Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
🏠GNA-1 (CIRCL)
Select from 85 available sources using the dropdown above.
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2026-4199 |
6.5 (3.1)
|
vLLM is an inference and serving engine for large language models. Prior to 0.30.0, struc… | vllm | 2026-10-05T23:17:02.467Z | 2026-10-08T09:43:24.725362Z |
| pysec-2026-4198 |
4.2 (3.1)
|
vLLM is an inference and serving engine for large language models. Prior to 0.30.0, flash… | vllm | 2026-10-05T23:17:02.167Z | 2026-10-08T09:43:24.663438Z |
| pysec-2026-4197 |
6.5 (3.1)
|
vLLM is an inference and serving engine for large language models. Prior to 0.28.0, the d… | vllm | 2026-10-05T23:17:01.867Z | 2026-10-08T09:43:24.599253Z |
| pysec-2026-4196 |
7.5 (3.1)
|
Docling simplifies document processing by parsing diverse formats and providing integrati… | docling | 2026-10-05T22:16:58.097Z | 2026-10-08T09:43:12.673977Z |
| pysec-2026-4195 |
6.5 (3.1)
|
Docling simplifies document processing by parsing diverse formats and providing integrati… | docling | 2026-10-05T22:16:57.943Z | 2026-10-08T09:43:12.609211Z |
| pysec-2026-4194 |
4.3 (3.1)
|
Docling simplifies document processing by parsing diverse formats and providing integrati… | docling | 2026-10-05T22:16:57.633Z | 2026-10-08T09:43:12.545255Z |
| pysec-2026-4193 |
5.3 (3.1)
|
Docling simplifies document processing by parsing diverse formats and providing integrati… | docling | 2026-10-05T22:16:57.480Z | 2026-10-08T09:43:12.481383Z |
| pysec-2026-4192 |
7.8 (3.1)
|
Docling simplifies document processing by parsing diverse formats and providing integrati… | docling | 2026-10-05T22:16:57.330Z | 2026-10-08T09:43:12.417678Z |
| pysec-2026-4191 |
8.8 (3.1)
|
Docling simplifies document processing by parsing diverse formats and providing integrati… | docling | 2026-10-05T22:16:57.177Z | 2026-10-08T09:43:12.353314Z |
| pysec-2026-4190 |
5.8 (3.1)
|
Docling simplifies document processing by parsing diverse formats and providing integrati… | docling | 2026-10-05T22:16:57.030Z | 2026-10-08T09:43:12.289524Z |
| pysec-2026-4189 |
5.3 (3.1)
|
Docling simplifies document processing by parsing diverse formats and providing integrati… | docling | 2026-10-05T22:16:56.867Z | 2026-10-08T09:43:12.225434Z |
| pysec-2026-4059 |
6.8 (3.1)
|
## Description A language pack ships a `Plural-Forms` header saying how the language cou… | jupyterlite-core | 2026-10-01T16:44:34.781942Z | 2026-10-01T17:10:25.828296Z |
| pysec-2026-4056 |
6.8 (3.1)
|
## Description A language pack ships a `Plural-Forms` header saying how the language cou… | jupyterlab | 2026-10-01T16:44:34.714662Z | 2026-10-01T17:10:25.646257Z |
| pysec-2026-4055 |
5.4 (3.1)
|
JupyterLab's PyPI extension manager runs `python -m pip uninstall` with the extension nam… | jupyterlab | 2026-10-01T16:44:34.569594Z | 2026-10-01T17:10:25.523160Z |
| pysec-2026-4060 |
8.1 (3.1)
|
## Description JupyterLab 4.5.0 enabled copying and pasing cells through the system clip… | jupyterlite-core | 2026-10-01T16:44:34.455277Z | 2026-10-01T17:10:25.896827Z |
| pysec-2026-4058 |
8.1 (3.1)
|
## Description JupyterLab 4.5.0 enabled copying and pasing cells through the system clip… | jupyterlite | 2026-10-01T16:44:34.300579Z | 2026-10-01T17:10:25.963722Z |
| pysec-2026-4112 |
8.1 (3.1)
|
## Description JupyterLab 4.5.0 enabled copying and pasing cells through the system clip… | notebook | 2026-10-01T16:44:34.145574Z | 2026-10-05T06:24:38.112577Z |
| pysec-2026-4057 |
8.1 (3.1)
|
## Description JupyterLab 4.5.0 enabled copying and pasing cells through the system clip… | jupyterlab | 2026-10-01T16:44:34.044285Z | 2026-10-01T17:10:25.762677Z |
| pysec-2026-4159 |
8.7 (4.0)
|
### Impact An attacker who uses this vulnerability can craft a PDF which leads to long r… | pypdf | 2026-10-01T16:44:33.811924Z | 2026-10-01T17:10:42.141380Z |
| pysec-2026-4157 |
8.7 (4.0)
|
### Impact An attacker who uses this vulnerability can craft a PDF which leads to long r… | pypdf | 2026-10-01T16:44:33.743667Z | 2026-10-01T17:10:42.015222Z |
| pysec-2026-4160 |
8.7 (4.0)
|
### Impact An attacker who uses this vulnerability can craft a PDF which leads to large … | pypdf | 2026-10-01T16:44:33.671507Z | 2026-10-01T17:10:42.203842Z |
| pysec-2026-4156 |
8.7 (4.0)
|
### Impact An attacker who uses this vulnerability can craft a PDF which leads to long r… | pypdf | 2026-10-01T16:44:33.582610Z | 2026-10-01T17:10:41.950943Z |
| pysec-2026-4155 |
8.7 (4.0)
|
### Impact An attacker who uses this vulnerability can craft a PDF which leads to large … | pypdf | 2026-10-01T16:38:41.851001Z | 2026-10-01T17:10:41.886761Z |
| pysec-2026-4154 |
8.7 (4.0)
|
### Impact An attacker who uses this vulnerability can craft a PDF which leads to large … | pypdf | 2026-10-01T16:38:41.774257Z | 2026-10-01T17:10:41.825581Z |
| pysec-2026-4153 |
8.7 (4.0)
|
### Impact An attacker who uses this vulnerability can craft a PDF which leads to long r… | pypdf | 2026-10-01T16:38:41.707415Z | 2026-10-01T17:10:41.759327Z |
| pysec-2026-4158 |
8.7 (4.0)
|
### Impact An attacker who uses this vulnerability can craft a PDF which leads to large … | pypdf | 2026-10-01T16:38:41.641499Z | 2026-10-01T17:10:42.078173Z |
| pysec-2026-4146 |
6.5 (3.1)
|
### Summary `PyJWT.decode()`/`decode_complete()` mutates a caller-supplied `options` dic… | pyjwt | 2026-10-01T16:38:41.559119Z | 2026-10-01T17:10:41.224315Z |
| pysec-2026-4066 |
6.5 (3.1)
|
### Impact Any authenticated LiteLLM proxy user could redirect an outbound provider call… | litellm | 2026-10-01T16:38:41.476323Z | 2026-10-01T17:10:28.075870Z |
| pysec-2026-4141 |
5.3 (3.1)
|
## Summary `PyJWKClient.get_signing_key_from_jwt(token)` — the first step of the JWKS ve… | pyjwt | 2026-10-01T16:38:41.274770Z | 2026-10-01T17:10:40.882194Z |
| pysec-2026-4176 |
6.9 (4.0)
|
### Impact urllib3's streaming API is designed for the efficient handling of large HTTP … | urllib3 | 2026-10-01T16:38:41.188251Z | 2026-10-01T17:10:45.203786Z |