virtualenv: Bash prompt values can change meaning under older compatibility modes
CVE-2026-113723
## Summary Caller-supplied prompt text can become executable syntax in the bash activation prompt. An attacker must inf
#pip
共收录 834 条相关情报。
← 返回所有主题virtualenv: Venv configuration readback can reinterpret path boundaries
CVE-2026-113715
## Summary The venv creator reads the standard library's generated pyvenv.cfg with splitlines() and merges all resultin
virtualenv: Seed replacement does not contain metadata deletion paths
CVE-2026-113719
## Summary The app-data seeder joins paths from existing distribution metadata to site-packages and deletes the resulti
MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in the scorer invoke, register, and GenAI evaluate endpoints
CVE-2026-115886
### Summary MLflow's tracking server exposes `POST /ajax-api/3.0/mlflow/scorer/invoke` with **no authentication**, and t
LangGraph: Namespace labels containing `.` reach other namespaces in Postgres and SQLite stores
CVE-2026-115883
### Summary The Postgres and SQLite stores save a namespace as its labels joined with `.`, so `("tenant", "bob")` and `
filelock: SoftFileLock evicts a fresh lock file whose watched age another local user's pre-dated file passed on through inode reuse
CVE-2026-112906
`SoftFileLock` and `MarkerSoftFileLock` evict an unparsable marker (the lock file at ``, whose presence says a process h
filelock: SoftFileLock stale-break restore follows a swapped-in symbolic link and hard-links a file of the user running the lock into the lock directory
CVE-2026-112914
When a soft-lock stale break finds that the marker (the lock file at ``) it renamed aside was a live one recreated by a
filelock ReadWriteLock: SQLite reopens the lock database by name, so a planted symlink or journal file makes the lock user's process overwrite or unlink its own files
CVE-2026-112940
`ReadWriteLock` and `AsyncReadWriteLock` (the SQLite-backed reader/writer lock) hand SQLite a name they do not control.
Pillow: Heap buffer overflow in FlashPix (FPX) JPEG decoding leads to code execution
CVE-2026-112398
### Credits **Researcher**: Alex Bouffard (mixbo@pebwalker.com) ### Summary A heap buffer overflow in Pillow's FlashP
Pillow: Arrow export leaks stale heap memory when PILLOW_ALIGNMENT > 1
CVE-2026-114501
### Summary When [`PILLOW_ALIGNMENT`](https://pillow.readthedocs.io/en/stable/reference/block_allocator.html#memory-poo
setuptools: Windows path escape via namespace_packages.txt during legacy wheel installation Description
### Summary On Windows, attacker-controlled content in a wheel's `.dist-info/namespace_packages.txt` can cause setuptoo
FastMCP: Post-transform component authorization is skipped on direct calls
## Maintainer assessment and remediation This report is accepted as a FastMCP authorization vulnerability. In supported
FastMCP MCP client wrappers construct M2M OAuth providers without issuer binding — client secret redirectable to attacker-advertised authorization server
## Maintainer assessment and remediation This report is accepted as a FastMCP credential-binding vulnerability. Affecte
vLLM : DoS via unvalidated mm_processor_kwargs in multimodal image processors (Isaac, InternVL, H2OVL, etc.)
CVE-2026-114055
## Summary API clients can supply arbitrary `mm_processor_kwargs` per request. vLLM forwards these values through the m
pypdf: Possible long runtimes for repeated references to the same missing object
CVE-2026-115572
### Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires loading
pypdf: Possible long runtimes for repeated malformed cross-reference entries (Follow-up)
CVE-2026-115585
### Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires cross-re
pypdf: Possible long runtimes for large xref table header limits
CVE-2026-115580
### Impact An attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires opening
Strands Agents SDK: Exposure of data element to wrong session in the A2A Server
CVE-2026-115419
**Summary** Strands Agents SDK is an open-source SDK, available for Python (strands-agents) and TypeScript (@strands-a
virtualenv: Bash activator leaves the --prompt value unescaped in PS1 when promptvars is off, so prompt expansion later executes it (regression in 21.14.9)
CVE-2026-115586
## Summary The bash activator puts the caller-supplied prompt value into `PS1` unescaped whenever `promptvars` is off a
Mistune: Path Traversal and XSS in Include directive
CVE-2026-115355
The Include directive in `src/mistune/directives/include.py` does not validate that the resolved file path stays within