# PyPI Advisories.

Every PyPI Advisory we hold (Python), newest first.

## Records, newest first (an older page)

- [Pillow: Infinite loop in MIC n_frames when the embedded TIFF](https://agentprime.io/advisories/GHSA-22hg-r758-rrw9.md)
  `GHSA-22hg-r758-rrw9`, `BIT-pillow-2026-112390`, `CVE-2026-112390` · PyPI `pillow`: affected `>=7.2.0, <13.0.0`, fixed in `13.0.0` · CVSS 8.2 High · Not analysed yet · Published 21 Oct 2026 · Tags: Denial of service
- [Pillow: Quadratic GIF comment copying during save](https://agentprime.io/advisories/GHSA-fc9g-5qg7-mf45.md)
  `GHSA-fc9g-5qg7-mf45`, `BIT-pillow-2026-112891`, `CVE-2026-112891` · PyPI `pillow`: affected `>=9.2.0, <13.0.0`, fixed in `13.0.0` · CVSS 6.9 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Denial of service
- [Pillow: NULL dereference in ImagingExpand via rank filters on zero-size images](https://agentprime.io/advisories/GHSA-27h8-gf7j-v5hc.md)
  `GHSA-27h8-gf7j-v5hc`, `BIT-pillow-2026-112392`, `CVE-2026-112392`, `PYSEC-2026-4326` · PyPI `pillow`: affected `<13.0.0`, fixed in `13.0.0` · CVSS 8.2 High · Not analysed yet · Published 21 Oct 2026 · Tags: Memory corruption
- [Pillow: NULL pointer dereference in Image.merge via an unvalidated band 0](https://agentprime.io/advisories/GHSA-cp9v-662q-vvx9.md)
  `GHSA-cp9v-662q-vvx9`, `BIT-pillow-2026-112405`, `CVE-2026-112405`, `PYSEC-2026-4333` · PyPI `pillow`: affected `>=12.0.0, <13.0.0`, fixed in `13.0.0` · CVSS 8.7 High · Not analysed yet · Published 21 Oct 2026 · Tags: Memory corruption
- [Pillow: Invalid free in FreeType glyph rendering when a stroker is active](https://agentprime.io/advisories/GHSA-j4m9-6w36-pw47.md)
  `GHSA-j4m9-6w36-pw47`, `BIT-pillow-2026-112893`, `CVE-2026-112893` · PyPI `pillow`: affected `>=10.0.0, <13.0.0`, fixed in `13.0.0` · CVSS 8.2 High · Not analysed yet · Published 21 Oct 2026 · Tags: Memory corruption
- [Pillow: Double free in ImagingScaleAffine on calloc failure via Image.transform](https://agentprime.io/advisories/GHSA-7mwm-ghpf-9vrm.md)
  `GHSA-7mwm-ghpf-9vrm`, `BIT-pillow-2026-112402`, `CVE-2026-112402`, `PYSEC-2026-4331` · PyPI `pillow`: affected `<13.0.0`, fixed in `13.0.0` · CVSS 8.7 High · Not analysed yet · Published 21 Oct 2026 · Tags: Memory corruption
- [Pillow: P;2L and P;4L decoders may read 1 to 3 bytes past the passed buffer size](https://agentprime.io/advisories/GHSA-4558-3h8r-v8xp.md)
  `GHSA-4558-3h8r-v8xp`, `BIT-pillow-2026-112394`, `CVE-2026-112394`, `PYSEC-2026-4327` · PyPI `pillow`: affected `<13.0.0`, fixed in `13.0.0` · CVSS 6.3 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: CWE-126
- [Pillow: Argument Injection in Ghostscript call, potentially leading into RCE](https://agentprime.io/advisories/GHSA-w889-685w-c8fh.md)
  `GHSA-w889-685w-c8fh`, `BIT-pillow-2026-112900`, `CVE-2026-112900` · PyPI `pillow`: affected `>=2.6.0, <13.0.0`, fixed in `13.0.0` · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 21 Oct 2026 · Tags: Command injection
- [pypdf: Unvalidated JPEG image data loading](https://agentprime.io/advisories/GHSA-5hx5-vpf9-5wcv.md)
