Vulnerabilities
Recent vulnerabilities
Recent vulnerabilities from
🏠GNA-1 (CIRCL)
Select from 80 available sources using the dropdown above.
| ID | Severity | Description | Package | Published | Updated |
|---|---|---|---|---|---|
| pysec-2025-19 |
9.8 (3.1)
|
picklescan before 0.0.22 only considers standard pickle file extensions in the scope for … | picklescan | 2025-03-03T19:15:34+00:00 | 2027-07-09T15:54:00+00:00 |
| pysec-2024-115 |
9.8 (3.1)
|
A vulnerability in the GraphCypherQAChain class of langchain-ai/langchain-community versi… | langchain-community | 2024-11-05T16:04:14Z | 2027-07-09T15:45:00Z |
| pysec-2020-343 |
7.8 (3.1)
|
blosc2.c in Blosc C-Blosc2 through 2.0.0.beta.5 has a heap-based buffer overflow when the… | blosc2 | 2020-11-27T20:15:00Z | 2026-08-12T07:36:44.224970Z |
| pysec-2026-3657 |
8.5 (4.0)
|
NLTK (Natural Language Toolkit) before version 3.9.3 contains an eval injection vulnerabi… | nltk | 2026-07-24T22:16:50.063Z | 2026-08-11T08:48:28.866286Z |
| pysec-2026-3656 |
4.8 (4.0)
|
### Impact An attacker who uses this vulnerability can craft a PDF which leads to long r… | pypdf | 2026-08-10T10:43:51.652452Z | 2026-08-10T11:02:01.163202Z |
| pysec-2026-3655 |
4.8 (4.0)
|
### Impact An attacker who uses this vulnerability can craft a PDF which leads to large … | pypdf | 2026-08-10T10:43:51.717413Z | 2026-08-10T11:02:01.102993Z |
| pysec-2026-3654 |
7.5 (3.1)
|
### Summary Four inline processors in pymdown-extensions contain regular expressions wit… | pymdown-extensions | 2026-08-10T10:43:51.576444Z | 2026-08-10T11:02:00.970245Z |
| pysec-2026-3653 |
7.7 (3.1)
|
## Summary With the Playwright web loader enabled, Open WebUI opens user-submitted URLs i… | open-webui | 2026-08-10T10:43:49.448510Z | 2026-08-10T11:01:50.625402Z |
| pysec-2026-3652 |
8.1 (3.1)
|
## Summary The OAuth token exchange endpoint accepts a raw provider access token and val… | open-webui | 2026-08-10T10:43:49.597396Z | 2026-08-10T11:01:50.486869Z |
| pysec-2026-3651 |
4.1 (3.1)
|
## Summary Open WebUI renders `vega` and `vega-lite` fenced code blocks in chat content b… | open-webui | 2026-08-10T10:43:49.983060Z | 2026-08-10T11:01:50.421452Z |
| pysec-2026-3650 |
8.7 (3.1)
|
## Summary Any authenticated user can store a chat message whose math block makes KaTeX f… | open-webui | 2026-08-10T10:43:50.726772Z | 2026-08-10T11:01:50.356714Z |
| pysec-2026-3649 |
5.4 (3.1)
|
## Summary On standard channels, the message update and delete handlers accepted any call… | open-webui | 2026-08-10T10:43:49.523238Z | 2026-08-10T11:01:50.216905Z |
| pysec-2026-3648 |
4.3 (3.1)
|
## Summary A user with write access to one knowledge base could delete directories, and d… | open-webui | 2026-08-10T10:43:50.303939Z | 2026-08-10T11:01:50.153828Z |
| pysec-2026-3647 |
6.3 (3.1)
|
## Summary Open WebUI vetted user-supplied URLs by resolving the hostname once and reject… | open-webui | 2026-08-10T10:43:50.446760Z | 2026-08-10T11:01:50.087059Z |
| pysec-2026-3646 |
4.3 (3.1)
|
