# PyPI Advisories.

Every PyPI Advisory we hold (Python), newest first.

## Records, newest first (an older page)

- [Docling imports plugin entry points before the allow_external_plugins check](https://agentprime.io/advisories/GHSA-9jxx-vjrv-h2rq.md)
  `GHSA-9jxx-vjrv-h2rq`, `CVE-2026-105745`, `PYSEC-2026-4192`, `PYSEC-2026-4210` · PyPI `docling` and 1 more: affected `>=2.27.0, <2.131.0`, fixed in `2.131.0` · CVSS 6.7 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: CWE-696, CWE-829
- [Langflow: OS command injection (RCE) via arbitrary command in MCP stdio server configuration](https://agentprime.io/advisories/GHSA-w794-rj3p-xv45.md)
  `GHSA-w794-rj3p-xv45`, `CVE-2026-105697`, `PYSEC-2026-4237`, `PYSEC-2026-4239`, `PYSEC-2026-4241` · PyPI `langflow` and 2 more: affected `>=1.1.2, <1.10.3`, fixed in `1.10.3` · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Oct 2026 · Tags: Command injection
- [Langflow : Cross-user flow access and vertex execution via deprecated /api/v1/build/{flow_id}/vertices endpoints](https://agentprime.io/advisories/GHSA-gh98-4phw-6fmw.md)
  `GHSA-gh98-4phw-6fmw`, `CVE-2026-105698`, `PYSEC-2026-4234`, `PYSEC-2026-4238` · PyPI `langflow` and 1 more: affected `>=1.0.0, <1.10.1`, fixed in `1.10.1` · CVSS 5.4 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Broken access control
- [Langflow has Authenticated Cross-Project File Disclosure via Unscoped MCP Resource Handlers](https://agentprime.io/advisories/GHSA-4hmc-cfm3-w43c.md)
  `GHSA-4hmc-cfm3-w43c`, `CVE-2026-105699`, `PYSEC-2026-4230` · PyPI `langflow`: affected `>=1.6.8, <1.9.1`, fixed in `1.9.1` · CVSS 7.1 High · Not analysed yet · Published 7 Oct 2026 · Tags: Broken access control
- [Hydra: Optuna custom_search_space can resolve and execute untrusted callables via get_method](https://agentprime.io/advisories/GHSA-5jjj-9xc3-rm56.md)
  `GHSA-5jjj-9xc3-rm56`, `CVE-2026-106440`, `PYSEC-2026-4224` · PyPI `hydra-optuna-sweeper`: affected `>=1.2.0, <1.3.0 || >=1.4.0.dev4, <1.4.0.dev10`, fixed in `1.3.0`, `1.4.0.dev10` · CVSS 7.8 High · Not analysed yet · Published 7 Oct 2026 · Tags: Code injection
- [Hydra: Mutable instantiate policy sets allow target blocklist bypass](https://agentprime.io/advisories/GHSA-mwj6-rfh8-7qf4.md)
  `GHSA-mwj6-rfh8-7qf4`, `CVE-2026-106439`, `PYSEC-2026-4222` · PyPI `hydra-core`: affected `>=1.3.4, <1.3.7 || >=1.4.0.dev4, <1.4.0.dev10`, fixed in `1.3.7`, `1.4.0.dev10` · CVSS 8.5 High · Not analysed yet · Published 7 Oct 2026 · Tags: Code injection, CWE-693
- [PraisonAI: Crawl4AI/Chromium backend is also affected by the \`web_crawl\` SSRF validation bypass](https://agentprime.io/advisories/GHSA-6g59-gm2v-qhvq.md)
  `GHSA-6g59-gm2v-qhvq`, `CVE-2026-61429`, `PYSEC-2026-4269` · PyPI `praisonaiagents`: affected `<1.6.78`, fixed in `1.6.78` · CVSS 8.4 High · Not analysed yet · Published 7 Oct 2026 · Tags: Information disclosure, Race condition, Server-side request forgery (SSRF)
- [WeasyPrint: EPS images reach the Ghostscript interpreter resulting in RCE](https://agentprime.io/advisories/GHSA-r543-q48m-4c9j.md)
  `GHSA-r543-q48m-4c9j`, `CVE-2026-106443`, `PYSEC-2026-4311` · PyPI `weasyprint`: affected `<70.0`, fixed in `70.0` · CVSS 8.8 High · Not analysed yet · Published 7 Oct 2026 · Tags: CWE-20
