repository-manager (>=1.2.10, <=1.2.15) potentially affected by CVE-2026-25904 via mcp-run-python (0.0.22)

mcp-run-python PYPI version 0.0.22 is affected by a known vulnerability. The following packages have a transitive dependency on mcp-run-python and may be impacted: - repository-manager =1.2.10, =1.2.15 Source cves: CVE-2026-25904 Source advisory: OSV:PYSEC-2026-2627...

PYSEC-2026-2628 MCP Run Python has a Sandbox Escape & Server Takeover Vulnerability

Impact Critical Sandbox Escape & Server Takeover: A critical security vulnerability exists in mcp-run-python due to a lack of isolation between the Python runtime Pyodide and the host JavaScript environment. The runPython and runPythonAsync functions execute Python code using Pyodide without...

ai-parrot (>=0.6.5, <=0.8.2), commitai (>=1.0.5, <=2.0.0) +2 more potentially affected by CVE-2026-26013 via langchain-core (0.3.58)

langchain-core PYPI version 0.3.58 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - ai-parrot =0.6.5, =1.0.5, =0.1.0, =0.3.1 Source cves: CVE-2026-26013 Source advisory: OSV:PYSEC-2026-2562...

PYSEC-2026-2627 MCP Run Python Deno Sandbox Misconfiguration Allows SSRF Attacks via Localhost Access

Impact Server-Side Request Forgery SSRF: A security vulnerability exists in the mcp-run-python tool specifically within the Pydantic-AI integration due to an overly permissive Deno sandbox configuration. The tool configures the Deno runtime—which is intended to isolate the execution of untrusted...

chat-with-mlx (>=0.1.6, <=0.1.11), crmchatbot (>=0.1.3, <=0.1.4) +1 more potentially affected by CVE-2026-26013 via langchain-core (0.1.27)

langchain-core PYPI version 0.1.27 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - chat-with-mlx =0.1.6, =0.1.3, =1.0.9, =1.1.30 Source cves: CVE-2026-26013 Source advisory: OSV:PYSEC-2026-2562...

MCP Run Python Deno Sandbox Misconfiguration Allows SSRF Attacks via Localhost Access

ImpactServer-Side Request Forgery SSRF:A security vulnerability exists in the mcp-run-python tool specifically within the Pydantic-AI integration due to an overly permissive Deno sandbox configuration.The tool configures the Deno runtime—which is intended to isolate the execution of untrusted...

agent-runtimes (0.0.9), auto-browse (>=0.0.2, <=0.0.5) +15 more potentially affected by CVE-2026-25640 via pydantic-ai-slim (>=1.34.0, <=1.50.0)

pydantic-ai-slim PYPI version =1.34.0, =0.0.2, =1.34.0, =0.1.0, =1.0.0, =26.0.0, =0.4.3b0, =1.34.0, =1.34.0, =1.34.0, =0.6.3.dev1, =0.45.2, =0.45.3 and more Source cves: CVE-2026-25640 Source advisory: OSV:PYSEC-2026-2983...

PYSEC-2026-3045 Malciously crafted QPY files can allows Remote Attackers to Cause Denial of Service in Qiskit

Impact A maliciously crafted QPY file containing a malformed symengine serialization stream as part of the larger QPY serialization of a ParameterExpression object can cause a segfault within the symengine library, allowing an attacker to terminate the hosting process deserializing the QPY payloa...

PYSEC-2026-2561 Denial of service in langchain-community

Denial of service in SitemapLoader Document Loader in the langchain-community package, affecting versions below 0.2.5. The parsesitemap method, responsible for parsing sitemaps and extracting URLs, lacks a mechanism to prevent infinite recursion when a sitemap URL refers to the current sitemap...

abba-python (>=0.1.6, <=0.3.0), adversal-embedding (>=0.0.1, <=0.0.7) +52 more potentially affected by CVE-2023-33976 via tensorflow (1.15.0)

tensorflow PYPI version 1.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - abba-python =0.1.6, =0.0.1, =0.2.6, =2023.1.0, =0.2.11, =0.0.4, =0.10.0, =0.10.1 - deepaclive 0.1.0 and more Source cves: CVE-2023-33976...

