critical System graph security Trivy conf 1.00 CVE-2025-14009: nltk 3.9.2 — futureagi/ee/requirements.txt

nltk: Zip Slip Vulnerability in nltk Leading to Code Execution A critical vulnerability exists in the NLTK downloader component of nltk/nltk, affecting all versions. The _unzip_iter function in nltk/downloader.py uses zipfile.extractall() without performing path validation or security checks. This…

VulnCve 2025 14009

critical System graph security Trivy conf 1.00 CVE-2025-14009: nltk 3.9.2 — futureagi/requirements.txt

nltk: Zip Slip Vulnerability in nltk Leading to Code Execution A critical vulnerability exists in the NLTK downloader component of nltk/nltk, affecting all versions. The _unzip_iter function in nltk/downloader.py uses zipfile.extractall() without performing path validation or security checks. This…

VulnCve 2025 14009

critical System graph security Trivy conf 1.00 CVE-2025-14009: nltk 3.9.2 — futureagi/uv.lock

nltk: Zip Slip Vulnerability in nltk Leading to Code Execution A critical vulnerability exists in the NLTK downloader component of nltk/nltk, affecting all versions. The _unzip_iter function in nltk/downloader.py uses zipfile.extractall() without performing path validation or security checks. This…

VulnCve 2025 14009

critical System graph security Trivy conf 1.00 CVE-2025-64459: django 5.1.8 — futureagi/ee/requirements.txt

django: Django SQL injection An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8. The methods `QuerySet.filter()`, `QuerySet.exclude()`, and `QuerySet.get()`, and the class `Q()`, are subject to SQL injection when using a suitably crafted dictionary, with dictiona…

VulnCve 2025 64459

critical System graph security Trivy conf 1.00 CVE-2025-64459: django 5.1.8 — futureagi/requirements.txt

django: Django SQL injection An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8. The methods `QuerySet.filter()`, `QuerySet.exclude()`, and `QuerySet.get()`, and the class `Q()`, are subject to SQL injection when using a suitably crafted dictionary, with dictiona…

VulnCve 2025 64459

critical System graph security Trivy conf 1.00 CVE-2025-64459: django 5.1.8 — futureagi/uv.lock

django: Django SQL injection An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8. The methods `QuerySet.filter()`, `QuerySet.exclude()`, and `QuerySet.get()`, and the class `Q()`, are subject to SQL injection when using a suitably crafted dictionary, with dictiona…

VulnCve 2025 64459

critical System graph security Trivy conf 1.00 CVE-2025-7783: form-data 4.0.0 — frontend/package-lock.json

form-data: Unsafe random function in form-data Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution (HPP). This vulnerability is associated with program files lib/form_data.Js. This issue affects form-data: < 2.5.4, 3.0.0 - 3.0.3, 4.0.0 - 4.0.3. Package:…

VulnCve 2025 7783

critical System graph security Trivy conf 1.00 CVE-2025-7783: form-data 4.0.0 — frontend/yarn.lock

form-data: Unsafe random function in form-data Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution (HPP). This vulnerability is associated with program files lib/form_data.Js. This issue affects form-data: < 2.5.4, 3.0.0 - 3.0.3, 4.0.0 - 4.0.3. Package:…

VulnCve 2025 7783

critical System graph security Trivy conf 1.00 CVE-2026-27212: swiper 12.0.3 — frontend/yarn.lock

Prototype pollution in swiper Swiper is a free and mobile touch slider with hardware accelerated transitions and native behavior. Versions 6.5.1 through 12.1.1 have a Prototype pollution vulnerability. The vulnerability resides in line 94 of shared/utils.mjs, where the indexOf() function is used t…

VulnCve 2026 27212

critical System graph security Trivy conf 1.00 CVE-2026-27962: authlib 1.6.6 — futureagi/ee/requirements.txt

authlib: Authlib: Authentication bypass due to JWK Header Injection vulnerability Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.9, a JWK Header Injection vulnerability in authlib's JWS implementation allows an unauthenticated attacker to forge arbi…

VulnCve 2026 27962

critical System graph security Trivy conf 1.00 CVE-2026-27962: authlib 1.6.6 — futureagi/uv.lock

authlib: Authlib: Authentication bypass due to JWK Header Injection vulnerability Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.9, a JWK Header Injection vulnerability in authlib's JWS implementation allows an unauthenticated attacker to forge arbi…