  `GHSA-5hx5-vpf9-5wcv`, `CVE-2026-113786` · PyPI `pypdf`: affected `<6.21.1`, fixed in `6.21.1` · CVSS 2.3 Low · Not analysed yet · Published 21 Oct 2026 · Tags: CWE-20, CWE-183
- [djust: Arbitrary absolute-path file read in the find_handlers_for_template MCP tool](https://agentprime.io/advisories/GHSA-r57g-mc79-8hj2.md)
  `GHSA-r57g-mc79-8hj2`, `CVE-2026-113731` · PyPI `djust`: affected `>=0.9.0, <1.0.10 || >=1.1.0, <1.1.7 || >=1.2.0.dev0, <1.2.4 || >=1.3.0.dev0, <1.3.0rc8`, fixed in `1.0.10`, `1.1.7`, `1.2.4`, `1.3.0rc8` · CVSS 3.3 Low · Not analysed yet · Published 21 Oct 2026 · Tags: Path traversal
- [pypdf: Possible infinite loop in PdfWriter.find_outline_item](https://agentprime.io/advisories/GHSA-qfv9-64jg-mh7p.md)
  `GHSA-qfv9-64jg-mh7p`, `CVE-2026-113792` · PyPI `pypdf`: affected `<6.20.1`, fixed in `6.20.1` · CVSS 6.0 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Denial of service
- [pypdf: Possible infinite loop when removing tree items](https://agentprime.io/advisories/GHSA-9mx8-4j7g-633p.md)
  `GHSA-9mx8-4j7g-633p`, `CVE-2026-113793` · PyPI `pypdf`: affected `<6.20.1`, fixed in `6.20.1` · CVSS 6.0 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Denial of service
- [pypdf: Possible infinite loop when hitting EOF in standard xref table](https://agentprime.io/advisories/GHSA-39mj-jf6j-2qj3.md)
  `GHSA-39mj-jf6j-2qj3`, `CVE-2026-113794` · PyPI `pypdf`: affected `<6.20.0`, fixed in `6.20.0` · CVSS 6.0 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Denial of service
- [virtualenv bash activate runs commands from an environment name with a backslash before $](https://agentprime.io/advisories/GHSA-vxj4-q4g9-crj7.md)
  `GHSA-vxj4-q4g9-crj7`, `BIT-virtualenv-2026-113725`, `CVE-2026-113725` · PyPI `virtualenv`: affected `<21.14.7`, fixed in `21.14.7` · CVSS 7.8 High · Not analysed yet · Published 21 Oct 2026 · Tags: Command injection, CWE-116
- [pypdf: Possible large memory usage for streams with multiple filters](https://agentprime.io/advisories/GHSA-7mh2-4gg2-979f.md)
  `GHSA-7mh2-4gg2-979f`, `CVE-2026-113795` · PyPI `pypdf`: affected `<6.20.0`, fixed in `6.20.0` · CVSS 6.0 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Denial of service
- [virtualenv activate runs commands from the environment name in zsh with PROMPT_SUBST](https://agentprime.io/advisories/GHSA-5vjq-rrrf-7h2q.md)
  `GHSA-5vjq-rrrf-7h2q`, `BIT-virtualenv-2026-113726`, `CVE-2026-113726` · PyPI `virtualenv`: affected `<21.14.4`, fixed in `21.14.4` · CVSS 7.8 High · Not analysed yet · Published 21 Oct 2026 · Tags: Command injection, CWE-116
- [virtualenv activate.fish runs commands from a path or prompt with a backslash before a quote](https://agentprime.io/advisories/GHSA-c947-3pg5-gm8q.md)
  `GHSA-c947-3pg5-gm8q`, `BIT-virtualenv-2026-113732`, `CVE-2026-113732` · PyPI `virtualenv`: affected `<21.14.2`, fixed in `21.14.2` · CVSS 7.8 High · Not analysed yet · Published 21 Oct 2026 · Tags: Command injection, CWE-116
- [virtualenv activation scripts run code from a path that contains a placeholder name](https://agentprime.io/advisories/GHSA-8rjx-v5ww-45pp.md)
