PYSEC-2026-4245 openapi-python-client: Malicious OpenAPI Documents can cause Arbitrary Code Generation

Impact A malicious OpenAPI document processed by any openapi-python-client prior to 0.29.1 can generate arbitrary Python code. When anyone imports the malicious client, that arbitrary Python code will execute. Patches Versions starting with 0.29.1 have updated with guardrails to prevent arbitrary...

drmlapp (1.0.6), python-webex-bot (0.51.0) potentially affected by CVE-2026-102598 via werkzeug (0.15.1)

werkzeug PYPI version 0.15.1 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - drmlapp 1.0.6 - python-webex-bot 0.51.0 Source cves: CVE-2026-102598 Source advisory: OSV:PYSEC-2026-4312...

sd-python-wrapper (>=0.1.2, <=0.1.26) potentially affected by CVE-2026-96749 via pymongo (3.2.0)

pymongo PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - sd-python-wrapper =0.1.2, =0.1.26 Source cves: CVE-2026-96749 Source advisory: OSV:PYSEC-2026-4296...

aas2openapi (>=0.2.0, <=0.2.4), agentics-py (>=0.0.7, <=0.3.6) +11 more potentially affected by CVE-2026-105801 via openapi-python-client (>=0.14.1, <=0.29.0)

openapi-python-client PYPI version =0.14.1, =0.2.0, =0.0.7, =1.0.36, =25.12.0, =0.1.2, =1.5.0, =0.1.0, =0.25.2rc1, =0.2.0, =0.1.0, =2.0.0, =2.3.0 Source cves: CVE-2026-105801 Source advisory: OSV:PYSEC-2026-4245...

LangGraph SDK custom auth silently ignores actions= on resource decorators

ImpactWhat kind of vulnerability is it? Who is impacted?langgraph-sdk incorrectly applies the actions= argument on resource-scoped authorization decorators, including @auth.on.threads, @auth.on.assistants, and @auth.on.crons.In affected versions, a decorator such...

database-factory (>=1.0.5, <=1.0.6), mage-ai (>=0.1.0, <=0.2.8) +1 more potentially affected by CVE-2026-86597 via snowflake-connector-python (2.7.9)

snowflake-connector-python PYPI version 2.7.9 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - database-factory =1.0.5, =0.1.0, =1.4.0, =2.0.4 Source cves: CVE-2026-86597 Source advisory:...

monosi (>=0.0.1.post1, <=0.0.2.post5), monosi-server (0.0.1) +1 more potentially affected by CVE-2026-86597 via snowflake-connector-python (2.7.2)

snowflake-connector-python PYPI version 2.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - monosi =0.0.1.post1, =0.0.2.post5 - monosi-server 0.0.1 - snowshu 0.0.4a1 Source cves: CVE-2026-86597 Source...

arreyy (0.0.1), dbt-schema-builder (>=0.4.5, <=0.4.13) +6 more potentially affected by CVE-2026-86597 via snowflake-connector-python (2.7.12)

snowflake-connector-python PYPI version 2.7.12 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - arreyy 0.0.1 - dbt-schema-builder =0.4.5, =1.1.0b1, =0.0.1, =0.0.1, =1.15.0, =2.2.0 - pyexql 0.0.1 Source...

cadpr (>=0.1.0, <=0.1.1), nikeca (>=0.0.83, <=0.2.13) potentially affected by CVE-2026-86597 via snowflake-connector-python (3.0.0)

snowflake-connector-python PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - cadpr =0.1.0, =0.0.83, =0.2.13 Source cves: CVE-2026-86597 Source advisory: OSV:PYSEC-2026-4301...

aladdinsdk (>=2.0.0a3, <=2.0.0b10), snowflake-cli (3.12.0) +1 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.17.3)

snowflake-connector-python PYPI version 3.17.3 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - aladdinsdk =2.0.0a3, =2.0.0b10 - snowflake-cli 3.12.0 - snowflake-cli-labs 3.12.0 Source cves: CVE-2026-865...