VulnCve 2026 27962

critical System graph security Trivy conf 1.00 CVE-2026-33186: google.golang.org/grpc v1.67.1 — fi-collector/go.mod

google.golang.org/grpc/grpc-go: google.golang.org/grpc/authz: gRPC-Go: Authorization bypass due to improper HTTP/2 path validation gRPC-Go is the Go language implementation of gRPC. Versions prior to 1.79.3 have an authorization bypass resulting from improper input validation of the HTTP/2 `:path`…

VulnCve 2026 33186

critical System graph security Trivy conf 1.00 CVE-2026-33815: github.com/jackc/pgx/v5 v5.7.4 — fi-collector/go.mod

github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability Memory-safety vulnerability in github.com/jackc/pgx/v5. Package: github.com/jackc/pgx/v5 Installed: v5.7.4 Fixed in: 5.9.0 Severity: CRITICAL Fix: Upgrade github.com/jackc/pgx/v5 to 5.9.0

VulnCve 2026 33815

critical System graph security Trivy conf 1.00 CVE-2026-33816: github.com/jackc/pgx/v5 v5.7.4 — fi-collector/go.mod

github.com/jackc/pgx/v5: github.com/jackc/pgx: Memory-safety vulnerability Memory-safety vulnerability in github.com/jackc/pgx/v5. Package: github.com/jackc/pgx/v5 Installed: v5.7.4 Fixed in: 5.9.0 Severity: CRITICAL Fix: Upgrade github.com/jackc/pgx/v5 to 5.9.0

VulnCve 2026 33816

critical System graph security Trivy conf 1.00 CVE-2026-35030: litellm 1.81.11 — futureagi/ee/requirements.txt

litellm: LiteLLM: Authentication bypass and privilege escalation via OIDC userinfo cache key collision LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.0, when JWT authentication is enabled (enable_jwt_auth: true), the OIDC userinfo cache uses tok…

VulnCve 2026 35030

critical System graph security Trivy conf 1.00 CVE-2026-35030: litellm 1.81.11 — futureagi/requirements.txt

litellm: LiteLLM: Authentication bypass and privilege escalation via OIDC userinfo cache key collision LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.0, when JWT authentication is enabled (enable_jwt_auth: true), the OIDC userinfo cache uses tok…

VulnCve 2026 35030

critical System graph security Trivy conf 1.00 CVE-2026-35030: litellm 1.81.11 — futureagi/uv.lock

litellm: LiteLLM: Authentication bypass and privilege escalation via OIDC userinfo cache key collision LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.0, when JWT authentication is enabled (enable_jwt_auth: true), the OIDC userinfo cache uses tok…

VulnCve 2026 35030

critical System graph security Trivy conf 1.00 CVE-2026-37004: litellm 1.81.11 — futureagi/ee/requirements.txt

LiteLLM vulnerable to server-side template injection in the /prompts/test endpoint BerriAI litellm <=1.82.4 is vulnerable to Server-Side Template Injection (SSTI), which allows unauthenticated remote attackers to execute arbitrary OS commands via a crafted dotprompt_content parameter in the /promp…

VulnCve 2026 37004

critical System graph security Trivy conf 1.00 CVE-2026-37004: litellm 1.81.11 — futureagi/requirements.txt

LiteLLM vulnerable to server-side template injection in the /prompts/test endpoint BerriAI litellm <=1.82.4 is vulnerable to Server-Side Template Injection (SSTI), which allows unauthenticated remote attackers to execute arbitrary OS commands via a crafted dotprompt_content parameter in the /promp…

VulnCve 2026 37004

critical System graph security Trivy conf 1.00 CVE-2026-37004: litellm 1.81.11 — futureagi/uv.lock

LiteLLM vulnerable to server-side template injection in the /prompts/test endpoint BerriAI litellm <=1.82.4 is vulnerable to Server-Side Template Injection (SSTI), which allows unauthenticated remote attackers to execute arbitrary OS commands via a crafted dotprompt_content parameter in the /promp…

VulnCve 2026 37004

critical System graph security Trivy conf 1.00 CVE-2026-41242: protobufjs 7.5.4 — frontend/package-lock.json

protobufjs: protobufjs: Arbitrary code execution via injected protobuf definition type fields protobufjs compiles protobuf definitions into JavaScript (JS) functions. In versions prior to 8.0.1 and 7.5.5, attackers can inject arbitrary code in the "type" fields of protobuf definitions, which will …

