agentprime Advisories: PyPI

Banks: Unsafe importlib.import_module of attacker-controlled Tool.import_path in CompletionExtension allows RCE

Thu, 05 Nov 2026 17:51:02 GMT

banks <2.4.3, fixed in 2.4.3. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Stanza: RCE via pickle deserialization in the lemmatizer

Tue, 03 Nov 2026 20:29:16 GMT

stanza >=1.14.0, <1.15.0, fixed in 1.15.0. CVSS 7.8 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

pypdf has possible infinite loop when hitting EOF in standard xref table during trailer search

Fri, 30 Oct 2026 23:13:16 GMT

pypdf <6.21.4, fixed in 6.21.4. CVSS 7.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

pypdf has possible large memory usage when parsing page tree

Fri, 30 Oct 2026 23:13:01 GMT

pypdf <6.21.4, fixed in 6.21.4. CVSS 7.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

pypdf has possible infinite loop when cloning dictionaries

Fri, 30 Oct 2026 23:12:20 GMT

pypdf <6.21.4, fixed in 6.21.4. CVSS 7.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Authlib RFC 7592 examples omit registration-access-token client binding

Fri, 30 Oct 2026 23:09:04 GMT

authlib >=0.15, <1.9.1, fixed in 1.9.1. CVSS 8.8 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

pypdf has possible long runtimes when retrieving page labels

Fri, 30 Oct 2026 23:08:55 GMT

pypdf <6.21.3, fixed in 6.21.3. CVSS 7.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

pypdf has possible large memory usage for exceptions in strict mode

Fri, 30 Oct 2026 23:08:39 GMT

pypdf <6.21.3, fixed in 6.21.3. CVSS 7.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

pypdf has possible long runtimes/large memory usage for encrypted PDF files

Fri, 30 Oct 2026 23:08:24 GMT

pypdf <6.21.3, fixed in 6.21.3. CVSS 7.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

pypdf has possible large memory usage when parsing cross-reference streams

Fri, 30 Oct 2026 23:07:28 GMT

pypdf <6.21.3, fixed in 6.21.3. CVSS 7.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

pyasn1 has quadratic CPU consumption in constructed BIT STRING decoding

Fri, 30 Oct 2026 23:07:04 GMT

pyasn1 <0.6.5, fixed in 0.6.5. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

pyasn1 has quadratic-complexity denial of service in binary REAL decoding

Fri, 30 Oct 2026 23:06:46 GMT

pyasn1 <0.6.5, fixed in 0.6.5. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

pyasn1 has quadratic-time denial of service in constructed string and indefinite-length ANY decoding

Fri, 30 Oct 2026 23:03:51 GMT

pyasn1 <0.6.5, fixed in 0.6.5. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

pyasn1 has quadratic CPU use in schemaless BER/CER/DER container decoding

Fri, 30 Oct 2026 23:03:37 GMT

pyasn1 >=0.3.3, <0.6.5, fixed in 0.6.5. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

GraphQL-core has denial of service via memory leak in aborted validations

Fri, 30 Oct 2026 22:58:31 GMT

graphql-core >=3.3.0a3, <3.3.1, fixed in 3.3.1. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

OAuthLib: Token grants can use attacker-supplied client_id for authorization after authenticating a different client

Fri, 30 Oct 2026 22:58:16 GMT

oauthlib <4.0.0, fixed in 4.0.0. CVSS 8.4 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

OpenWISP Controller CA CRL REST API does not scope requests to managed organizations

Fri, 30 Oct 2026 22:58:10 GMT

openwisp-controller >=1.0.0, <1.3.2, fixed in 1.3.2. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

joserfc: Compact JWS size guard allocates attacker-controlled segments before rejection

Fri, 30 Oct 2026 14:54:25 GMT

joserfc <1.7.6, fixed in 1.7.6. CVSS 6.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

joserfc: Unbounded JWE General JSON `recipients` Array Leads to CPU Exhaustion (DoS) via Repeated RSA Private-Key Decryption