  `GHSA-8rjx-v5ww-45pp`, `BIT-virtualenv-2026-113776`, `CVE-2026-113776` · PyPI `virtualenv`: affected `>=20.26.6, <21.14.2`, fixed in `21.14.2` · CVSS 7.8 High · Not analysed yet · Published 21 Oct 2026 · Tags: Command injection, Code injection
- [Pydantic AI Harness tool-call limit bypass in nested CodeMode calls](https://agentprime.io/advisories/GHSA-3589-pxp7-3gj8.md)
  `GHSA-3589-pxp7-3gj8`, `CVE-2026-114386` · PyPI `pydantic-ai-harness`: affected `<0.59.0`, fixed in `0.59.0` · CVSS 6.3 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Denial of service
- [Duplicate Advisory: uv vulnerable to arbitrary file deletion through RECORD entries](https://agentprime.io/advisories/GHSA-m3wx-qqmx-qxvf.md)
  `GHSA-m3wx-qqmx-qxvf` · PyPI `uv`: affected `*`, no fixed version yet · CVSS 5.3 Medium · Withdrawn · Not analysed yet · Published 21 Oct 2026 · Tags: Path traversal
- [Duplicate Advisory: vLLM: Request-controlled mm_processor_kwargs.code_revision allows remote code execution](https://agentprime.io/advisories/GHSA-f623-hjm8-5wg5.md)
  `GHSA-f623-hjm8-5wg5` · PyPI `vllm`: affected `>=0.7.3, <0.31.0`, fixed in `0.31.0` · CVSS 8.1 High · Withdrawn · Not analysed yet · Published 21 Oct 2026 · Tags: Code injection
- [Duplicate Advisory: vLLM 0.7.3 before 0.31.0 DoS via Unvalidated mm_processor_kwargs](https://agentprime.io/advisories/GHSA-3cgq-c484-rx5j.md)
  `GHSA-3cgq-c484-rx5j` · PyPI `vllm`: affected `>=0.7.3`, no fixed version yet · CVSS 7.5 High · Withdrawn · Not analysed yet · Published 21 Oct 2026 · Tags: Denial of service
- [Duplicate Advisory: vLLM vulnerable to remote denial of service through forged multimodal UUID cache desynchronization](https://agentprime.io/advisories/GHSA-hfwf-hgvp-4rr8.md)
  `GHSA-hfwf-hgvp-4rr8` · PyPI `vllm`: affected `*`, no fixed version yet · CVSS 7.5 High · Withdrawn · Not analysed yet · Published 21 Oct 2026 · Tags: CWE-345
- [vLLM before 0.31.0 contains a cache aliasing vulnerability that allows authenticated attackers to collide shared cache keys by supplying caller-controlled values such as EXIF ImageID or cache_salt....](https://agentprime.io/advisories/GHSA-rh6f-3x46-j33q.md)
  `GHSA-rh6f-3x46-j33q`, `CVE-2026-114054`, `PYSEC-2026-4362` · PyPI `vllm`: affected `<0.31.0`, fixed in `0.31.0` · CVSS 7.1 High · Not analysed yet · Published 21 Oct 2026 · Tags: Broken access control
- [vLLM after 0.24.0 and before 0.31.0 contains a memory exhaustion vulnerability in MOSS-Audio model serving that caches a processor for every distinct request-controlled mm_processor_kwargs value in...](https://agentprime.io/advisories/GHSA-823j-m4cj-hmjf.md)
  `GHSA-823j-m4cj-hmjf`, `CVE-2026-114052`, `PYSEC-2026-4361` · PyPI `vllm`: affected `>=0.24.0, <0.31.0`, fixed in `0.31.0` · CVSS 8.7 High · Not analysed yet · Published 21 Oct 2026 · Tags: Denial of service
- [certifi bundles emSign root CAs with compromised intermediate CA keys](https://agentprime.io/advisories/GHSA-6q48-6c7w-9gw2.md)
  `GHSA-6q48-6c7w-9gw2`, `PYSEC-2026-4320` · PyPI `certifi`: affected `>=2019.03.09, <2026.10.18`, fixed in `2026.10.18` · CVSS 4.0, no score published · Not analysed yet · Published 20 Oct 2026