VulnCve 2026 41242

critical System graph security Trivy conf 1.00 CVE-2026-41242: protobufjs 7.5.4 — frontend/yarn.lock

protobufjs: protobufjs: Arbitrary code execution via injected protobuf definition type fields protobufjs compiles protobuf definitions into JavaScript (JS) functions. In versions prior to 8.0.1 and 7.5.5, attackers can inject arbitrary code in the "type" fields of protobuf definitions, which will …

VulnCve 2026 41242

critical System graph security Trivy conf 1.00 CVE-2026-45829: chromadb 1.5.5 — futureagi/ee/requirements.txt

chromadb: ChromaDB Python Project: Arbitrary code execution via pre-authentication code injection A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a maliciou…

VulnCve 2026 45829

critical System graph security Trivy conf 1.00 CVE-2026-45829: chromadb 1.5.5 — futureagi/uv.lock

chromadb: ChromaDB Python Project: Arbitrary code execution via pre-authentication code injection A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a maliciou…

VulnCve 2026 45829

critical System graph security Trivy conf 1.00 CVE-2026-45833: chromadb 1.5.5 — futureagi/ee/requirements.txt

chromadb: ChromaDB: Arbitrary Code Execution via Code Injection A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in…

VulnCve 2026 45833

critical System graph security Trivy conf 1.00 CVE-2026-45833: chromadb 1.5.5 — futureagi/uv.lock

chromadb: ChromaDB: Arbitrary Code Execution via Code Injection A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server by sending a malicious model repository and trust_remote_code set to true in…

VulnCve 2026 45833

critical System graph security Trivy conf 1.00 CVE-2026-49468: litellm 1.81.11 — futureagi/ee/requirements.txt

litellm: LiteLLM: Authentication Bypass via Host Header Injection LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.84.0, a Host-header parsing flaw in the LiteLLM proxy could, under specific conditions, allow unauthenticated access to protected manag…

VulnCve 2026 49468

critical System graph security Trivy conf 1.00 CVE-2026-49468: litellm 1.81.11 — futureagi/requirements.txt

litellm: LiteLLM: Authentication Bypass via Host Header Injection LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.84.0, a Host-header parsing flaw in the LiteLLM proxy could, under specific conditions, allow unauthenticated access to protected manag…

VulnCve 2026 49468

critical System graph security Trivy conf 1.00 CVE-2026-49468: litellm 1.81.11 — futureagi/uv.lock

litellm: LiteLLM: Authentication Bypass via Host Header Injection LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.84.0, a Host-header parsing flaw in the LiteLLM proxy could, under specific conditions, allow unauthenticated access to protected manag…

VulnCve 2026 49468

critical System graph security Trivy conf 1.00 CVE-2026-59873: tar 6.2.1 — frontend/package-lock.json

tar: node-tar: Denial of Service via crafted gzip bomb node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.19, node-tar does not enforce hard upper bounds on total decompressed data, entry counts, or decompression ratio in extraction and parsing paths such as src/extract.ts, a…

VulnCve 2026 59873

critical System graph security Trivy conf 1.00 CVE-2026-59873: tar 6.2.1 — frontend/yarn.lock

tar: node-tar: Denial of Service via crafted gzip bomb node-tar is a tar archive manipulation library for Node.js. Prior to 7.5.19, node-tar does not enforce hard upper bounds on total decompressed data, entry counts, or decompression ratio in extraction and parsing paths such as src/extract.ts, a…

VulnCve 2026 59873

critical System graph security Trivy conf 1.00 CVE-2026-78683: nltk 3.9.2 — futureagi/ee/requirements.txt

NLTK before 3.10.0 (affected versions <=3.9.4) contains an unsafe pick ... NLTK before 3.10.0 (affected versions <=3.9.4) contains an unsafe pickle deserialization vulnerability in the TransitionParser.parse() method (nltk/parse/transitionparser.py). The method calls pickle_load() with the default…

VulnCve 2026 78683

critical System graph security Trivy conf 1.00 CVE-2026-78683: nltk 3.9.2 — futureagi/requirements.txt

NLTK before 3.10.0 (affected versions <=3.9.4) contains an unsafe pick ... NLTK before 3.10.0 (affected versions <=3.9.4) contains an unsafe pickle deserialization vulnerability in the TransitionParser.parse() method (nltk/parse/transitionparser.py). The method calls pickle_load() with the default…