Fri, 30 Oct 2026 14:54:20 GMT

joserfc <1.7.5, fixed in 1.7.5. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Twisted: Unauthenticated Remote Denial of Service in the Twisted HTTP/2 Server via Rapid Stream Reset

Thu, 29 Oct 2026 16:41:06 GMT

twisted <26.10.0rc1, fixed in 26.10.0rc1. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

PraisonAI vulnerable to Remote Code Execution via Broken AST Sandbox

Thu, 29 Oct 2026 16:34:26 GMT

praisonai <4.6.78, fixed in 4.6.78. CVSS 7.0 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Tornado: Event loop blocking and excess memory use from chunked bodies with many small chunks

Wed, 28 Oct 2026 22:43:50 GMT

tornado <6.6, fixed in 6.6. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Tornado: Open redirect in RedirectHandler via protocol-relative URLs

Wed, 28 Oct 2026 22:43:45 GMT

tornado <6.6, fixed in 6.6. CVSS 2.1 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Tornado: Quadratic CPU usage when parsing HTTP headers with line folding

Wed, 28 Oct 2026 22:43:41 GMT

tornado <6.6, fixed in 6.6. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Electrum: Malicious server can replace a just-broadcast tx and try to trick user into RBF-ing it

Wed, 28 Oct 2026 21:23:44 GMT

electrum <4.8.3, fixed in 4.8.3. CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Mem0: Cross-tenant conversation leak via unescaped delimiter collision in session-scope key (_build_session_scope)

Wed, 28 Oct 2026 21:17:08 GMT

mem0ai <3.1.6, fixed in 3.1.6. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Python Social Auth: OpenID Connect nonce is not bound to the browser session, so a stolen authorization code logs the attacker in as the victim

Wed, 28 Oct 2026 21:16:51 GMT

social-auth-core <6.2.0, fixed in 6.2.0. CVSS 6.8 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

ONNX: Out-of-bounds read in ConvTranspose shape inference via undersized weight rank

Wed, 28 Oct 2026 21:16:42 GMT

onnx >=1.2.1, <1.22.0, fixed in 1.22.0. CVSS 6.2 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

ONNX: Denial of service via unchecked expansion of packed sub-byte tensors in ONNX Python APIs

Wed, 28 Oct 2026 21:16:37 GMT

onnx <1.22.0, fixed in 1.22.0. CVSS 6.2 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

ONNX: Null Pointer Dereference in ScanInferenceFunction Due to Missing Required Attribute

Wed, 28 Oct 2026 21:16:30 GMT

onnx >=1.4.0, <1.22.0, fixed in 1.22.0. CVSS 6.2 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

ONNX: Out-of-Bounds Read in RNN/GRU/LSTM Shape Inference (Old Opsets, Missing Rank Check)

Wed, 28 Oct 2026 21:16:24 GMT

onnx <1.22.0, fixed in 1.22.0. CVSS 6.2 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

vLLM: Permissive default CORS origins allow cross-origin requests to the vLLM HTTP server

Wed, 28 Oct 2026 21:15:49 GMT

vllm <0.32.0, fixed in 0.32.0. CVSS 3.4 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

vLLM: Phi-4 multimodal audio encoder materializes and retains full attention matrices: a single max-length audio OOM-crashes the vLLM engine

Wed, 28 Oct 2026 21:15:41 GMT

vllm <0.32.0, fixed in 0.32.0. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

vLLM DeepSeek-OCR image processing vulnerable to denial of service

Wed, 28 Oct 2026 21:15:35 GMT

vllm >=0.11.1, <0.32.0, fixed in 0.32.0. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

vLLM: Untrusted EPS inputs can trigger denial of service or Ghostscript RCE

Wed, 28 Oct 2026 21:15:29 GMT

vllm <0.32.0, fixed in 0.32.0. CVSS 8.1 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

vLLM: Public multimodal SHM handle forgery reaches worker-side `pickle.loads()` with insecure serialization disabled