Information disclosure in AccessControl

ImpactPython's "format" functionality allows someone controlling the format string to "read" objects accessible recursively via attribute access and subscription from accessible objects. Those attribute accesses and subscriptions use Python's full blown getattr and getitem, not the policy...

PYSEC-2026-2325 Information disclosure in AccessControl

Impact Python's "format" functionality allows someone controlling the format string to "read" objects accessible recursively via attribute access and subscription from accessible objects. Those attribute accesses and subscriptions use Python's full blown getattr and getitem, not the policy...

azureml-contrib-brainwave (0.1.68.2), azureml-train-automl (>=0.1.68, <=0.1.80) +5 more potentially affected by CVE-2023-25660 via tensorflow (1.10.0)

tensorflow PYPI version 1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - azureml-contrib-brainwave 0.1.68.2 - azureml-train-automl =0.1.68, =2.0.3, =0.11.9, =0.13.0a5 - scaden 0.9.0 Source cves: CVE-2023-25660...

abba-python (>=0.1.6, <=0.3.0), adversal-embedding (>=0.0.1, <=0.0.7) +52 more potentially affected by CVE-2023-25662 via tensorflow (1.15.0)

tensorflow PYPI version 1.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - abba-python =0.1.6, =0.0.1, =0.2.6, =2023.1.0, =0.2.11, =0.0.4, =0.10.0, =0.10.1 - deepaclive 0.1.0 and more Source cves: CVE-2023-25662...

a2grunnerp (>=0.1.0, <=0.1.8), aadhaar-detection (0.5.0) +923 more potentially affected by CVE-2023-25663 via tensorflow (>=2.0.0, <=2.11.0)

tensorflow PYPI version =2.0.0, =0.1.0, =0.1.1, =1.0.47, =1.0.0, =6.0.0, =1.2.0, =1.2.8, =1.1.5, =1.3.2 - ai-music-remixer 3.0.0 and more Source cves: CVE-2023-25663 Source advisory: OSV:PYSEC-2026-3116...

abba-python (>=0.1.6, <=0.3.0), adversal-embedding (>=0.0.1, <=0.0.7) +52 more potentially affected by CVE-2023-25664 via tensorflow (1.15.0)

tensorflow PYPI version 1.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - abba-python =0.1.6, =0.0.1, =0.2.6, =2023.1.0, =0.2.11, =0.0.4, =0.10.0, =0.10.1 - deepaclive 0.1.0 and more Source cves: CVE-2023-25664...

abba-python (>=0.1.6, <=0.3.0), adversal-embedding (>=0.0.1, <=0.0.7) +52 more potentially affected by CVE-2023-25665 via tensorflow (1.15.0)

tensorflow PYPI version 1.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - abba-python =0.1.6, =0.0.1, =0.2.6, =2023.1.0, =0.2.11, =0.0.4, =0.10.0, =0.10.1 - deepaclive 0.1.0 and more Source cves: CVE-2023-25665...

abba-python (>=0.1.6, <=0.3.0), adversal-embedding (>=0.0.1, <=0.0.7) +52 more potentially affected by CVE-2023-25672 via tensorflow (1.15.0)

tensorflow PYPI version 1.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - abba-python =0.1.6, =0.0.1, =0.2.6, =2023.1.0, =0.2.11, =0.0.4, =0.10.0, =0.10.1 - deepaclive 0.1.0 and more Source cves: CVE-2023-25672...

abba-python (>=0.1.6, <=0.3.0), adversal-embedding (>=0.0.1, <=0.0.7) +52 more potentially affected by CVE-2023-25674 via tensorflow (1.15.0)

tensorflow PYPI version 1.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - abba-python =0.1.6, =0.0.1, =0.2.6, =2023.1.0, =0.2.11, =0.0.4, =0.10.0, =0.10.1 - deepaclive 0.1.0 and more Source cves: CVE-2023-25674...

abba-python (>=0.1.6, <=0.3.0), adversal-embedding (>=0.0.1, <=0.0.7) +52 more potentially affected by CVE-2023-25673 via tensorflow (1.15.0)

tensorflow PYPI version 1.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow and may be impacted: - abba-python =0.1.6, =0.0.1, =0.2.6, =2023.1.0, =0.2.11, =0.0.4, =0.10.0, =0.10.1 - deepaclive 0.1.0 and more Source cves: CVE-2023-25673...