VulnCve 2026 78683

critical System graph security Trivy conf 1.00 CVE-2026-78683: nltk 3.9.2 — futureagi/uv.lock

NLTK before 3.10.0 (affected versions <=3.9.4) contains an unsafe pick ... NLTK before 3.10.0 (affected versions <=3.9.4) contains an unsafe pickle deserialization vulnerability in the TransitionParser.parse() method (nltk/parse/transitionparser.py). The method calls pickle_load() with the default…

VulnCve 2026 78683

critical System graph security Trivy conf 1.00 CVE-2026-79657: nltk 3.9.2 — futureagi/ee/requirements.txt

NLTK versions before 3.10.3 contain a remote code execution vulnerabil ... NLTK versions before 3.10.3 contain a remote code execution vulnerability in allowlisted pickle loaders that trust entire module namespaces instead of specific safe callables. Attackers can craft malicious pickle payloads i…

VulnCve 2026 79657

critical System graph security Trivy conf 1.00 CVE-2026-79657: nltk 3.9.2 — futureagi/requirements.txt

NLTK versions before 3.10.3 contain a remote code execution vulnerabil ... NLTK versions before 3.10.3 contain a remote code execution vulnerability in allowlisted pickle loaders that trust entire module namespaces instead of specific safe callables. Attackers can craft malicious pickle payloads i…

VulnCve 2026 79657

critical System graph security Trivy conf 1.00 CVE-2026-79657: nltk 3.9.2 — futureagi/uv.lock

NLTK versions before 3.10.3 contain a remote code execution vulnerabil ... NLTK versions before 3.10.3 contain a remote code execution vulnerability in allowlisted pickle loaders that trust entire module namespaces instead of specific safe callables. Attackers can craft malicious pickle payloads i…

VulnCve 2026 79657

critical System graph security Trivy conf 1.00 CVE-2026-79675: nltk 3.9.2 — futureagi/ee/requirements.txt

nltk: NLTK before 3.10.3 JVM Argument Injection via Per-Call Options NLTK before 3.10.3 fails to validate JVM options passed through the per-call options parameter in the java() function, allowing attackers to inject dangerous JVM flags. Attackers can supply malicious options like -agentpath, -jav…

VulnCve 2026 79675

critical System graph security Trivy conf 1.00 CVE-2026-79675: nltk 3.9.2 — futureagi/requirements.txt

nltk: NLTK before 3.10.3 JVM Argument Injection via Per-Call Options NLTK before 3.10.3 fails to validate JVM options passed through the per-call options parameter in the java() function, allowing attackers to inject dangerous JVM flags. Attackers can supply malicious options like -agentpath, -jav…

VulnCve 2026 79675

critical System graph security Trivy conf 1.00 CVE-2026-79675: nltk 3.9.2 — futureagi/uv.lock

nltk: NLTK before 3.10.3 JVM Argument Injection via Per-Call Options NLTK before 3.10.3 fails to validate JVM options passed through the per-call options parameter in the java() function, allowing attackers to inject dangerous JVM flags. Attackers can supply malicious options like -agentpath, -jav…

VulnCve 2026 79675

critical System graph security Trivy conf 1.00 Secret leak: GitLab Personal Access Token — .gitleaks.toml

Trivy detected a possible secret in `.gitleaks.toml`. Rule: gitlab-pat Severity: CRITICAL Match (redacted): '''**************************''', # literal test input for secret-detect Action: rotate the credential and remove it from the repo. Use a secrets manager or environment variables.

Secret

critical System graph security Trivy conf 1.00 Secret leak: Google (GCP) Service-account — frontend/src/sections/settings/integrations/AddIntegrationWizard/credentials/CloudStorageCredentials.jsx

Trivy detected a possible secret in `frontend/src/sections/settings/integrations/AddIntegrationWizard/credentials/CloudStorageCredentials.jsx`. Rule: gcp-service-account Severity: CRITICAL Match (redacted): placeholder='{*************************, ...}' Action: rotate the credential a…

Secret

critical System graph security Trivy conf 1.00 Secret leak: Google (GCP) Service-account — frontend/src/sections/settings/integrations/AddIntegrationWizard/credentials/MessageQueueCredentials.jsx

Trivy detected a possible secret in `frontend/src/sections/settings/integrations/AddIntegrationWizard/credentials/MessageQueueCredentials.jsx`. Rule: gcp-service-account Severity: CRITICAL Match (redacted): placeholder='{*************************, ...}' Action: rotate the credential a…

Secret

critical System graph security Trivy conf 1.00 Secret leak: Stripe Secret Key — .gitleaks.toml

Trivy detected a possible secret in `.gitleaks.toml`. Rule: stripe-secret-token Severity: CRITICAL Match (redacted): '''********************************''', Action: rotate the credential and remove it from the repo. Use a secrets manager or environment variables.

