Skip to content
OpenAdvisories

Package · PyPI

everos

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.2
    CVE-2026-58499

    Path traversal in EverOS /api/v1/memory/add via unvalidated sender_id

    EverOS is a memory runtime for agents. Prior to 1.0.1, EverOS is vulnerable to path traversal in the POST /api/v1/memory/add ingestion endpoint because the per-message sender_id field was not validated as a path-safe identifier, unlike app_id and project_id. …

    EverMind-AI EverOS everos PyPI