Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource server

CVE-2026-116684

### Summary In affected versions, the SDK's server-side bearer authentication had no way to check that a token was issue

历史摘要 · 未重新核验 · GitHub Advisory

OpenTelemetry Python: Unbounded memory allocation in Jaeger baggage propagation

CVE-2026-116694

## Summary `JaegerPropagator.extract()` in `opentelemetry-propagator-jaeger` did not enforce limits when extracting inb

历史摘要 · 未重新核验 · GitHub Advisory

Model Context Protocol Python SDK: HTTP client transports followed cross-origin redirects carrying custom headers and bodies

CVE-2026-116685

### Summary In affected versions, the SDK's Streamable HTTP and SSE client transports followed HTTP redirects to any hos

历史摘要 · 未重新核验 · GitHub Advisory

Model Context Protocol Python SDK: Client fetched server-chosen $ref URLs while validating tool results against output schemas

CVE-2026-116686

### Summary In affected versions, when a connected MCP server declared an `outputSchema` for a tool, the SDK's client va

历史摘要 · 未重新核验 · GitHub Advisory

Authlib is a Python library which builds OAuth and OpenID Connect servers. From 0.15 until 1.9.1, the documented ClientConfigurationEndpoint.authenticate_client and ClientConfig...

CVE-2026-116672

Authlib is a Python library which builds OAuth and OpenID Connect servers. From 0.15 until 1.9.1, the documented ClientC

来源摘录 · NVD / GitHub Advisory

Hydra legacy target blacklist permits unsafe PyYAML loading

## Summary Hydra's legacy target blacklist omits PyYAML's unsafe loading surfaces. If an application passes attacker-co

历史摘要 · 未重新核验 · GitHub Advisory

Authlib accepts an empty HMAC key, allowing JWS/JWT signature forgery (HS256/HS384/HS512)

CVE-2026-114616

Reporter: Cavan Loughran, Celvex Group Inc. Summary Authlib's symmetric (oct) key handling accepts an empty key (empty

历史摘要 · 未重新核验 · GitHub Advisory

Electrum before 4.8.3 fails to verify signatures of wallet-owned inputs in unconfirmed mempool transactions, allowing malicious servers to replace a just-broadcast transaction w...

CVE-2026-117601

Electrum before 4.8.3 fails to verify signatures of wallet-owned inputs in unconfirmed mempool transactions, allowing ma

来源摘录 · NVD / GitHub Advisory

vLLM is an inference and serving engine for large language models. Prior to 0.32.0, vllm/tokenizers/hf.py computes max_token_id with an off-by-one upper bound, allowing a pre-to...

CVE-2026-115916

vLLM is an inference and serving engine for large language models. Prior to 0.32.0, vllm/tokenizers/hf.py computes max_t

来源摘录 · NVD / GitHub Advisory

vLLM is an inference and serving engine for large language models. Prior to 0.32.0, ImageMediaIO passes attacker-controlled image bytes to Pillow through Image.open(BytesIO(data...

CVE-2026-115915

vLLM is an inference and serving engine for large language models. Prior to 0.32.0, ImageMediaIO passes attacker-control

来源摘录 · NVD / GitHub Advisory

vLLM is an inference and serving engine for large language models. Prior to 0.32.0, the Phi-4 multimodal audio encoder in phi4mm_audio.py and phi4mm_utils.py uses eager attentio...

CVE-2026-115913

vLLM is an inference and serving engine for large language models. Prior to 0.32.0, the Phi-4 multimodal audio encoder i

来源摘录 · NVD / GitHub Advisory

vLLM is an inference and serving engine for large language models. Prior to 0.32.0, an authenticated caller can place forged shared-memory address and monotonic_id values in pub...

CVE-2026-115912

vLLM is an inference and serving engine for large language models. Prior to 0.32.0, an authenticated caller can place fo

来源摘录 · NVD / GitHub Advisory

filelock: ReadWriteLock on the hard-link route deletes any directory another user renames onto its .filelock-* link directory name

CVE-2026-112937

`ReadWriteLock` and `AsyncReadWriteLock` (the SQLite-backed reader/writer lock) remove their private `.filelock-*` link

历史摘要 · 未重新核验 · GitHub Advisory

filelock: ReadWriteLock on Windows acts on SQLite side files another local user places beside its database

CVE-2026-112913

On Windows, `ReadWriteLock` and `AsyncReadWriteLock` (the SQLite-backed reader/writer lock) connect SQLite to the lock d

历史摘要 · 未重新核验 · GitHub Advisory

filelock: On Windows an oplock on a soft lock's marker holds SoftFileLock.acquire() past its timeout and blocks the stale break

CVE-2026-112907

On Windows the soft locks (`SoftFileLock`, `MarkerSoftFileLock`, `SoftFileLease`, their async forms, and a `FileLock` th

历史摘要 · 未重新核验 · GitHub Advisory

virtualenv: Temporary app-data can leave dangling seed package links

CVE-2026-113713

## Summary The app-data seeder can leave an environment linked to temporary package files that virtualenv deletes when

历史摘要 · 未重新核验 · GitHub Advisory

virtualenv: Pip seeding with download omits wheel digest verification

CVE-2026-113717

## Summary The pip seeder acquires bundled wheels with download=False and lets pip access the index when --download is

历史摘要 · 未重新核验 · GitHub Advisory

virtualenv: Downloaded wheel selection and caching precede verification

CVE-2026-113714

## Summary Wheel downloads go directly into the reusable wheelhouse, while the verification target is selected from pip

历史摘要 · 未重新核验 · GitHub Advisory

virtualenv: Xonsh activation literals depend on the script decoding codec

CVE-2026-113718

## Summary Caller-supplied prompt text can become executable syntax in the xonsh activation script. An attacker must in

历史摘要 · 未重新核验 · GitHub Advisory

virtualenv: Seeded files retain permissions from an older cache

CVE-2026-113720

## Summary The app-data copy seeder uses shutil.copy, which preserves cached file modes independently of the current um

历史摘要 · 未重新核验 · GitHub Advisory