Secret

high System graph quality Integrity conf 1.00 Blocking `time.sleep(...)` inside `async def check_status` — futureagi/tfc/management/commands/debug_temporal.py:180

Sync I/O inside an async function blocks the event loop. While `time.sleep(...)` is running, *all* other coroutines on this loop are paused — silent throughput collapse under concurrency. Use the async equivalent (`httpx.AsyncClient`, `asyncio.sleep`, `aiofiles`) or wrap with `await asyncio.to_thre…

futureagi/tfc/management/commands/debug_temporal.py:180 Sync io in asyncPerformance

high System graph security Trivy conf 1.00 CVE-2024-1135: gunicorn 21.2.0 — futureagi/model_serving/requirements.txt

python-gunicorn: HTTP Request Smuggling due to improper validation of Transfer-Encoding headers Gunicorn fails to properly validate Transfer-Encoding headers, leading to HTTP Request Smuggling (HRS) vulnerabilities. By crafting requests with conflicting Transfer-Encoding headers, attackers can byp…

VulnCve 2024 1135

high System graph security Trivy conf 1.00 CVE-2024-11392: transformers 4.44.2 — futureagi/model_serving/requirements.txt

transformers: Hugging Face Transformers MobileViTV2 Deserialization of Untrusted Data Remote Code Execution Vulnerability Hugging Face Transformers MobileViTV2 Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary cod…

VulnCve 2024 11392

high System graph security Trivy conf 1.00 CVE-2024-11393: transformers 4.44.2 — futureagi/model_serving/requirements.txt

transformers: Hugging Face Transformers MaskFormer Model Deserialization of Untrusted Data Remote Code Execution Vulnerability Hugging Face Transformers MaskFormer Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arb…

VulnCve 2024 11393

high System graph security Trivy conf 1.00 CVE-2024-11394: transformers 4.44.2 — futureagi/model_serving/requirements.txt

transformers: Hugging Face Transformers Trax Model Deserialization of Untrusted Data Remote Code Execution Vulnerability Hugging Face Transformers Trax Model Deserialization of Untrusted Data Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code …

VulnCve 2024 11394

high System graph security Trivy conf 1.00 CVE-2024-23342: ecdsa 0.19.1 — futureagi/ee/requirements.txt

python-ecdsa: vulnerable to the Minerva attack The `ecdsa` PyPI package is a pure Python implementation of ECC (Elliptic Curve Cryptography) with support for ECDSA (Elliptic Curve Digital Signature Algorithm), EdDSA (Edwards-curve Digital Signature Algorithm) and ECDH (Elliptic Curve Diffie-Hellma…

VulnCve 2024 23342

high System graph security Trivy conf 1.00 CVE-2024-23342: ecdsa 0.19.1 — futureagi/requirements.txt

python-ecdsa: vulnerable to the Minerva attack The `ecdsa` PyPI package is a pure Python implementation of ECC (Elliptic Curve Cryptography) with support for ECDSA (Elliptic Curve Digital Signature Algorithm), EdDSA (Edwards-curve Digital Signature Algorithm) and ECDH (Elliptic Curve Diffie-Hellma…

VulnCve 2024 23342

high System graph security Trivy conf 1.00 CVE-2024-23342: ecdsa 0.19.1 — futureagi/uv.lock

python-ecdsa: vulnerable to the Minerva attack The `ecdsa` PyPI package is a pure Python implementation of ECC (Elliptic Curve Cryptography) with support for ECDSA (Elliptic Curve Digital Signature Algorithm), EdDSA (Edwards-curve Digital Signature Algorithm) and ECDH (Elliptic Curve Diffie-Hellma…

