PyPI

12 results · Clear filters · Feed

• Critical 9.2
  CVE-2026-111497 Exploited Public exploit EPSS 83%

  Out-of-Bounds Write in Google Brotli Decoder

  A buffer overflow vulnerability in the Brotli decoder (c/dec/decode.c) in Google Brotli versions 1.0.3 through 1.2.0 on all platforms allows a remote unauthenticated attacker to corrupt adjacent decoder state memory, disclose sensitive memory contents, cause …

  Google Brotli firefox open-webui Debian Ubuntu Azure Linux Alpine Wolfi PyPI Go Hex
  Oct 22, 2026

  KEV Oct 27, 2026
• Critical 9.3
  CVE-2026-64849 Exploited Public exploit Scanner template EPSS 10%

  MLflow: Unauthenticated full-read SSRF in webhook delivery: _validate_webhook_url bypassed via unvalidated HTTP redirects (and DNS rebinding)

  MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Starting in 3.3.0 and prior to 3.15.0, the unauthenticated POST /api/2.0/mlflow/webhooks/{id}/test endpoint calls _validate_webhook_url() in mlflo…

  MLflow MLflow mlflow PyPI
  Aug 17, 2026

  KEV Aug 19, 2026
• Critical 9.3
  CVE-2026-42208 Exploited Public exploit Scanner template EPSS 89%

  LiteLLM: SQL injection in Proxy API key verification

  LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.81.16 to before version 1.83.7, a database query used during proxy API key checks mixed the caller-supplied key value into the query text instead of passing i…

  BerriAI litellm airflow-3 litellm Wolfi PyPI
  May 8, 2026

  KEV May 8, 2026
• Critical 9.3
  CVE-2026-39987 Exploited Public exploit Scanner template EPSS 100%

  marimo Affected by Pre-Auth Remote Code Execution via Terminal WebSocket Authentication Bypass

  marimo is a reactive Python notebook. Prior to 0.23.0, Marimo has a Pre-Auth RCE vulnerability. The terminal WebSocket endpoint /terminal/ws lacks authentication validation, allowing an unauthenticated attacker to obtain a full PTY shell and execute arbitrary…

  marimo-team marimo marimo PyPI
  Apr 9, 2026

  KEV Apr 23, 2026
• Critical 9.3
  CVE-2026-33017 Exploited Public exploit Scanner template EPSS 96%

  Langflow has Unauthenticated Remote Code Execution via Public Flow Build Endpoint

  Langflow is a tool for building and deploying AI-powered agents and workflows. In versions prior to 1.9.0, the POST /api/v1/build_public_tmp/{flow_id}/flow endpoint allows building public flows without requiring authentication. When the optional data paramete…

  langflow-ai langflow langflow PyPI
  Mar 20, 2026

  KEV Mar 25, 2026
• Critical 9.8
  CVE-2026-0770 Exploited Public exploit Scanner template EPSS 63%

  Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability

  Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Langflow. Authentication is not required to e…

  Langflow Langflow langflow PyPI
  Jan 23, 2026

  KEV Jul 21, 2026
• Critical 9.4
  CVE-2025-34291 Exploited Public exploit Scanner template EPSS 93%

  Langflow <= 1.6.9 CORS Misconfiguration to Token Hijack & RCE

  Langflow versions up to and including 1.6.9 contain a chained vulnerability that enables account takeover and remote code execution. An overly permissive CORS configuration (allow_origins='*' with allow_credentials=True) combined with a refresh token cookie c…

  Langflow Langflow langflow PyPI
  Dec 5, 2025

  KEV May 21, 2026
• Critical 9.4
  CVE-2025-62593 Exploited Public exploit Scanner template EPSS 60%

  Ray is vulnerable to RCE via Safari & Firefox Browsers through DNS Rebinding Attack

  Ray is an AI compute engine. Prior to version 2.52.0, developers working with Ray as a development tool can be exploited via a critical RCE vulnerability exploitable via Firefox and Safari. This vulnerability is due to an insufficient guard against browser-ba…

  ray-project ray airflow-3 ray Wolfi PyPI
  Nov 26, 2025

  KEV Aug 17, 2026
• Critical 9.8
  CVE-2025-3248 Exploited · Ransomware Public exploit Scanner template EPSS 100%

  Langflow < 1.3.0 Unauthenticated RCE via /api/v1/validate/code

  Langflow versions prior to 1.3.0 are susceptible to code injection in the /api/v1/validate/code endpoint. A remote and unauthenticated attacker can send crafted HTTP requests to execute arbitrary code.

  langflow-ai langflow langflow langflow-base PyPI
  Apr 7, 2025

  KEV May 5, 2025
• Critical 9.8
  CVE-2020-13927 Exploited Public exploit Scanner template EPSS 100%

  Authentication bypass in Apache Airflow

  The previous default setting for Airflow's Experimental API was to allow all API requests without authentication, but this poses security risks to users who miss this fact. From Airflow 1.10.11 the default has been changed to deny all requests by default and …

  apache-airflow PyPI
  Nov 10, 2020

  KEV Jan 18, 2022
• Critical 9.8
  CVE-2020-16846 Exploited Public exploit Scanner template EPSS 100%

  SaltStack Salt Command Injection in netapi ssh client

  An issue was discovered in SaltStack Salt through 3002. Sending crafted web requests to the Salt API, with the SSH client enabled, can result in shell injection.

  salt salt salt Ubuntu Alpine PyPI
  Nov 6, 2020

  KEV Nov 3, 2021
• Critical 9.8
  CVE-2020-11651 Exploited Public exploit EPSS 97%

  SaltStack Salt Unauthenticated Remote Code Execution

  An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class does not properly validate method calls. This allows a remote user to access some methods without authentication. These methods can be u…

  salt salt salt Ubuntu Alpine PyPI
  Apr 30, 2020

  KEV Nov 3, 2021