- [Hydra logging configuration permits unsafe callable resolution](https://agentprime.io/advisories/GHSA-c3wx-c55w-pxjq.md)
  `GHSA-c3wx-c55w-pxjq`, `CVE-2026-106441`, `PYSEC-2026-4221` · PyPI `hydra-core`: affected `<1.3.6 || >=1.4.0.dev0, <1.4.0.dev9`, fixed in `1.3.6`, `1.4.0.dev9` · CVSS 7.8 High · Not analysed yet · Published 7 Oct 2026 · Tags: Code injection
- [Hydra instantiate target blacklist bypasses permit code execution](https://agentprime.io/advisories/GHSA-rqx7-p7vv-w7hr.md)
  `GHSA-rqx7-p7vv-w7hr`, `CVE-2026-106442`, `PYSEC-2026-4223` · PyPI `hydra-core`: affected `>=1.3.4, <1.3.6 || >=1.4.0.dev0, <1.4.0.dev9`, fixed in `1.3.6`, `1.4.0.dev9` · CVSS 7.8 High · Not analysed yet · Published 7 Oct 2026 · Tags: CWE-184
- [Twisted: IMAP wildcardToRegexp() ReDoS](https://agentprime.io/advisories/GHSA-8pqf-f4m5-798g.md)
  `GHSA-8pqf-f4m5-798g`, `CVE-2026-106454`, `PYSEC-2026-4304` · PyPI `twisted`: affected `<=26.4.0`, no fixed version yet · CVSS 4.3 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Denial of service
- [Langflow: IP Spoofing Bypass via \`X-Forwarded-For\` Allowing Remote Configuration Write](https://agentprime.io/advisories/GHSA-4f6c-2vvp-gw82.md)
  `GHSA-4f6c-2vvp-gw82`, `CVE-2026-105741`, `PYSEC-2026-4229` · PyPI `langflow`: affected `>=1.5.0, <1.10.3`, fixed in `1.10.3` · CVSS 7.1 High · Not analysed yet · Published 7 Oct 2026 · Tags: Authentication bypass, CWE-345
- [PraisonAI: Code Injection via f-string Interpolation in Deploy API Server Generation](https://agentprime.io/advisories/GHSA-g6j7-pffp-8whg.md)
  `GHSA-g6j7-pffp-8whg`, `CVE-2026-61444`, `CVE-2026-62176`, `PYSEC-2026-4256` · PyPI `praisonai`: affected `<4.6.78`, fixed in `4.6.78` · CVSS 9.4 Critical · Critical (CVSS 9+) · Not analysed yet · Published 7 Oct 2026 · Tags: Code injection
- [PraisonAI: Platform members can delete owner issue dependencies through member-owned related issues](https://agentprime.io/advisories/GHSA-mxmx-rh57-jx58.md)
  `GHSA-mxmx-rh57-jx58`, `CVE-2026-61441`, `CVE-2026-62179`, `PYSEC-2026-4263` · PyPI `praisonai-platform`: affected `<0.1.9`, fixed in `0.1.9` · CVSS 7.1 High · Not analysed yet · Published 7 Oct 2026 · Tags: Broken access control
- [PraisonAI: AgentMail webhook mode accepts forged unsigned message.received events and invokes agents](https://agentprime.io/advisories/GHSA-7c92-x8vg-4258.md)
  `GHSA-7c92-x8vg-4258`, `CVE-2026-61436`, `PYSEC-2026-4252` · PyPI `praisonai`: affected `<4.6.78`, fixed in `4.6.78` · CVSS 8.8 High · Not analysed yet · Published 7 Oct 2026 · Tags: Authentication bypass, Weak cryptography or TLS
- [PraisonAI: AgentMail webhook lacks signature verification, allowing unauthenticated message injection and sender spoofing](https://agentprime.io/advisories/GHSA-qj9c-59p6-8cgx.md)
  `GHSA-qj9c-59p6-8cgx`, `CVE-2026-61428`, `PYSEC-2026-4259` · PyPI `praisonai`: affected `<4.6.78`, fixed in `4.6.78` · CVSS 6.9 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Authentication bypass, Broken access control, CWE-345
- [wger: Cross-User Data Corruption via Missing Ownership Check on WorkoutLog.slot_entry](https://agentprime.io/advisories/GHSA-rjpf-7pf5-q54x.md)
  `GHSA-rjpf-7pf5-q54x`, `CVE-2026-46438`, `PYSEC-2026-4314` · PyPI `wger`: affected `<=2.1`, no fixed version yet · CVSS 6.5 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Broken access control