VulnCve 2024 23342

high System graph security Trivy conf 1.00 CVE-2024-39338: axios 1.5.1 — frontend/package-lock.json

axios: axios: Server-Side Request Forgery axios 1.7.2 allows SSRF via unexpected behavior where requests for path relative URLs get processed as protocol relative URLs. Package: axios Installed: 1.5.1 Fixed in: 1.7.4 Severity: HIGH Fix: Upgrade axios to 1.7.4

VulnCve 2024 39338

high System graph security Trivy conf 1.00 CVE-2024-39338: axios 1.5.1 — frontend/yarn.lock

axios: axios: Server-Side Request Forgery axios 1.7.2 allows SSRF via unexpected behavior where requests for path relative URLs get processed as protocol relative URLs. Package: axios Installed: 1.5.1 Fixed in: 1.7.4 Severity: HIGH Fix: Upgrade axios to 1.7.4

VulnCve 2024 39338

high System graph security Trivy conf 1.00 CVE-2024-4367: pdfjs-dist 3.11.174 — frontend/package-lock.json

Mozilla: Arbitrary JavaScript execution in PDF.js A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11. Package: pdfjs-dist Installed…

VulnCve 2024 4367

high System graph security Trivy conf 1.00 CVE-2024-4367: pdfjs-dist 3.11.174 — frontend/yarn.lock

Mozilla: Arbitrary JavaScript execution in PDF.js A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11. Package: pdfjs-dist Installed…

VulnCve 2024 4367

high System graph security Trivy conf 1.00 CVE-2024-6827: gunicorn 21.2.0 — futureagi/model_serving/requirements.txt

gunicorn: HTTP Request Smuggling in benoitc/gunicorn Gunicorn version 21.2.0 does not properly validate the value of the 'Transfer-Encoding' header as specified in the RFC standards, which leads to the default fallback method of 'Content-Length,' making it vulnerable to TE.CL request smuggling. Th…

VulnCve 2024 6827

high System graph security Trivy conf 1.00 CVE-2025-27152: axios 1.5.1 — frontend/package-lock.json

axios: Possible SSRF and Credential Leakage via Absolute URL in axios Requests axios is a promise based HTTP client for the browser and node.js. The issue occurs when passing absolute URLs rather than protocol-relative URLs to axios. Even if ⁠baseURL is set, axios sends the request to the specifie…

VulnCve 2025 27152

high System graph security Trivy conf 1.00 CVE-2025-27152: axios 1.5.1 — frontend/yarn.lock

axios: Possible SSRF and Credential Leakage via Absolute URL in axios Requests axios is a promise based HTTP client for the browser and node.js. The issue occurs when passing absolute URLs rather than protocol-relative URLs to axios. Even if ⁠baseURL is set, axios sends the request to the specifie…

VulnCve 2025 27152

high System graph security Trivy conf 1.00 CVE-2025-57833: django 5.1.8 — futureagi/ee/requirements.txt

django: Django SQL injection in FilteredRelation column aliases An issue was discovered in Django 4.2 before 4.2.24, 5.1 before 5.1.12, and 5.2 before 5.2.6. FilteredRelation is subject to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the **kwa…

VulnCve 2025 57833

high System graph security Trivy conf 1.00 CVE-2025-57833: django 5.1.8 — futureagi/requirements.txt

django: Django SQL injection in FilteredRelation column aliases An issue was discovered in Django 4.2 before 4.2.24, 5.1 before 5.1.12, and 5.2 before 5.2.6. FilteredRelation is subject to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the **kwa…

VulnCve 2025 57833

high System graph security Trivy conf 1.00 CVE-2025-57833: django 5.1.8 — futureagi/uv.lock

django: Django SQL injection in FilteredRelation column aliases An issue was discovered in Django 4.2 before 4.2.24, 5.1 before 5.1.12, and 5.2 before 5.2.6. FilteredRelation is subject to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the **kwa…

VulnCve 2025 57833

high System graph security Trivy conf 1.00 CVE-2025-58754: axios 1.5.1 — frontend/package-lock.json

axios: Axios DoS via lack of data size check Axios is a promise based HTTP client for the browser and Node.js. When Axios starting in version 0.28.0 and prior to versions 0.30.2 and 1.12.0 runs on Node.js and is given a URL with the `data:` scheme, it does not perform HTTP. Instead, its Node http …