## Summary An authenticated user whose `features.image_generation` permission has been re… | open-webui | 2026-08-10T10:43:50.057759Z | 2026-08-10T11:01:50.020446Z |
| pysec-2026-3645 |
7.1 (3.1)
|
## Summary Open WebUI fetches user-supplied URLs on the server for RAG URL ingestion, UR… | open-webui | 2026-08-10T10:43:50.149957Z | 2026-08-10T11:01:49.926434Z |
| pysec-2026-3644 |
6.5 (3.1)
|
## Summary In every affected release, automation recurrence parsing anchors minutely and … | open-webui | 2026-08-10T10:43:50.513583Z | 2026-08-10T11:01:49.860234Z |
| pysec-2026-3643 |
5.3 (3.1)
|
## Summary Open WebUI lets a client define a model inline on a chat request instead of se… | open-webui | 2026-08-10T10:43:50.379737Z | 2026-08-10T11:01:49.792786Z |
| pysec-2026-3642 |
6.3 (3.1)
|
## Summary The terminal WebSocket route authenticates its own first-message JWT instead o… | open-webui | 2026-08-10T10:43:50.586616Z | 2026-08-10T11:01:49.729092Z |
| pysec-2026-3641 |
8.2 (3.1)
|
## Summary Any authenticated user with access to a terminal server could get script of th… | open-webui | 2026-08-10T10:43:50.230505Z | 2026-08-10T11:01:49.664870Z |
| pysec-2026-3640 |
3.1 (3.1)
|
## Summary `DELETE /api/v1/chats/{id}` cancelled a chat's in-flight tasks before it check… | open-webui | 2026-08-10T10:43:49.812350Z | 2026-08-10T11:01:49.586770Z |
| pysec-2026-3639 |
6.5 (3.1)
|
## Summary A workspace tool shared with a read grant returned its full Python source to … | open-webui | 2026-08-10T10:43:50.657652Z | 2026-08-10T11:01:49.510996Z |
| pysec-2026-3638 |
8.1 (3.1)
|
## Summary A user granted write access to a shared chat folder could permanently delete c… | open-webui | 2026-08-10T10:43:50.858960Z | 2026-08-10T11:01:49.357693Z |
| pysec-2026-3637 |
6.5 (3.1)
|
## Summary The built-in knowledge search tools let a chat participant choose the pattern … | open-webui | 2026-08-10T10:43:50.794123Z | 2026-08-10T11:01:49.229058Z |
| pysec-2026-3636 |
5.3 (3.1)
|
## Summary The Postgres and SQLite stores persist hierarchical namespaces as a dot-joine… | langgraph-checkpoint-sqlite | 2026-08-10T10:43:51.130062Z | 2026-08-10T11:01:45.051975Z |
| pysec-2026-3635 |
5.3 (3.1)
|
## Summary The Postgres and SQLite stores persist hierarchical namespaces as a dot-joine… | langgraph-checkpoint-postgres | 2026-08-10T10:43:50.987387Z | 2026-08-10T11:01:44.913067Z |
| pysec-2026-2324 |
8.1 (3.1)
|
Keras versions prior to 3.14.0 are vulnerable to a path traversal issue in the archive ex… | keras | 2026-06-11T14:16:26.557Z | 2026-08-10T11:01:44.730654Z |
| pysec-2026-3634 |
7.8 (3.1)
|
A vulnerability in keras-team/keras version 3.15.0 allows unsafe deserialization of attac… | keras | 2026-08-10T10:43:49.248554Z | 2026-08-10T11:01:44.665418Z |
| pysec-2026-3633 |
6.5 (3.1)
|
A vulnerability in keras-team/keras versions <= 3.14.0 allows arbitrary local HDF5 file c… | keras | 2026-08-10T10:43:49.309151Z | 2026-08-10T11:01:44.580483Z |
| pysec-2026-3632 |
6.1 (3.1)
|
A path traversal vulnerability exists in keras-team/keras version 3.14.0, specifically in… | keras | 2026-08-10T10:43:49.027381Z | 2026-08-10T11:01:44.419018Z |