- [wger: Trainer Privilege Escalation - Improper Privilege Management](https://agentprime.io/advisories/GHSA-x249-cx55-2h87.md)
  `GHSA-x249-cx55-2h87`, `CVE-2026-46434`, `PYSEC-2026-4316` · PyPI `wger`: affected `<=2.1`, no fixed version yet · CVSS 7.1 High · Not analysed yet · Published 7 Oct 2026 · Tags: Privilege escalation
- [wger: API credentials remain valid after logout/password change](https://agentprime.io/advisories/GHSA-v3x9-6gg8-c2c9.md)
  `GHSA-v3x9-6gg8-c2c9`, `CVE-2026-46437`, `PYSEC-2026-4315` · PyPI `wger`: affected `<=2.1`, no fixed version yet · CVSS 4.8 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Authentication bypass
- [wger: trainer_login accepts GET - CSRF bypass enables forced session rebinding](https://agentprime.io/advisories/GHSA-xf64-4pmc-h8qf.md)
  `GHSA-xf64-4pmc-h8qf`, `CVE-2026-45161`, `PYSEC-2026-4317` · PyPI `wger`: affected `<=2.1`, no fixed version yet · CVSS 5.4 Medium · Not analysed yet · Published 7 Oct 2026 · Tags: Cross-site request forgery (CSRF)
- [wger: cross-tenant admin notes/contracts leak via gym=None bypass (5 views)](https://agentprime.io/advisories/GHSA-c72h-82w6-rqfp.md)
  `GHSA-c72h-82w6-rqfp`, `CVE-2026-43976`, `PYSEC-2026-4313` · PyPI `wger`: affected `<=2.1`, no fixed version yet · CVSS 7.1 High · Not analysed yet · Published 7 Oct 2026 · Tags: Broken access control
- [Duplicate Advisory: Remote code execution via unsafe deserialization in multiprocess mode transport](https://agentprime.io/advisories/GHSA-vv44-hjm2-qw2f.md)
  `GHSA-vv44-hjm2-qw2f` · PyPI `lmcache`: affected `>=0.3.9`, no fixed version yet · CVSS 9.8 Critical · Withdrawn · Not analysed yet · Published 7 Oct 2026 · Tags: Authentication bypass
- [openapi-python-client: Malicious OpenAPI Documents can cause Arbitrary Code Generation](https://agentprime.io/advisories/GHSA-5293-mq8x-g3xj.md)
  `GHSA-5293-mq8x-g3xj`, `CVE-2026-105801`, `PYSEC-2026-4245` · PyPI `openapi-python-client`: affected `<0.29.1`, fixed in `0.29.1` · CVSS 8.4 High · Not analysed yet · Published 6 Oct 2026 · Tags: Code injection, CWE-116, CWE-150
- [Vyper: Memory corruption using function calls within tuples / nested calls](https://agentprime.io/advisories/GHSA-2r3x-4mrv-mcxf.md)
  `GHSA-2r3x-4mrv-mcxf`, `CVE-2020-37286` · PyPI `vyper`: affected `<0.2.6`, fixed in `0.2.6` · CVSS 8.3 High · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption, CWE-129
- [Vyper: Call stack corruption when passing complex type containing non-base type members as argument](https://agentprime.io/advisories/GHSA-4v7v-gqf9-ww2g.md)
  `GHSA-4v7v-gqf9-ww2g`, `CVE-2020-37287` · PyPI `vyper`: affected `<0.2.6`, fixed in `0.2.6` · CVSS 8.2 High · Not analysed yet · Published 6 Oct 2026 · Tags: Memory corruption, CWE-682
- [Vyper: Return inside for loop more than 1 level deep](https://agentprime.io/advisories/GHSA-vg88-3v92-rjx2.md)
  `GHSA-vg88-3v92-rjx2`, `CVE-2020-37288` · PyPI `vyper`: affected `>=0.1.0b10, <0.2.3`, fixed in `0.2.3` · CVSS 6.3 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-670, CWE-691
- [A security flaw has been discovered in vllm-project vLLM up to 0.31.0. This impacts the function get_token_bin_counts_and_mask of the file vllm/model_executor/layers/utils.py of the component Penal...](https://agentprime.io/advisories/PYSEC-2026-4319.md)