VulnCve 2025 58754

high System graph security Trivy conf 1.00 CVE-2025-58754: axios 1.5.1 — frontend/yarn.lock

axios: Axios DoS via lack of data size check Axios is a promise based HTTP client for the browser and Node.js. When Axios starting in version 0.28.0 and prior to versions 0.30.2 and 1.12.0 runs on Node.js and is given a URL with the `data:` scheme, it does not perform HTTP. Instead, its Node http …

VulnCve 2025 58754

high System graph security Trivy conf 1.00 CVE-2025-59681: django 5.1.8 — futureagi/ee/requirements.txt

django: Potential SQL injection in QuerySet.annotate(), alias(), aggregate(), and extra() on MySQL and MariaDB1 An issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13, and 5.2 before 5.2.7. QuerySet.annotate(), QuerySet.alias(), QuerySet.aggregate(), and QuerySet.extra() are subjec…

VulnCve 2025 59681

high System graph security Trivy conf 1.00 CVE-2025-59681: django 5.1.8 — futureagi/requirements.txt

django: Potential SQL injection in QuerySet.annotate(), alias(), aggregate(), and extra() on MySQL and MariaDB1 An issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13, and 5.2 before 5.2.7. QuerySet.annotate(), QuerySet.alias(), QuerySet.aggregate(), and QuerySet.extra() are subjec…

VulnCve 2025 59681

high System graph security Trivy conf 1.00 CVE-2025-59681: django 5.1.8 — futureagi/uv.lock

django: Potential SQL injection in QuerySet.annotate(), alias(), aggregate(), and extra() on MySQL and MariaDB1 An issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13, and 5.2 before 5.2.7. QuerySet.annotate(), QuerySet.alias(), QuerySet.aggregate(), and QuerySet.extra() are subjec…

VulnCve 2025 59681

high System graph security Trivy conf 1.00 CVE-2025-62727: starlette 0.46.2 — futureagi/model_serving/requirements.txt

starlette: Starlette DoS via Range header merging Starlette is a lightweight ASGI framework/toolkit. Starting in version 0.39.0 and prior to version 0.49.1 , an unauthenticated attacker can send a crafted HTTP Range header that triggers quadratic-time processing in Starlette's FileResponse Range p…

VulnCve 2025 62727

high System graph security Trivy conf 1.00 CVE-2025-64458: django 5.1.8 — futureagi/ee/requirements.txt

Django: Denial-of-service vulnerability in Django on Windows An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8. NFKC normalization in Python is slow on Windows. As a consequence, `django.http.HttpResponseRedirect`, `django.http.HttpResponsePermanentRedirect`, an…

VulnCve 2025 64458

high System graph security Trivy conf 1.00 CVE-2025-64458: django 5.1.8 — futureagi/requirements.txt

Django: Denial-of-service vulnerability in Django on Windows An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8. NFKC normalization in Python is slow on Windows. As a consequence, `django.http.HttpResponseRedirect`, `django.http.HttpResponsePermanentRedirect`, an…

VulnCve 2025 64458

high System graph security Trivy conf 1.00 CVE-2025-64458: django 5.1.8 — futureagi/uv.lock

Django: Denial-of-service vulnerability in Django on Windows An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8. NFKC normalization in Python is slow on Windows. As a consequence, `django.http.HttpResponseRedirect`, `django.http.HttpResponsePermanentRedirect`, an…

VulnCve 2025 64458

high System graph security Trivy conf 1.00 CVE-2025-66418: urllib3 2.2.2 — futureagi/model_serving/requirements.txt

urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.24 and prior to 2.6.0, the number of links in the decompression chain was unbounded allowing a malicious server to insert a virtually unlimi…

VulnCve 2025 66418

high System graph security Trivy conf 1.00 CVE-2025-66471: urllib3 2.2.2 — futureagi/model_serving/requirements.txt

urllib3: urllib3 Streaming API improperly handles highly compressed data urllib3 is a user-friendly HTTP client library for Python. Starting in version 1.0 and prior to 2.6.0, the Streaming API improperly handles highly compressed data. urllib3's streaming API is designed for the efficient handlin…

VulnCve 2025 66471

high System graph security Trivy conf 1.00 CVE-2025-67221: orjson 3.11.5 — futureagi/ee/requirements.txt

orjson: orjson: Denial of Service due to unbounded recursion with deeply nested JSON documents The orjson.dumps function in orjson thru 3.11.4 does not limit recursion for deeply nested JSON documents. Package: orjson Installed: 3.11.5 Fixed in: 3.11.6 Severity: HIGH Fix: Upgrade orjson to 3.11.6