- [Pillow: Out-of-bounds access in \_imagingmorph on a zero-width image](https://agentprime.io/advisories/GHSA-58r4-6rv3-gfh8.md)
  `GHSA-58r4-6rv3-gfh8`, `BIT-pillow-2026-112397`, `CVE-2026-112397`, `PYSEC-2026-4329` · PyPI `pillow`: affected `<13.0.0`, fixed in `13.0.0` · CVSS 8.7 High · Not analysed yet · Published 20 Oct 2026 · Tags: Memory corruption
- [Pillow: GIF seek keeps rejected size after DecompressionBombError, allowing DoS](https://agentprime.io/advisories/GHSA-65qm-jvmh-6pqg.md)
  `GHSA-65qm-jvmh-6pqg`, `BIT-pillow-2026-112400`, `CVE-2026-112400` · PyPI `pillow`: affected `>=9.2.0, <13.0.0`, fixed in `13.0.0` · CVSS 8.7 High · Not analysed yet · Published 20 Oct 2026 · Tags: Denial of service
- [Pillow: EPS load(scale) lets Ghostscript render past the decompression bomb limit](https://agentprime.io/advisories/GHSA-vx6w-vv9f-6gvg.md)
  `GHSA-vx6w-vv9f-6gvg`, `CVE-2026-112899` · PyPI `pillow`: affected `>=2.3.0, <13.0.0`, fixed in `13.0.0` · CVSS 6.3 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Denial of service
- [Pillow: TiffDecode returns uninitialized memory as pixels for short JPEG strips](https://agentprime.io/advisories/GHSA-q45j-58j2-45rg.md)
  `GHSA-q45j-58j2-45rg`, `BIT-pillow-2026-112897`, `CVE-2026-112897` · PyPI `pillow`: affected `>=5.3.0, <13.0.0`, fixed in `13.0.0` · CVSS 8.7 High · Not analysed yet · Published 20 Oct 2026 · Tags: Memory corruption
- [Pillow: TIFF encoder ColorMap plane-size mismatch causes a heap out-of-bounds read](https://agentprime.io/advisories/GHSA-pchr-8j38-3x4p.md)
  `GHSA-pchr-8j38-3x4p`, `BIT-pillow-2026-112896`, `CVE-2026-112896`, `PYSEC-2026-4334` · PyPI `pillow`: affected `<13.0.0`, fixed in `13.0.0` · CVSS 8.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: Memory corruption
- [Pillow: Unbounded recursion parsing a PDF page tree or trailer chain (incomplete fix for CVE-2026-42310)](https://agentprime.io/advisories/GHSA-p4wg-p73j-c528.md)
  `GHSA-p4wg-p73j-c528`, `BIT-pillow-2026-112895`, `CVE-2026-112895` · PyPI `pillow`: affected `>=5.1.0, <13.0.0`, fixed in `13.0.0` · CVSS 8.7 High · Not analysed yet · Published 20 Oct 2026 · Tags: Denial of service
- [Pillow tiled-TIFF decoder reads past tile buffer in copy4 (Unpack.c:1290)](https://agentprime.io/advisories/GHSA-462x-pgg6-55fp.md)
  `GHSA-462x-pgg6-55fp`, `BIT-pillow-2026-112395`, `CVE-2026-112395` · PyPI `pillow`: affected `>=8.2.0, <13.0.0`, fixed in `13.0.0` · CVSS 6.5 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Memory corruption
- [Pillow: OOB read in TiffDecode.c tile and RGBA paths leaks heap memory into pixels](https://agentprime.io/advisories/GHSA-c6hw-5grf-ff96.md)
  `GHSA-c6hw-5grf-ff96`, `BIT-pillow-2026-112404`, `CVE-2026-112404` · PyPI `pillow`: affected `>=8.1.0, <13.0.0`, fixed in `13.0.0` · CVSS 8.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: Memory corruption, CWE-126
- [Pillow: Heap buffer overflow in ImagingJpegDecode](https://agentprime.io/advisories/GHSA-8g5g-8vmr-9782.md)
