paypal-agent-toolkit (>=1.2.0, <=1.11.0) potentially affected by CVE-2026-62240 via crewai-tools (0.13.2)

crewai-tools PYPI version 0.13.2 is affected by a known vulnerability. The following packages have a transitive dependency on crewai-tools and may be impacted: - paypal-agent-toolkit =1.2.0, =1.11.0 Source cves: CVE-2026-62240 Source advisory: OSV:PYSEC-2026-3819...

agent-toolkit (0.1.9), branchy-chat (0.1.2) +28 more potentially affected by CVE-2026-72742 via dspy (>=3.0.0b1, <=3.3.0b1)

dspy PYPI version =3.0.0b1, =0.7.7, =0.3.5, =0.1.9, =0.1.0, =0.3.5, =0.1.0, =0.5.31, =0.1.0, =0.1.4, =0.1.0, =0.1.0a1, =0.3.23, =0.3.33 and more Source cves: CVE-2026-72742 Source advisory: SNYK:PYTHON-DSPY-18751972...

langgraph-agent-toolkit (>=0.7.8, <=0.7.23), mseep-deer-flow (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-71433 via langgraph-checkpoint-postgres (2.0.21)

langgraph-checkpoint-postgres PYPI version 2.0.21 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-postgres and may be impacted: - langgraph-agent-toolkit =0.7.8, =0.1.0, =0.1.1 Source cves: CVE-2026-71433 Source advisory:...

langgraph-agent-toolkit (>=0.7.8, <=0.7.23), mseep-deer-flow (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-71433 via langgraph-checkpoint-postgres (2.0.21)

langgraph-checkpoint-postgres PYPI version 2.0.21 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-postgres and may be impacted: - langgraph-agent-toolkit =0.7.8, =0.1.0, =0.1.1 Source cves: CVE-2026-71433 Source advisory:...

paypal-agent-toolkit (>=1.2.0, <=1.11.0) potentially affected by CVE-2026-62240 via crewai-tools (0.13.2)

crewai-tools PYPI version 0.13.2 is affected by a known vulnerability. The following packages have a transitive dependency on crewai-tools and may be impacted: - paypal-agent-toolkit =1.2.0, =1.11.0 Source cves: CVE-2026-62240 Source advisory: OSV:GHSA-MR4R-HCGX-8P4H...

langgraph-agent-toolkit (>=0.8.0, <=0.8.15), tabsdata-agent (>=1.5.0, <=1.5.1) potentially affected by CVE-2025-67644 via langgraph-checkpoint-sqlite (3.0.0)

langgraph-checkpoint-sqlite PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - langgraph-agent-toolkit =0.8.0, =1.5.0, =1.5.1 Source cves: CVE-2025-67644 Source advisory:...

agent-api-server (>=2.1.7, <=2.2.1), agent-playbook (>=0.1.0, <=0.1.2) +140 more potentially affected by CVE-2026-54282 via starlette (0.49.3)

starlette PYPI version 0.49.3 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - agent-api-server =2.1.7, =0.1.0, =0.1.0, =0.5.0b2, =0.2.47, =1.4.0a20251029, =1.4.0a20251029, =1.3.46, =0.1.10, =0.4.0, =0.4.0, =0.1.1rc61,...

agent-api-server (>=2.1.7, <=2.2.1), agent-playbook (>=0.1.0, <=0.1.2) +140 more potentially affected by CVE-2026-48710 via starlette (0.49.3)

starlette PYPI version 0.49.3 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - agent-api-server =2.1.7, =0.1.0, =0.1.0, =0.5.0b2, =0.2.47, =1.4.0a20251029, =1.4.0a20251029, =1.3.46, =0.1.10, =0.4.0, =0.4.0, =0.1.1rc61,...

agent-api-server (>=2.1.7, <=2.2.1), agent-playbook (>=0.1.0, <=0.1.2) +140 more potentially affected by CVE-2026-48710 via starlette (0.49.3)

starlette PYPI version 0.49.3 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - agent-api-server =2.1.7, =0.1.0, =0.1.0, =0.5.0b2, =0.2.47, =1.4.0a20251029, =1.4.0a20251029, =1.3.46, =0.1.10, =0.4.0, =0.4.0, =0.1.1rc61,...