snowflake-cli-labs (>=3.0.0rc1, <=3.0.0rc2) potentially affected by CVE-2026-86597 via snowflake-connector-python (3.12.1)

snowflake-connector-python PYPI version 3.12.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - snowflake-cli-labs =3.0.0rc1, =3.0.0rc2 Source cves: CVE-2026-86597 Source advisory: OSV:PYSEC-2026-4301...

inthub-cli (>=0.1.4, <=0.1.26), omnata-plugin-devkit (>=0.5.3, <=0.11.0) +2 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.12.0)

snowflake-connector-python PYPI version 3.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - inthub-cli =0.1.4, =0.5.3, =0.5.0a112, =0.11.9 - snowflake-cli-labs 3.0.0rc0 Source cves: CVE-2026-86597...

omnata-cli (>=0.1.8, <=0.1.12), omnata-plugin-devkit (>=0.1.2, <=0.1.95) +3 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.2.0)

snowflake-connector-python PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - omnata-cli =0.1.8, =0.1.2, =0.0.16, =0.0.1a2, =1.1.1, =1.2.5 Source cves: CVE-2026-86597 Source advisory:...

snowflake-cli (3.11.0), snowflake-cli-labs (3.11.0) potentially affected by CVE-2026-86597 via snowflake-connector-python (3.17.2)

snowflake-connector-python PYPI version 3.17.2 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - snowflake-cli 3.11.0 - snowflake-cli-labs 3.11.0 Source cves: CVE-2026-86597 Source advisory:...

clope (0.1.2), datus-agent-clickzetta (>=0.2.1, <=0.2.2) +2 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.11.0)

snowflake-connector-python PYPI version 3.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - clope 0.1.2 - datus-agent-clickzetta =0.2.1, =2.6.0.dev0, =2.8.2 Source cves: CVE-2026-86597 Source advisor...

pipelinewise-tap-snowflake (2.0.1), snowday (>=0.1.3, <=0.1.5) potentially affected by CVE-2026-86597 via snowflake-connector-python (2.2.9)

snowflake-connector-python PYPI version 2.2.9 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - pipelinewise-tap-snowflake 2.0.1 - snowday =0.1.3, =0.1.5 Source cves: CVE-2026-86597 Source advisory:...

airbyte (>=0.11.0, <=0.27.0), airbyte-destination-pgvector (>=0.1.0, <=0.1.4) +117 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.18.1)

snowflake-connector-python PYPI version 3.18.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - airbyte =0.11.0, =0.1.0, =0.0.1, =0.1.5, =0.1.1, =0.4.6, =0.0.25, =0.1.9, =1.0.5, =1.0.1, =2.0.2, =2.1.0 an...

dagster-snowflake (>=0.21.8, <=0.22.3), dagster-snowflake-pandas (>=0.21.8, <=0.22.3) +2 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.4.1)

snowflake-connector-python PYPI version 3.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dagster-snowflake =0.21.8, =0.21.8, =0.21.8, =0.22.3 - quacker 0.6.2 Source cves: CVE-2026-86597 Source...

acepolicies (>=0.1.17, <=0.1.23), cloe-extensions-snowflake-policies (>=20241210.4.0, <=20250324.2.0) +1 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.1.0)

snowflake-connector-python PYPI version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - acepolicies =0.1.17, =20241210.4.0, =20250324.2.0 - snowflake-cli-labs 1.1.0 Source cves: CVE-2026-86597...

crumblpy (>=1.0.10, <=1.0.11), dataops-testgen (>=3.0.0, <=3.1.2) +6 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.12.3)

snowflake-connector-python PYPI version 3.12.3 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - crumblpy =1.0.10, =3.0.0, =2.1.0, =3.2.0, =3.2.0, =0.10.21, =0.11.1 Source cves: CVE-2026-86597 Source...