  `GHSA-8g5g-8vmr-9782`, `BIT-pillow-2026-112403`, `CVE-2026-112403`, `PYSEC-2026-4332` · PyPI `pillow`: affected `<13.0.0`, fixed in `13.0.0` · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 20 Oct 2026 · Tags: Memory corruption
- [AIOHTTP: Absolute-form request targets can spoof Request.scheme](https://agentprime.io/advisories/GHSA-f9xw-jh8m-3mwq.md)
  `GHSA-f9xw-jh8m-3mwq`, `CVE-2026-111748` · PyPI `aiohttp`: affected `<3.14.4`, fixed in `3.14.4` · CVSS 6.3 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: CWE-807
- [AIOHTTP: Cookie from subdomain can remove Host-Only Scope from existing cookies](https://agentprime.io/advisories/GHSA-gx76-c99x-2c96.md)
  `GHSA-gx76-c99x-2c96`, `CVE-2026-111749` · PyPI `aiohttp`: affected `<3.14.4`, fixed in `3.14.4` · CVSS 2.3 Low · Not analysed yet · Published 20 Oct 2026 · Tags: CWE-565
- [AIOHTTP: Connector pool exhaustion via Max-Age overflow](https://agentprime.io/advisories/GHSA-6cjc-53gc-5rqm.md)
  `GHSA-6cjc-53gc-5rqm`, `CVE-2026-111065` · PyPI `aiohttp`: affected `<3.14.4`, fixed in `3.14.4` · CVSS 6.9 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: Denial of service
- [AIOHTTP: Pure-Python parser request smuggling](https://agentprime.io/advisories/GHSA-pqxq-w44r-73xw.md)
  `GHSA-pqxq-w44r-73xw`, `CVE-2026-111750` · PyPI `aiohttp`: affected `<3.14.4`, fixed in `3.14.4` · CVSS 6.3 Medium · Not analysed yet · Published 20 Oct 2026 · Tags: HTTP request smuggling
- [AIOHTTP: File descriptor exhaustion in multipart requests](https://agentprime.io/advisories/GHSA-9xw5-w5jj-pvcg.md)
  `GHSA-9xw5-w5jj-pvcg`, `CVE-2026-111066` · PyPI `aiohttp`: affected `>=2.0.0, <3.14.4`, fixed in `3.14.4` · CVSS 8.2 High · Not analysed yet · Published 20 Oct 2026 · Tags: Denial of service
- [uv's bundled CA store trusts an emSign root whose intermediate CA keys are compromised](https://agentprime.io/advisories/GHSA-hq85-5cpj-mr62.md)
  `GHSA-hq85-5cpj-mr62`, `PYSEC-2026-4321` · PyPI `uv`: affected `<0.13.4`, fixed in `0.13.4` · CVSS 4.0, no score published · Not analysed yet · Published 20 Oct 2026 · Tags: Weak cryptography or TLS
- [MLflow FileStore trace IDs allow path traversal and arbitrary file writes](https://agentprime.io/advisories/GHSA-wqmh-qccw-pqwf.md)
  `GHSA-wqmh-qccw-pqwf`, `BIT-mlflow-2026-53995`, `CVE-2026-53995` · PyPI `mlflow`: affected `<3.17.2`, fixed in `3.17.2` · CVSS 8.8 High · Not analysed yet · Published 20 Oct 2026 · Tags: Path traversal
- [aiohttp server lacks an initial request/header timeout](https://agentprime.io/advisories/GHSA-5wr8-gcqf-gqf3.md)
  `GHSA-5wr8-gcqf-gqf3`, `CVE-2026-111064` · PyPI `aiohttp`: affected `<3.14.4`, fixed in `3.14.4` · CVSS 8.2 High · Not analysed yet · Published 19 Oct 2026 · Tags: Denial of service
- [AIOHTTP: Secure attribute not enforced for shared cookie](https://agentprime.io/advisories/GHSA-494j-54xm-rwp3.md)
  `GHSA-494j-54xm-rwp3`, `CVE-2026-111063` · PyPI `aiohttp`: affected `<3.14.4`, fixed in `3.14.4` · CVSS 6.3 Medium · Not analysed yet · Published 19 Oct 2026 · Tags: Weak cryptography or TLS, CWE-1004
