PT-2026-134242

Name of the Vulnerable Software and Affected Versions TAKO AI Agent for Okta versions prior to 3.0.1-beta Description Authenticated users with a valid fctr session cookie can execute arbitrary Python code without administrator privileges. By sending a request to the 'POST /api/react/execute-scrip...

CVE-2026-63378: fctr-id okta-ai-agent: TAKO AI Agent for Okta is a local-first AI agent that helps Okta administrators query tenant data using natural language

TAKO AI Agent for Okta is a local-first AI agent that helps Okta administrators query tenant data using natural language. Prior to 3.0.1-beta, any authenticated user with a valid fctrsession cookie can submit arbitrary Python source in the scriptcode field of POST /api/react/execute-script, witho...

Eval Injection

Overview ultralytics is an Ultralytics YOLOv8 for SOTA object detection, multi-object tracking, instance segmentation, pose estimation and image classification. Affected versions of this package are vulnerable to Eval Injection via the parsemodel function in ultralytics/nn/tasks.py. An attacker c...

PT-2026-127745

Summary MLflow 3.12.0 introduced registration and deserialization support for third-party scorers in OSS MLflow. During scorer deserialization, the server accepts a request-controlled Python module path beneath one of four allowed package prefixes, imports that module, obtains a request-controlle...

PT-2026-127225

Name of the Vulnerable Software and Affected Versions MLflow versions 3.12.0 through 3.16.x Description Third-party scorer deserialization in mlflow/genai/scorers/base.py allows the import of request-selected descendants of allowed modules rather than requiring an exact match. An attacker can use...

vLLM deserialization injection vulnerability

Versions of vLLM prior to 0.32.0 contain a deserialization injection vulnerability. This vulnerability arises because authenticated callers can place forged shared memory addresses and monotonicid values within the public multi-modal features.kwargsdata. In deployments where shared memory-based...

CVE-2026-57845

Hugging Face Datasets through 5.1.0 contains an insecure deserialization vulnerability that allows attackers to execute arbitrary Python code by crafting a malicious pickle file loaded through the deprecated pandas packaged builder. Attackers can supply a pickle-backed dataset that is processed b...

EUVD-2026-109092

Hugging Face Datasets through 5.1.0 contains an insecure deserialization vulnerability that allows attackers to execute arbitrary Python code by crafting a malicious pickle file loaded through the deprecated pandas packaged builder. Attackers can supply a pickle-backed dataset that is processed b...

CVE-2026-57845

Hugging Face Datasets through 5.1.0 contains an insecure deserialization vulnerability that allows attackers to execute arbitrary Python code by crafting a malicious pickle file loaded through the deprecated pandas packaged builder. Attackers can supply a pickle-backed dataset that is processed b...

PT-2026-122146

Hugging Face Datasets through 5.1.0 contains an insecure deserialization vulnerability that allows attackers to execute arbitrary Python code by crafting a malicious pickle file loaded through the deprecated pandas packaged builder. Attackers can supply a pickle-backed dataset that is processed b...

Hugging Face Datasets deserialization injection vulnerability

Versions 5.1.0 and earlier of Hugging Face Datasets contain a deserialization injection vulnerability. This vulnerability stems from unsafe deserialization; attackers can load specially crafted pickle files using the deprecated pandas packaging builder. Additionally, Pandas.generatetables process...

vLLM code injection vulnerability

Versions vLLM 0.7.3 through 0.31.0 contain a code injection vulnerability. This vulnerability arises when the mmprocessorkwargs.coderevision parameter provided by the request is passed to Transformers AutoProcessor.frompretrained. When trustremotecode is enabled, it allows clients to specify whic...

CVE-2026-108380

dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.65.9 through 0.70.5, PydanticFieldRepresentation.addfieldproperties inserts a schema field's doc value between the quotes of a...

CVE-2026-108380

The dataclasses-avroschema library (versions 0.65.9 through 0.70.5 ) is vulnerable to code injection via the PydanticFieldRepresentation.add_field_properties function. The root cause is the failure to escape a schema field's doc value when inserting it into a generated pydantic.Field description ...

CVE-2026-108380 dataclasses-avroschema field documentation allows code injection in generated Pydantic descriptions

dataclasses-avroschema generates Avro schemas from Python dataclasses, Pydantic models, and Faust Records and generates Python code from Avro schemas. From version 0.65.9 through 0.70.5, PydanticFieldRepresentation.addfieldproperties inserts a schema field's doc value between the quotes of a...

CentOS Linux 7 [TuxCare] Security Update: python-jinja2 (CENTOS7:CLSA-2026:1790708389)

The CentOS Linux 7 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2026:1790708389 advisory. - Jinja is an extensible templating engine. Prior to 3.1.6, an oversight in how the Jinja sandboxed environment interacts with the |attr filter...

CentOS Linux 7 [TuxCare] Security Update: python-jinja2 (CENTOS7:CLSA-2025:1765310613)

The CentOS Linux 7 host has a package installed that is affected by a vulnerability as referenced in the TuxCare CENTOS7:CLSA-2025:1765310613 advisory. - Jinja is an extensible templating engine. Prior to 3.1.5, An oversight in how the Jinja sandboxed environment detects calls to str.format allow...

EUVD-2026-87829

heym before 0.0.91 contains a sandbox escape vulnerability in the expression engine's DotList map/filter and fallback resolver that allows authenticated users to execute arbitrary Python code. Attackers can craft workflow expressions using dunder attribute access through item expressions or the...

Linux Distros Unpatched Vulnerability : CVE-2026-79310

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - webpy web.py 0.76 is vulnerable to server-side template injection SSTI. The template engine can be tricked into executing attacker-controlled template code that...

CVE-2026-79310

webpy web.py 0.76 is vulnerable to server-side template injection SSTI. The template engine can be tricked into executing attacker-controlled template code that built-in security checks are designed to reject. When an application precompiles templates from a directory the attacker can write to an...