CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

27534 matches found

vulnersOsv•added 2026/10/08 5:16 p.m.•4 views

agent-runtimes (0.0.9), agent-utilities (>=0.41.0, <=0.51.0) +89 more potentially affected by CVE-2026-107293 via pydantic-ai-slim (>=0.3.4, <=1.107.2)

pydantic-ai-slim PYPI version =0.3.4, =0.41.0, =0.1.14.13, =0.0.2, =0.3.4, =0.0.174, =1.0.0, =0.1.0, =0.9.0, =1.2.0 - eea-genai-blocks 1.0.0 - eea-genai-core 1.2.0 - eea-genai-summary 1.0.0 and more Source cves: CVE-2026-107293 Source advisory: GHSA-3GH4-CGHQ-F8V4...

5.3CVSS5.8AI score0.00297EPSS

SaveExploits0

vulnersOsv•added 2026/10/08 4:48 p.m.•6 views

agent-runtimes (0.0.9), agent-utilities (>=0.41.0, <=0.51.0) +90 more potentially affected by CVE-2026-107291 via pydantic-ai-slim (>=0.3.4, <=1.107.5)

4.3CVSS5.8AI score0.00518EPSS

SaveExploits1

Mend•added 2026/10/08 4:26 p.m.•21 views

CVE-2026-107292

Pydantic AI is a Python agent framework for building applications and workflows with Generative AI. From 1.34.0 until 2.30.0, the Agent.toweb and clai web development chat server does not validate the Host header, allowing a website visited by a developer to use DNS rebinding to reach a...

6.4CVSS6AI score0.00132EPSS

SaveExploits0References8

vulnersOsv•added 2026/10/08 3:15 p.m.•6 views

agent-utilities (>=0.41.0, <=0.51.0), clai (>=1.77.0, <=1.107.6) +37 more potentially affected by CVE-2026-107287 via pydantic-ai-slim (>=1.77.0, <=1.107.6)

pydantic-ai-slim PYPI version =1.77.0, =0.41.0, =1.77.0, =0.0.445, =1.0.0, =1.1.0, =1.0.25, =0.1.102, =26.1.0, =0.1.1, =0.2.0, =0.2.1 - jupydeep 0.1.6 and more Source cves: CVE-2026-107287 Source advisory: MEND:CVE-2026-107287...

6.5CVSS5.8AI score0.00277EPSS

SaveExploits0

osv_mal•added 2026/10/08 2:39 p.m.•15 views

MAL-2026-17682 Malicious code in connector-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2d9f20c94a9242e8d3ee6ef52fd22dfb8e57a8c08ae3ff52776b7ba3234f1702 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

5.8AI score

SaveExploits0References1

osv_mal•added 2026/10/08 2:26 p.m.•13 views

MAL-2026-17681 Malicious code in node-env-resolve (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6f3e0e1b364a3d74534d6ce1eca74778a85e508cf10952f84f36bf1badd8a581 The package is advertised as an environment configuration resolver but its postinstall script installs a hidden persistent agent into user-level...

5.9AI score

SaveExploits0References2

OSSF Malicious Packages•added 2026/10/08 2:26 p.m.•22 views

Malicious code in node-env-resolve (npm)

5.9AI score

SaveExploits0References2

Microsoft CVE•added 2026/10/08 2:00 p.m.•13 views

Azure SRE Agent Elevation of Privilege Vulnerability

Missing authorization in Azure SRE Agent allows an authorized attacker to elevate privileges over a network...

9.6CVSS8.5AI score0.00381EPSS

SaveExploits0

Snyk•added 2026/10/08 6:31 a.m.•10 views

Malicious Package

Overview connector-agent is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

9.8CVSS5.8AI score

SaveExploits0References2

EUVD•added 2026/10/08 6:00 a.m.•12 views

EUVD-2026-94768

The Appointment Booking Plugin WordPress plugin before 5.6.9 does not enforce per-record authorization on several of its AI Abilities API actions, allowing an authenticated user holding the LatePoint Agent role, normally restricted to their own records, to read and modify other agents' profile da...

3.3CVSS5.8AI score0.00132EPSS

SaveExploits0References1