- [aiohttp: Multiple instances of excessive or unbounded memory/CPU use](https://agentprime.io/advisories/GHSA-2g87-pp6c-29x5.md)
  `GHSA-2g87-pp6c-29x5` · PyPI `aiohttp`: affected `<3.14.4`, fixed in `3.14.4` · CVSS 4.0, no score published · Not analysed yet · Published 19 Oct 2026 · Tags: Denial of service
- [Mercury: Stored / DOM Cross-Site Scripting (XSS): mr.Markdown renders untrusted content as raw, unsanitized HTML](https://agentprime.io/advisories/GHSA-2658-85cv-9wwq.md)
  `GHSA-2658-85cv-9wwq`, `CVE-2026-111059` · PyPI `mercury`: affected `>=3.0.0, <3.2.11`, fixed in `3.2.11` · CVSS 6.1 Medium · Not analysed yet · Published 19 Oct 2026 · Tags: Cross-site scripting (XSS), CWE-116
- [Mercury: Unauthenticated Remote Code Execution in /api/terminals - access control bypass](https://agentprime.io/advisories/GHSA-f8c7-rwf9-fmgm.md)
  `GHSA-f8c7-rwf9-fmgm`, `CVE-2026-111057` · PyPI `mercury`: affected `>=3.0.0, <3.2.4`, fixed in `3.2.4` · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Oct 2026 · Tags: Broken access control, CWE-185
- [Graphify Fortran extractor: incomplete cpp #include hardening allows arbitrary host-file read/exfiltration when indexing an untrusted repo](https://agentprime.io/advisories/GHSA-pcc4-rvhr-2pr8.md)
  `GHSA-pcc4-rvhr-2pr8` · PyPI `graphifyy`: affected `>=0.7.2, <0.9.70`, fixed in `0.9.70` · CVSS 4.0, no score published · Not analysed yet · Published 19 Oct 2026 · Tags: Path traversal
- [Mercury: Unauthenticated Remote Code Execution via /api/kernels](https://agentprime.io/advisories/GHSA-rv4m-xm3f-3ccq.md)
  `GHSA-rv4m-xm3f-3ccq`, `CVE-2026-111058` · PyPI `mercury`: affected `<3.2.6`, fixed in `3.2.6` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 19 Oct 2026 · Tags: Broken access control
- [LoopX serve-status permissive CORS policy exposes control-plane state and private Markdown files](https://agentprime.io/advisories/GHSA-vx2m-gpq4-8j5q.md)
  `GHSA-vx2m-gpq4-8j5q`, `CVE-2026-108372` · PyPI `loopx`: affected `>=0.0.1, <0.4.5`, fixed in `0.4.5` · CVSS 7.1 High · Not analysed yet · Published 19 Oct 2026 · Tags: CWE-346, CWE-942
- [LMCache: Remote code execution via unsafe deserialization in multiprocess mode transport](https://agentprime.io/advisories/GHSA-w5f2-9q9c-ff4h.md)
  `GHSA-w5f2-9q9c-ff4h`, `CVE-2026-105192` · PyPI `lmcache`: affected `>=0.3.9, <0.5.6`, fixed in `0.5.6` · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Oct 2026 · Tags: Authentication bypass, Insecure deserialization
- [Claude Agent SDK: Argument Injection via resume Option Allows Arbitrary Command Execution](https://agentprime.io/advisories/GHSA-h4mw-j7qp-8mwm.md)
  `GHSA-h4mw-j7qp-8mwm`, `CVE-2026-96620` · PyPI `claude-agent-sdk`: affected `<0.2.121`, fixed in `0.2.121` · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 16 Oct 2026 · Tags: Command injection, CWE-20
- [ClickMigrate has Path Traversal in "revision -m" argument](https://agentprime.io/advisories/GHSA-vgf9-9mxx-hq54.md)
  `GHSA-vgf9-9mxx-hq54`, `CVE-2026-68549` · PyPI `clickmigrate`: affected `<1.0.3`, fixed in `1.0.3` · CVSS 3.3 Low · Not analysed yet · Published 16 Oct 2026 · Tags: Path traversal
