Skip to content
OpenAdvisories

Package · PyPI

aiograpi

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 6.5
    CVE-2026-47157

    aiograpi: Unsafe signup challenge path handling

    aiograpi is an asynchronous Instagram API for Python. aiograpi versions before 0.9.10 accepted server-supplied signup challenge paths and used them to build request URLs before validating that the paths were relative Instagram API paths. If an attacker can in…

    subzeroid aiograpi aiograpi PyPI
  • Low —
    GHSA-7mw3-79jq-xc7f

    aiograpi has dependency on vulnerable orjson 3.11.4 (CVE-2025-67221)

    ## Impact aiograpi 0.6.6 / 0.7.0 / 0.7.1 declared `orjson==3.11.6` (and later `==3.11.8`) in `requirements.txt` but `setup.py` carried a hard-coded duplicate `requirements = [...]` list that was never updated and still pinned `orjson==3.11.4`. When `setuptool…

    aiograpi PyPI