Wed, 28 Oct 2026 21:15:15 GMT

vllm <0.32.0, fixed in 0.32.0. CVSS 7.5 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

vLLM: Out-of-vocabulary prompt token id passes input validation and triggers a CUDA device-side assert (engine crash / DoS)

Wed, 28 Oct 2026 21:15:08 GMT

vllm <0.32.0, fixed in 0.32.0. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

vLLM: Responses API bypasses trust_request_chat_template for chat_template_kwargs

Wed, 28 Oct 2026 21:14:59 GMT

vllm >=0.16.0, <0.32.0, fixed in 0.32.0. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

vLLM: DoS via unbounded chat_template Jinja2 rendering exhausts the renderer thread pool

Wed, 28 Oct 2026 21:14:52 GMT

vllm >=0.19.0, <0.32.0, fixed in 0.32.0. CVSS 6.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

LangGraph CLI prints the registry push token in `langgraph deploy --verbose` output

Wed, 28 Oct 2026 21:13:18 GMT

langgraph-cli >=0.4.15, <0.4.32, fixed in 0.4.32. CVSS 4.1 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

Autobahn Python: permessage-brotli inflates a whole frame before maxMessagePayloadSize is checked (incomplete fix of GHSA-hxp9-w8x3-p566)

Wed, 28 Oct 2026 21:10:17 GMT

autobahn >=26.7.1, <26.10.1, fixed in 26.10.1. CVSS 5.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

LangGraph JavaScript custom authentication may permit cross-user Store access

Wed, 28 Oct 2026 21:09:42 GMT

langgraph-api >=0.1.2, <0.15.0, fixed in 0.15.0. CVSS 8.6 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

filelock: SoftReadWriteLock follows a lock tree swapped in after its first acquire and writes lock records into directories of the user running the lock

Wed, 28 Oct 2026 21:09:09 GMT

filelock >=4.1.0, <4.2.1, fixed in 4.2.1. CVSS 3.3 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

filelock: StrictSoftFileLock creates its claim directories without the lock mode, so another local user with a write bit on them can end a live hold

Wed, 28 Oct 2026 21:09:04 GMT

filelock >=3.30.0, <4.2.1, fixed in 4.2.1. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

filelock: StrictSoftFileLock and SoftReadWriteLock adopt a protocol directory another user created first, losing mutual exclusion

Wed, 28 Oct 2026 21:08:59 GMT

filelock >=3.30.0, <4.2.1, fixed in 4.2.1. CVSS 6.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

filelock: WindowsFileLock ignores mode: a 0o600 lock file and the ReadWriteLock database inherit the directory ACL

Wed, 28 Oct 2026 21:08:55 GMT

filelock >=3.10.0, <4.2.1, fixed in 4.2.1. CVSS 5.3 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

filelock ReadWriteLock: a crafted lock database makes every acquire stall or hang regardless of timeout

Wed, 28 Oct 2026 21:08:49 GMT

filelock >=3.20.4, <4.2.1, fixed in 4.2.1. CVSS 5.5 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

filelock: SoftFileLock removes a live holder's marker when another user forges the PID in a writable marker

Wed, 28 Oct 2026 21:08:45 GMT

filelock >=3.22.0, <4.2.1, fixed in 4.2.1. CVSS 4.7 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

filelock: Symlink swap during SoftFileLock's writability check leaks whether a path exists and is writable by the lock taker

Wed, 28 Oct 2026 21:08:40 GMT

filelock >=3.32.6, <4.2.1, fixed in 4.2.1. CVSS 2.5 (Low). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

filelock: UnixFileLock truncates and chmods any regular file another user renames or hard-links onto the lock path

Wed, 28 Oct 2026 21:08:35 GMT

filelock <4.2.1, fixed in 4.2.1. CVSS 6.1 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.