- [Pipecat: Public exposure of Pipecat’s development runner can allow unauthenticated bot session creation](https://agentprime.io/advisories/GHSA-hqm2-cfx2-2vgh.md)
  `GHSA-hqm2-cfx2-2vgh`, `CVE-2026-102682` · PyPI `pipecat-ai`: affected `>=0.0.98, <1.6.0`, fixed in `1.6.0` · CVSS 5.6 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Denial of service, Broken access control, CWE-345
- [JupyterLab: Command link trust prompt in JupyterLab can trust a document other than the one clicked](https://agentprime.io/advisories/GHSA-jwrc-gm9j-263p.md)
  `GHSA-jwrc-gm9j-263p`, `CVE-2026-102832` · PyPI `jupyterlab` and 2 more: affected `>=4.5.7, <4.5.11 || >=4.6.0, <4.6.4`, fixed in `4.5.11`, `4.6.4` · CVSS 4.2 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Race condition, Broken access control
- [tinytag: Infinite loop when parsing certain M4A files containing invalid atoms](https://agentprime.io/advisories/GHSA-24cc-9352-h2pg.md)
  `GHSA-24cc-9352-h2pg`, `CVE-2026-104266` · PyPI `tinytag`: affected `>=2.0.0, <2.3.0`, fixed in `2.3.0` · CVSS 6.5 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Denial of service
- [copyparty FTP: upload outside defined volumes (limited path traversal)](https://agentprime.io/advisories/GHSA-phv8-wgjp-g4p9.md)
  `GHSA-phv8-wgjp-g4p9`, `CVE-2026-104102` · PyPI `copyparty`: affected `<1.20.19`, fixed in `1.20.19` · CVSS 5.3 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Path traversal
- [unstructured: Stored XSS via unescaped HTML generation](https://agentprime.io/advisories/GHSA-v5mq-3xhg-98m9.md)
  `GHSA-v5mq-3xhg-98m9`, `CVE-2026-104250` · PyPI `unstructured`: affected `<0.24.1`, fixed in `0.24.1` · CVSS 6.1 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Cross-site scripting (XSS), CWE-116
- [MCP Python SDK: Unbounded Session Accumulation in StreamableHTTP Transport Enables Resource Exhaustion](https://agentprime.io/advisories/GHSA-84m7-p3x7-pcfv.md)
  `GHSA-84m7-p3x7-pcfv`, `CVE-2026-59951` · PyPI `mcp`: affected `>=1.8.0, <1.30.0 || >=2.0.0, <2.2.0`, fixed in `1.30.0`, `2.2.0` · CVSS 6.9 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Denial of service
- [borg extract might modify out-of-tree files when extracting maliciously crafted archives](https://agentprime.io/advisories/GHSA-gfp8-w835-v44j.md)
  `GHSA-gfp8-w835-v44j`, `CVE-2026-62268` · PyPI `borgbackup`: affected `<1.4.5 || >=2.0.0b1, <2.0.0b22`, fixed in `1.4.5`, `2.0.0b22` · CVSS 5.3 Medium · Not analysed yet · Published 15 Oct 2026 · Tags: Path traversal

Newest: <https://agentprime.io/advisories/ecosystem/pypi.md>
Older: <https://agentprime.io/advisories/ecosystem/pypi.md?cursor=WyIyMDI2LTEwLTE1VDIwOjA5OjIzLjAwMDAwMFoiLCJHSFNBLWdmcDgtdzgzNS12NDRqIl0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?ecosystem=PyPI&cursor=WyIyMDI2LTEwLTIxVDIwOjQyOjExLjAwMDAwMFoiLCJHSFNBLTc0cjItN2ZmOS1tamoyIl0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/ecosystem/pypi/?cursor=WyIyMDI2LTEwLTIxVDIwOjQyOjExLjAwMDAwMFoiLCJHSFNBLTc0cjItN2ZmOS1tamoyIl0>. Everything for agents: <https://agentprime.io/llms.txt>.