@clerk/agent-toolkit (>=0.3.1-canary.v20260303211310, <=0.3.16-snapshot.v20260416221307), @clerk/astro (>=3.0.1-canary.v20260303211310, <=3.0.17-canary.v20260417194309) +10 more potentially affected by CVE-2026-42349 via @clerk/backend (>=3.0.0, <=3.2.13)

@clerk/backend NPM version =3.0.0, =0.3.1-canary.v20260303211310, =3.0.1-canary.v20260303211310, =2.0.1-canary.v20260303211310, =3.0.1-canary.v20260303211310, =0.0.3-canary.v20260303211310, =7.0.1-canary.v20260303211310, =2.0.1-canary.v20260303211310, =3.0.1-canary.v20260303211310,...

PT-2026-30707

Name of the Vulnerable Software and Affected Versions Anthropic Claude Code CLI and Claude Agent SDK affected versions not specified Description The Anthropic Claude Code CLI and Claude Agent SDK contain an OS command injection issue in the prompt editor invocation utility. Attackers can execute...

langgraph-agent-toolkit (>=0.8.0, <=0.8.15), tabsdata-agent (>=1.5.0, <=1.5.1) potentially affected by CVE-2025-67644 via langgraph-checkpoint-sqlite (3.0.0)

langgraph-checkpoint-sqlite PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - langgraph-agent-toolkit =0.8.0, =1.5.0, =1.5.1 Source cves: CVE-2025-67644 Source advisory:...

langgraph-agent-toolkit (>=0.8.0, <=0.8.15), tabsdata-agent (>=1.5.0, <=1.5.1) potentially affected by CVE-2025-67644 via langgraph-checkpoint-sqlite (3.0.0)

langgraph-checkpoint-sqlite PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - langgraph-agent-toolkit =0.8.0, =1.5.0, =1.5.1 Source cves: CVE-2025-67644 Source advisory:...

langgraph-agent-toolkit (>=0.8.0, <=0.8.15), tabsdata-agent (>=1.5.0, <=1.5.1) potentially affected by CVE-2025-67644 via langgraph-checkpoint-sqlite (3.0.0)

langgraph-checkpoint-sqlite PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - langgraph-agent-toolkit =0.8.0, =1.5.0, =1.5.1 Source cves: CVE-2025-67644 Source advisory:...

langgraph-agent-toolkit (>=0.8.0, <=0.8.15), tabsdata-agent (>=1.5.0, <=1.5.1) potentially affected by unknown CVE via langgraph-checkpoint-sqlite (3.0.0)

langgraph-checkpoint-sqlite PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - langgraph-agent-toolkit =0.8.0, =1.5.0, =1.5.1 Source cves: unknown CVE Source advisory:...

NeMo Agent ToolKit Unauthorized Access

The vulnerability of the web interface of the NeMo Agent ToolKit, a tool for creating, profiling, and optimizing AI agents, is related to the manipulation of requests on the server side. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information or...

CVE-2025-33203

NVIDIA NeMo Agent Toolkit UI for Web contains a vulnerability in the chat API endpoint where an attacker may cause a Server-Side Request Forgery. A successful exploit of this vulnerability may lead to information disclosure and denial of service...

CVE-2025-33203

NVIDIA NeMo Agent Toolkit UI for Web contains a vulnerability in the chat API endpoint where an attacker may cause a Server-Side Request Forgery. A successful exploit of this vulnerability may lead to information disclosure and denial of service...

NVIDIA NeMo Agent ToolKit code-related vulnerabilities

NVIDIA NeMo Agent ToolKit is an intelligences optimization toolkit from NVIDIA, Inc. A code issue vulnerability exists in NVIDIA NeMo Agent ToolKit, which stems from a server-side request forgery in the Chat API endpoint that could lead to information disclosure and denial of service...

Security Bulletin: NVIDIA NeMo Agent Toolkit - November 2025

NVIDIA has released a software update for NVIDIA® NeMo Agent Toolkit. To protect your system, clone or update this software to version 1.3.0 or later from NVIDIA GitHub. The affected sub-module is https://github.com/NVIDIA/NeMo-Agent-Toolkit-UI. Go to NVIDIA Product Security. To protect your...