  `PYSEC-2026-4319`, `CVE-2026-105922` · PyPI `vllm`: affected `<0.32.0`, fixed in `0.32.0` · CVSS 5.3 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service
- [Docling: METS-GBS archive member limit enforced after full member enumeration (memory exhaustion during format detection)](https://agentprime.io/advisories/GHSA-3cr3-8m4c-fpxw.md)
  `GHSA-3cr3-8m4c-fpxw`, `CVE-2026-105747`, `PYSEC-2026-4194`, `PYSEC-2026-4209` · PyPI `docling` and 1 more: affected `>=2.45.0, <2.131.0`, fixed in `2.131.0` · CVSS 4.3 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service, CWE-409
- [Langflow: SSRF in URL-taking components (protection disabled by default / warn-only, not applied to RSS, SearXNG, Web Search, Home Assistant, Glean, Docling)](https://agentprime.io/advisories/GHSA-j8f7-x8jm-wmm4.md)
  `GHSA-j8f7-x8jm-wmm4` · PyPI `langflow` and 3 more: affected `<1.10.3`, fixed in `1.10.3` · CVSS 4.0, no score published · Not analysed yet · Published 6 Oct 2026 · Tags: Server-side request forgery (SSRF)
- [Langflow: PythonREPLComponent executes unsandboxed Python code, enabling authenticated RCE and privilege escalation](https://agentprime.io/advisories/GHSA-8qpj-27x8-pwpq.md)
  `GHSA-8qpj-27x8-pwpq`, `CVE-2026-10561`, `PYSEC-2026-4231` · PyPI `langflow`: affected `<1.10.1`, fixed in `1.10.1` · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 6 Oct 2026 · Tags: Code injection, Privilege escalation
- [Duplicate Advisory: Docling: METS-GBS archive member limit enforced after full member enumeration (memory exhaustion during format detection)](https://agentprime.io/advisories/GHSA-f4ch-vxwc-3p2m.md)
  `GHSA-f4ch-vxwc-3p2m` · PyPI `docling`: affected `>=2.45.0, <2.131.0`, fixed in `2.131.0` · CVSS 4.3 Medium · Withdrawn · Not analysed yet · Published 6 Oct 2026 · Tags: CWE-409
- [Docling: \`enable_local_fetch\` is not enforced in HTML browser-rendering mode](https://agentprime.io/advisories/GHSA-q43m-vhcp-mhvm.md)
  `GHSA-q43m-vhcp-mhvm`, `CVE-2026-105750`, `PYSEC-2026-4196`, `PYSEC-2026-4215` · PyPI `docling` and 1 more: affected `>=2.82.0, <2.118.1`, fixed in `2.118.1` · CVSS 5.9 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Information disclosure, Broken access control
- [vLLM: Mirrored multimodal IPC caches desync after a rejected request — a later request reusing the same media hash trips a receiver assertion in the engine core](https://agentprime.io/advisories/GHSA-ph3r-5jfg-f84f.md)
  `GHSA-ph3r-5jfg-f84f`, `CVE-2026-105753`, `PYSEC-2026-4197` · PyPI `vllm`: affected `<0.28.0`, fixed in `0.28.0` · CVSS 6.5 Medium · Not analysed yet · Published 6 Oct 2026 · Tags: Denial of service
- [vLLM: Harmony tool continuations drop \`cache_salt\` — restoring a cross-tenant prefix-cache membership oracle](https://agentprime.io/advisories/GHSA-935w-9g4m-p28p.md)
  `GHSA-935w-9g4m-p28p`, `CVE-2026-105752`, `PYSEC-2026-4308` · PyPI `vllm`: affected `<0.30.0`, fixed in `0.30.0` · CVSS 3.1 Low · Not analysed yet · Published 6 Oct 2026 · Tags: Information disclosure, CWE-524
- [Werkzeug safe_join() allows Windows special device names](https://agentprime.io/advisories/GHSA-g6x2-hccm-hh4m.md)
  `GHSA-g6x2-hccm-hh4m`, `CVE-2026-102598`, `PYSEC-2026-4312` · PyPI `werkzeug`: affected `<3.1.9`, fixed in `3.1.9` · CVSS 6.3 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: CWE-67
