datapizza-ai-core vulnerabilities
CVEs whose affected-version data names the datapizza-ai-core package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-2969Medium· 4.7datapizza-ai: Server-Side Template Injection in ChatPromptTemplate via Jinja2 Template Handler
datapizza-ai: Server-Side Template Injection in ChatPromptTemplate via Jinja2 Template Handler
▾ Sunlitdatapizza-ai-core · datapizza-ai-coreEPSS 0.69%via OSV
CVE-2026-2970Medium· 4.6datapizza-ai has unsafe deserialization via pickle.loads() in RedisCache
datapizza-ai has unsafe deserialization via pickle.loads() in RedisCache
▾ Sunlitdatapizza-ai-core · datapizza-ai-coreEPSS 0.82%via OSV