A flaw was found in InstructLab. A local attacker could exploit a path traversal vulnerability in the chat session handler by manipulating the `logs_dir` parameter. This allows the attacker to create new directories and write files to arbi…

▾ TwilightRed Hat · Red Hat Enterprise Linux AI (RHEL AI) 3EPSS 0.22%via CSAF

CVE-2026-40347Medium· 5.3

5mo ago

python-multipart affected by Denial of Service via large multipart preamble or epilogue data

▾ Sunlitpython-multipart · python-multipartEPSS 0.42%via OSV

CVE-2026-41168Medium· 5.3

5mo ago

pypdf has long runtimes for wrong size values in cross-reference and object streams

▾ Sunlitpypdf · pypdfEPSS 0.52%via OSV

Tagged “pip”

Malicious code in moonbit-locale-compat (PyPI)

Apache Airflow Exposes Secrets in Variables Saved as JSON Dictionaries

Apache Airflow exposes SQL stack trace despite "api/expose_stack_traces" set to false

Dagster Vulnerable to SQL Injection via Dynamic Partition Keys in Database I/O Manager Integrations

Apache Airflow allows users with asset materialize permissions to trigger DAGs outside of their permissions

Apache Airflow allows code execution through crafted XCom payloads

apache-airflow-providers-keycloak: Missing OAuth 2.0 State and PKCE Enables Login CSRF and Session Fixation

OpenViking: Unauthenticated remote bot control via OpenAPI HTTP routes

Neo4j Labs MCP Servers: SSRF and Data Modification via read_only Mode Bypass Through CALL Procedures

PraisonAI: SQL Injection via unvalidated `table_prefix` in 9 conversation store backends (incomplete fix for CVE-2026-40315)

Mako: Path traversal via double-slash URI prefix in TemplateLookup

Authlib: Cross-site request forging when using cache

LangChain Text Splitters: HTMLHeaderTextSplitter.split_text_from_url SSRF Redirect Bypass

Weblate: SSRF via Project-Level Machinery Configuration

wger has Broken Access Control in Global Gym Configuration Update Endpoint

pypdf: Manipulated FlateDecode image dimensions can exhaust RAM

PySpector has a Plugin Code Execution Bypass via Incomplete Static Analysis in PluginSecurity.validate_plugin_code

Weblate: Improper access control for pending tasks in API

Apache Airflow: RCE by race condition in example_xcom dag

Apache Airflow: JWT token appearing in logs

Weblate: Arbitrary File Read via Symlink

Weblate: Prefix-Based Repository Boundary Check Bypass via Symlink/Junction Path Prefix Collision

pypdf: Manipulated FlateDecode predictor parameters can exhaust RAM

wger has Stored XSS via Unescaped License Attribution Fields

Weblate: Authenticated SSRF via redirect bypass of ALLOWED_ASSET_DOMAINS in screenshot URL uploads

pypdf: Possible long runtimes for wrong size values in incremental mode

Home Assistant Command-line Interface: Handling of user-supplied Jinja2 templates

instructlab: InstructLab: Path traversal allows arbitrary directory creation and file write (CVE-2026-6855)

python-multipart affected by Denial of Service via large multipart preamble or epilogue data

pypdf has long runtimes for wrong size values in cross-reference and object streams