, no fixed version yet · CVSS 9.8 Critical · Withdrawn · Not analysed yet · Published 28 Sept 2026 · Tags: CWE-20
- [MONAI through 1.6.0 contains an eval injection vulnerability in \_get_fake_spatial_shape() in monai/bundle/scripts.py. The function validates shape expressions with a helper that walks the AST and o...](https://agentprime.io/advisories/GHSA-h89g-r5pc-wxfm.md)
  `GHSA-h89g-r5pc-wxfm`, `CVE-2026-100842`, `PYSEC-2026-4017` · PyPI `monai`: affected `<1.6.1rc0`, fixed in `1.6.1rc0` · CVSS 7.3 High · Not analysed yet · Published 27 Sept 2026 · Tags: Code injection
- [In MONAI 1.6.0, PersistentDataset (monai/data/dataset.py) explicitly rejects the combination track_meta=True with weights_only=True, forcing users who cache MetaTensors (the default tensor type in ...](https://agentprime.io/advisories/GHSA-636w-j999-g7x5.md)
  `GHSA-636w-j999-g7x5`, `CVE-2026-100841`, `PYSEC-2026-4016` · PyPI `monai`: affected , no fixed version yet · CVSS 8.5 High · Not analysed yet · Published 27 Sept 2026 · Tags: Insecure deserialization
- [MONAI through 1.6.0 contains a remote code execution vulnerability in the bundle configuration engine that resolves \_target\_ values to arbitrary importable callables without an allow list and passe...](https://agentprime.io/advisories/GHSA-873f-pvrv-4x83.md)
  `GHSA-873f-pvrv-4x83`, `CVE-2026-100840`, `PYSEC-2026-4015` · PyPI `monai`: affected `<1.6.1rc0`, fixed in `1.6.1rc0` · CVSS 8.5 High · Not analysed yet · Published 27 Sept 2026 · Tags: Code injection

Newest: <https://agentprime.io/advisories/ecosystem/pypi.md>
Older: <https://agentprime.io/advisories/ecosystem/pypi.md?cursor=WyIyMDI2LTA5LTI3VDAyOjE3OjIyLjM4NzAwMFoiLCJHSFNBLTg3M2YtcHZydi00eDgzIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?ecosystem=PyPI&cursor=WyIyMDI2LTEwLTA1VDIyOjE2OjU3LjQ4MDAwMFoiLCJHSFNBLWg0MmotOWhjYy0zY3djIl0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/ecosystem/pypi/?cursor=WyIyMDI2LTEwLTA1VDIyOjE2OjU3LjQ4MDAwMFoiLCJHSFNBLWg0MmotOWhjYy0zY3djIl0>. Everything for agents: <https://agentprime.io/llms.txt>.