- [PyMongo: PYTHON-5996 Heap out-of-bounds write via signed size overflow in BSON document encoding](https://agentprime.io/advisories/GHSA-v4x9-3549-crwv.md)
  `GHSA-v4x9-3549-crwv`, `CVE-2026-96749`, `PYSEC-2026-4296` · PyPI `pymongo`: affected `<4.18.2`, fixed in `4.18.2` · CVSS 7.5 High · Not analysed yet · Published 5 Oct 2026 · Tags: Memory corruption
- [PyMongo: PYTHON-5986 Host injection in PyMongo connection string parsing via percent-encoded delimiters](https://agentprime.io/advisories/GHSA-vp6j-j7w5-5xjj.md)
  `GHSA-vp6j-j7w5-5xjj`, `CVE-2026-96748`, `PYSEC-2026-4297` · PyPI `pymongo`: affected `>=3.5.0, <4.18.2`, fixed in `4.18.2` · CVSS 8.3 High · Not analysed yet · Published 5 Oct 2026 · Tags: CWE-177
- [PyMongo: PYTHON-5990 Forced Unix domain socket connection via a .sock KMS endpoint in client-side field level encryption](https://agentprime.io/advisories/GHSA-qx36-8mw2-4r3x.md)
  `GHSA-qx36-8mw2-4r3x`, `CVE-2026-96747`, `PYSEC-2026-4295` · PyPI `pymongo`: affected `>=3.9.0, <4.18.2`, fixed in `4.18.2` · CVSS 5.3 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Server-side request forgery (SSRF), CWE-20
- [PyJWT accepts inconsistent OKP x/d JWKs, causing public/private key identity confusion](https://agentprime.io/advisories/GHSA-x33g-cr3x-6449.md)
  `GHSA-x33g-cr3x-6449`, `CVE-2026-102275`, `PYSEC-2026-4183` · PyPI `pyjwt`: affected `>=2.1.0, <2.15.0`, fixed in `2.15.0` · CVSS 6.5 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: CWE-345, CWE-348
- [vLLM: Qwen2-VL / Qwen3-VL video samplers bound on request-controlled max_frames, which the num_frames ceiling does not reach](https://agentprime.io/advisories/GHSA-x6mc-67gf-chw4.md)
  `GHSA-x6mc-67gf-chw4`, `CVE-2026-105758`, `PYSEC-2026-4310` · PyPI `vllm`: affected `>=0.24.0, <0.30.0`, fixed in `0.30.0` · CVSS 5.3 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Denial of service
- [vLLM: GLMGA video sampling permits request-driven CPU and memory exhaustion](https://agentprime.io/advisories/GHSA-58v5-2m8f-94pr.md)
  `GHSA-58v5-2m8f-94pr`, `CVE-2026-105760`, `PYSEC-2026-4307` · PyPI `vllm`: affected `>=0.23.0rc2, <0.30.0`, fixed in `0.30.0` · CVSS 5.3 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Denial of service
- [vLLM: Scale-out disaggregated multimodal transport trusts caller-supplied features](https://agentprime.io/advisories/GHSA-ph72-cqr5-qpp7.md)
  `GHSA-ph72-cqr5-qpp7`, `CVE-2026-105754`, `PYSEC-2026-4309` · PyPI `vllm`: affected `<0.30.0`, fixed in `0.30.0` · CVSS 6.5 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Denial of service, Broken access control, Information disclosure, CWE-20
- [vLLM: Structured-output request errors escape the request boundary and terminate the shared EngineCore — engine-fatal denial of service (3 sites)](https://agentprime.io/advisories/GHSA-85xf-c7hm-whqw.md)
  `GHSA-85xf-c7hm-whqw`, `CVE-2026-105757`, `PYSEC-2026-4199` · PyPI `vllm`: affected `<0.30.0`, fixed in `0.30.0` · CVSS 6.5 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: CWE-20, CWE-248, CWE-755
- [vLLM: Flash late-interaction scoring caches query embeddings under a caller-controlled request id — cross-request integrity break and induced errors on \`/score\` and \`/rerank\`](https://agentprime.io/advisories/GHSA-2phq-3phc-84px.md)
