Loading...

Sign in Get Started

Browse CVEs by Ecosystem and Severity

596 CVEs, newest first — with EPSS exploit probability and CISA KEV status, not just CVSS severity.

All ecosystems npm pypi packagist maven go crates.io rubygems nuget

All severities critical high medium low KEV only

Clear all filters

PraisonAI has sandbox escape via exception frame traversal in `execute_code` (subprocess mode)

PraisonAI Vulnerable to Remote Code Execution via YAML Deserialization in Agent Definition Loading

Lupa has a Sandbox escape and RCE due to incomplete attribute_filter enforcement in getattr / setattr

LoLLMs is vulnerable to Improper Access Control through weak secret key

changedetection.io Vulnerable to Authentication Bypass via Decorator Ordering

pyLoad: SSRF filter bypass via HTTP redirect in BaseDownloader (Incomplete fix for CVE-2026-33992)

LiteLLM: Authentication bypass via OIDC userinfo cache key collision

LiteLLM: Privilege escalation via unrestricted proxy configuration endpoint

Kedro has Arbitrary Code Execution via Malicious Logging Configuration

Agno is vulnerable to Eval Injection

PraisonAI Has Second-Order SQL Injection in `get_all_user_threads`

PraisonAI: OS Command Injection in MCPHandler.parse_mcp_command()

PraisonAI: Python Sandbox Escape via str Subclass startswith() Override in execute_code

FastMCP OpenAPI Provider has an SSRF & Path Traversal Vulnerability

SciTokens is vulnerable to SQL Injection in KeyCache

Mlflow: Command Injection when serving models with enable_mlserver=True

MLflow Command Injection vulnerability

MLFlow path traversal vulnerability

pyLoad: Server-Side Request Forgery via Download Link Submission Enables Cloud Metadata Exfiltration

Langflow has Authenticated Code Execution in Agentic Assistant Validation

Langflow has an Arbitrary File Write (RCE) via v2 API

Mesop Affected by Unauthenticated Remote Code Execution via Test Suite Route /exec-py

Mesop has a Path Traversal utilizing `FileStateSessionBackend` leads to Application Denial of Service and File Write/Deletion

Unauthenticated Remote Code Execution in Langflow via Public Flow Build Endpoint

SimpleEval: Objects (including modules) can leak dangerous modules through to direct access inside the sandbox

SGLang's encoder parallel disaggregation system is vulnerable to unauthenticated remote code execution through the disaggregation module

SGLang's multimodal generation module is vulnerable to unauthenticated remote code execution through the ZMQ broker

Azure MCP Server has Server-Side Request Forgery issue that allows authorized attacker to elevate privileges over a network

PickleScan has multiple stdlib modules with direct RCE not in blocklist

PickleScan's pkgutil.resolve_name has a universal blocklist bypass

PickleScan's profile.run blocklist mismatch allows exec() bypass

Langflow has Remote Code Execution in CSV Agent

OpenStack Vitrage: Unauthorized Access to the Host can Lead to Eval Injection

mcp-server-git : Path traversal in git_add allows staging files outside repository boundaries

Flask-Reuploaded vulnerable to Remote Code Execution via Server-Side Template Injection

Bugsink is vulnerable to Stored XSS via Pygments fallback in stacktrace rendering

ormar is vulnerable to SQL Injection through aggregate functions min() and max()

Scan your dependencies for these CVEs