aau-gomapedge-etl (>=0.3.2, <=0.4.1), agentgateway (>=0.1.0, <=1.1.9) +135 more potentially affected by CVE-2026-77387 via geopy (>=2.0.0rc1, <=2.4.1)

geopy PYPI version =2.0.0rc1, =0.3.2, =0.1.0, =0.20.5, =0.1.0, =3.2.0, =0.2.0, =1.0.0, =0.0.1, =0.1.0, =0.1.0, =0.0.1, =0.0.2b0, =0.0.9b0 - commonroad-geometric 0.1.2 and more Source cves: CVE-2026-77387 Source advisory: OSV:GHSA-MHVH-FQ92-PFMR...

agentgateway (1.1.9), foundation-cancer-image-biomarker (>=1.0.1a4, <=1.0.1a5) +1 more potentially affected by CVE-2026-59890 via setuptools (75.4.0)

setuptools PYPI version 75.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - agentgateway 1.1.9 - foundation-cancer-image-biomarker =1.0.1a4, =1.0.1a5 - hushhai 0.0.1 Source cves: CVE-2026-59890 Source advisory:...

agentgateway (1.1.9), foundation-cancer-image-biomarker (>=1.0.1a4, <=1.0.1a5) +1 more potentially affected by CVE-2026-59890 via setuptools (75.4.0)

setuptools PYPI version 75.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - agentgateway 1.1.9 - foundation-cancer-image-biomarker =1.0.1a4, =1.0.1a5 - hushhai 0.0.1 Source cves: CVE-2026-59890 Source advisory:...

CVE-2026-29791

Agentgateway is an open source data plane for agentic AI connectivity within or across any agent framework or environment. Prior to version 0.12.0, when converting MCP tools/call request to OpenAPI request, input path, query, and header values are not sanitized. This issue has been patched in...

CVE-2026-29791

Agentgateway is an open source data plane for agentic AI connectivity within or across any agent framework or environment. Prior to version 0.12.0, when converting MCP tools/call request to OpenAPI request, input path, query, and header values are not sanitized. This issue has been patched in...

CVE-2026-29791

Agentgateway is an open source data plane for agentic AI connectivity within or across any agent framework or environment. Prior to version 0.12.0, when converting MCP tools/call request to OpenAPI request, input path, query, and header values are not sanitized. This issue has been patched in...

CVE-2026-29791 Agentgateway: Missing parameter sanitization in MCP to OpenAPI conversion

Agentgateway is an open source data plane for agentic AI connectivity within or across any agent framework or environment. Prior to version 0.12.0, when converting MCP tools/call request to OpenAPI request, input path, query, and header values are not sanitized. This issue has been patched in...

CVE-2026-29791

Agentgateway is an open source data plane for agentic AI connectivity within or across any agent framework or environment. Prior to version 0.12.0, when converting MCP tools/call request to OpenAPI request, input path, query, and header values are not sanitized. This issue has been patched in...

CVE-2026-29791

CVE-2026-29791 affects Agentgateway, an open source data plane for agentic AI connectivity. Before version 0.12.0, MCP tools/call requests converted to OpenAPI requests did not sanitize input path, query, and header values, enabling parameter injection. The issue is patched in version 0.12.0. Imp...

CVE-2026-29791 Agentgateway: Missing parameter sanitization in MCP to OpenAPI conversion

Agentgateway is an open source data plane for agentic AI connectivity within or across any agent framework or environment. Prior to version 0.12.0, when converting MCP tools/call request to OpenAPI request, input path, query, and header values are not sanitized. This issue has been patched in...

CVE-2026-29791 Agentgateway: Missing parameter sanitization in MCP to OpenAPI conversion

Agentgateway is an open source data plane for agentic AI connectivity within or across any agent framework or environment. Prior to version 0.12.0, when converting MCP tools/call request to OpenAPI request, input path, query, and header values are not sanitized. This issue has been patched in...

AgentGateway: Input validation vulnerability

Agentgateway is an open-source software developed by Agent Gateway, designed to provide secure and observable communication connections for AI agents. Versions of Agentgateway prior to 0.12.0 contained a vulnerability related to input validation errors. This vulnerability occurred when converting...

CVE-2026-29791: Improper Input Validation

Agentgateway is an open source data plane for agentic AI connectivity within or across any agent framework or environment. Prior to version 0.12.0, when converting MCP tools/call request to OpenAPI request, input path, query, and header values are not sanitized. This issue has been patched in...

agentgateway (1.1.9), foundation-cancer-image-biomarker (>=1.0.1a4, <=1.0.1a5) +1 more potentially affected by CVE-2025-47273 via setuptools (75.4.0)

setuptools PYPI version 75.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - agentgateway 1.1.9 - foundation-cancer-image-biomarker =1.0.1a4, =1.0.1a5 - hushhai 0.0.1 Source cves: CVE-2025-47273 Source advisory:...

agentgateway (1.1.9), foundation-cancer-image-biomarker (>=1.0.1a4, <=1.0.1a5) +1 more potentially affected by CVE-2025-47273 via setuptools (75.4.0)

setuptools PYPI version 75.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - agentgateway 1.1.9 - foundation-cancer-image-biomarker =1.0.1a4, =1.0.1a5 - hushhai 0.0.1 Source cves: CVE-2025-47273 Source advisory:...