  `GHSA-2phq-3phc-84px`, `CVE-2026-105755`, `PYSEC-2026-4198` · PyPI `vllm`: affected `<0.30.0`, fixed in `0.30.0` · CVSS 4.2 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Broken access control
- [vLLM: Loose \`cache_salt\` validation lets a single request kill EngineCore on LMCache-MP deployments — uncaught downstream \`ValueError\` denial of service](https://agentprime.io/advisories/GHSA-2823-qmq8-rwvj.md)
  `GHSA-2823-qmq8-rwvj`, `CVE-2026-105756`, `PYSEC-2026-4306` · PyPI `vllm`: affected `<0.30.0`, fixed in `0.30.0` · CVSS 6.5 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: CWE-20, CWE-248
- [uv: Path traversal on Windows through wheel extraction](https://agentprime.io/advisories/GHSA-2cv4-cqwr-gwf7.md)
  `GHSA-2cv4-cqwr-gwf7`, `CVE-2026-104843`, `PYSEC-2026-4305` · crates.io `uv` and 1 more: affected `>=0.12.7, <0.12.18`, fixed in `0.12.18` · CVSS 5.9 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Path traversal
- [Mako: Path traversal via drive-letter URI on Windows in TemplateLookup](https://agentprime.io/advisories/GHSA-5639-2j2p-m4mx.md)
  `GHSA-5639-2j2p-m4mx`, `CVE-2026-102991`, `PYSEC-2026-4243` · PyPI `mako`: affected `<1.4.2`, fixed in `1.4.2` · CVSS 6.5 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Path traversal
- [Multidict: Reference leak in CIMultiDict/MultiDict items-view union and subtraction](https://agentprime.io/advisories/GHSA-54p9-h82j-f925.md)
  `GHSA-54p9-h82j-f925`, `CVE-2026-104874`, `PYSEC-2026-4244` · PyPI `multidict`: affected `>=6.7.0, <6.9.1`, fixed in `6.9.1` · CVSS 5.3 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Denial of service
- [pymongo: PYTHON-5994 Use exact match for file ID in GridFS delete methods](https://agentprime.io/advisories/GHSA-8fvv-fgr5-f8ch.md)
  `GHSA-8fvv-fgr5-f8ch`, `CVE-2026-88029`, `PYSEC-2026-4294` · PyPI `pymongo`: affected `<4.18.1`, fixed in `4.18.1` · CVSS 6.1 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Other injection
- [vLLM is an inference and serving engine for large language models. Prior to 0.30.0, the Rust frontend's track_http_metrics middleware records the raw HTTP method token as a Prometheus label for req...](https://agentprime.io/advisories/GHSA-5fj9-pfhr-6j48.md)
  `GHSA-5fj9-pfhr-6j48`, `CVE-2026-105759`, `PYSEC-2026-4325` · PyPI `vllm`: affected `<0.30.0`, fixed in `0.30.0` · CVSS 5.9 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Denial of service
- [Snowflake drivers writes sensitive information to logs](https://agentprime.io/advisories/GHSA-qqj6-54q6-cxv6.md)
  `GHSA-qqj6-54q6-cxv6`, `CVE-2026-86597`, `GO-2026-6665`, `PYSEC-2026-4301` · Go `github.com/snowflakedb/gosnowflake` and 6 more: affected `<=1.19.1`, no fixed version yet · CVSS 6.5 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Information disclosure
- [fsspec: Server-Side Template Injection in ReferenceFileSystem leads to Remote Code Execution](https://agentprime.io/advisories/GHSA-27vj-qcqg-25rc.md)
  `GHSA-27vj-qcqg-25rc`, `CVE-2026-104851`, `PYSEC-2026-4217` · PyPI `fsspec`: affected `>=0.9.0, <2026.6.0`, fixed in `2026.6.0` · CVSS 8.8 High · Not analysed yet · Published 5 Oct 2026 · Tags: Code injection
- [Quart leaks raw request body (incl. plaintext passwords) to stdout via stray debug print in Body.\_\_await\_\_](https://agentprime.io/advisories/GHSA-v853-p72q-4cfw.md)
  `GHSA-v853-p72q-4cfw` · PyPI `quart`: affected `>=0.23.0, <0.23.1`, fixed in `0.23.1` · CVSS 7.5 High · Not analysed yet · Published 5 Oct 2026 · Tags: Information disclosure
- [LangGraph SDK custom auth silently ignores actions= on resource decorators](https://agentprime.io/advisories/GHSA-fvww-7h3r-vfhp.md)
  `GHSA-fvww-7h3r-vfhp`, `CVE-2026-104873`, `PYSEC-2026-4240` · PyPI `langgraph-sdk`: affected `>=0.1.45, <0.4.4`, fixed in `0.4.4` · CVSS 7.6 High · Not analysed yet · Published 5 Oct 2026 · Tags: Broken access control
- [Docling: Arbitrary local file read via draw:image xlink:href in the OpenDocument backend](https://agentprime.io/advisories/GHSA-4xhp-xg4w-8ppm.md)
  `GHSA-4xhp-xg4w-8ppm`, `CVE-2026-105751`, `PYSEC-2026-4207` · PyPI `docling`: affected `>=2.107.0, <2.120.3`, fixed in `2.120.3` · CVSS 6.9 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Path traversal
- [Langflow: Weak Fernet Key via random.seed()](https://agentprime.io/advisories/GHSA-jxw3-mjmx-3pqm.md)
  `GHSA-jxw3-mjmx-3pqm`, `CVE-2026-9205`, `PYSEC-2026-4235` · PyPI `langflow`: affected `<1.10.1`, fixed in `1.10.1` · CVSS 7.4 High · Not analysed yet · Published 5 Oct 2026 · Tags: Weak cryptography or TLS, CWE-228
- [Langflow: Unauthenticated Flow Execution via Webhook Authentication Bypass](https://agentprime.io/advisories/GHSA-cf6m-vc3m-7cgm.md)
  `GHSA-cf6m-vc3m-7cgm`, `CVE-2026-8505`, `PYSEC-2026-4233` · PyPI `langflow`: affected `>=1.7.0, <1.9.1`, fixed in `1.9.1` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 5 Oct 2026 · Tags: Authentication bypass
- [Langflow: Title Authenticated Remote Code Execution in validate_code via Malicious Decorators Description](https://agentprime.io/advisories/GHSA-w584-2h2r-2hvf.md)
  `GHSA-w584-2h2r-2hvf`, `CVE-2026-51886`, `PYSEC-2026-4236` · PyPI `langflow`: affected `>=1.7.2, <1.10.1`, fixed in `1.10.1` · CVSS 8.8 High · Not analysed yet · Published 5 Oct 2026 · Tags: Code injection
- [Langflow: Prompt injection in Langflow Smart Transform can lead to code execution](https://agentprime.io/advisories/GHSA-9fpm-3445-2vx4.md)
  `GHSA-9fpm-3445-2vx4`, `CVE-2026-7700`, `PYSEC-2026-4232` · PyPI `langflow`: affected `>=1.3.0, <1.10.3`, fixed in `1.10.3` · CVSS 5.3 Medium · Not analysed yet · Published 5 Oct 2026 · Tags: Other injection, Code injection
- [Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.83.0 until 2.131.0, the KServeV2OcrModel class defined in docli...](https://agentprime.io/advisories/GHSA-h42j-9hcc-3cwc.md)
  `GHSA-h42j-9hcc-3cwc`, `CVE-2026-105746`, `PYSEC-2026-4193` · PyPI `docling`: affected `>=2.83.0, <2.131.0`, fixed in `2.131.0` · CVSS 2.2 Low · Not analysed yet · Published 5 Oct 2026 · Tags: Information disclosure, CWE-693

Newest: <https://agentprime.io/advisories/ecosystem/pypi.md>
Older: <https://agentprime.io/advisories/ecosystem/pypi.md?cursor=WyIyMDI2LTEwLTA1VDIyOjE2OjU3LjQ4MDAwMFoiLCJHSFNBLWg0MmotOWhjYy0zY3djIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?ecosystem=PyPI&cursor=WyIyMDI2LTEwLTA3VDIwOjQxOjAyLjAwMDAwMFoiLCJHSFNBLWNnYzctOXFwMy04Nm0zIl0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/ecosystem/pypi/?cursor=WyIyMDI2LTEwLTA3VDIwOjQxOjAyLjAwMDAwMFoiLCJHSFNBLWNnYzctOXFwMy04Nm0zIl0>. Everything for agents: <https://agentprime.io/llms.txt>.