VulnCve 2025 67221

high System graph security Trivy conf 1.00 CVE-2025-67221: orjson 3.11.5 — futureagi/requirements.txt

orjson: orjson: Denial of Service due to unbounded recursion with deeply nested JSON documents The orjson.dumps function in orjson thru 3.11.4 does not limit recursion for deeply nested JSON documents. Package: orjson Installed: 3.11.5 Fixed in: 3.11.6 Severity: HIGH Fix: Upgrade orjson to 3.11.6

VulnCve 2025 67221

high System graph security Trivy conf 1.00 CVE-2025-67221: orjson 3.11.5 — futureagi/uv.lock

orjson: orjson: Denial of Service due to unbounded recursion with deeply nested JSON documents The orjson.dumps function in orjson thru 3.11.4 does not limit recursion for deeply nested JSON documents. Package: orjson Installed: 3.11.5 Fixed in: 3.11.6 Severity: HIGH Fix: Upgrade orjson to 3.11.6

VulnCve 2025 67221

high System graph security Trivy conf 1.00 CVE-2025-71408: nltk 3.9.2 — futureagi/ee/requirements.txt

nltk: NLTK: Arbitrary Code Execution via Eval Injection in Collocations Module NLTK (Natural Language Toolkit) before version 3.9.3 contains an eval injection vulnerability in the nltk.collocations module that allows an attacker who controls command-line arguments to execute arbitrary Python code.…

VulnCve 2025 71408

high System graph security Trivy conf 1.00 CVE-2025-71408: nltk 3.9.2 — futureagi/requirements.txt

nltk: NLTK: Arbitrary Code Execution via Eval Injection in Collocations Module NLTK (Natural Language Toolkit) before version 3.9.3 contains an eval injection vulnerability in the nltk.collocations module that allows an attacker who controls command-line arguments to execute arbitrary Python code.…

VulnCve 2025 71408

high System graph security Trivy conf 1.00 CVE-2025-71408: nltk 3.9.2 — futureagi/uv.lock

nltk: NLTK: Arbitrary Code Execution via Eval Injection in Collocations Module NLTK (Natural Language Toolkit) before version 3.9.3 contains an eval injection vulnerability in the nltk.collocations module that allows an attacker who controls command-line arguments to execute arbitrary Python code.…

VulnCve 2025 71408

high System graph security Trivy conf 1.00 CVE-2026-0846: nltk 3.9.2 — futureagi/ee/requirements.txt

nltk: NLTK: Arbitrary file read via improper path validation in `filestring()` function A vulnerability in the `filestring()` function of the `nltk.util` module in nltk version 3.9.2 allows arbitrary file read due to improper validation of input paths. The function directly opens files specified b…

VulnCve 2026 0846

high System graph security Trivy conf 1.00 CVE-2026-0846: nltk 3.9.2 — futureagi/requirements.txt

nltk: NLTK: Arbitrary file read via improper path validation in `filestring()` function A vulnerability in the `filestring()` function of the `nltk.util` module in nltk version 3.9.2 allows arbitrary file read due to improper validation of input paths. The function directly opens files specified b…

VulnCve 2026 0846

high System graph security Trivy conf 1.00 CVE-2026-0846: nltk 3.9.2 — futureagi/uv.lock

nltk: NLTK: Arbitrary file read via improper path validation in `filestring()` function A vulnerability in the `filestring()` function of the `nltk.util` module in nltk version 3.9.2 allows arbitrary file read due to improper validation of input paths. The function directly opens files specified b…

VulnCve 2026 0846

high System graph security Trivy conf 1.00 CVE-2026-0847: nltk 3.9.2 — futureagi/ee/requirements.txt

nltk: NLTK: Arbitrary file read via path traversal vulnerability A vulnerability in NLTK versions up to and including 3.9.2 allows arbitrary file read via path traversal in multiple CorpusReader classes, including WordListCorpusReader, TaggedCorpusReader, and BracketParseCorpusReader. These classe…

VulnCve 2026 0847

high System graph security Trivy conf 1.00 CVE-2026-0847: nltk 3.9.2 — futureagi/requirements.txt

nltk: NLTK: Arbitrary file read via path traversal vulnerability A vulnerability in NLTK versions up to and including 3.9.2 allows arbitrary file read via path traversal in multiple CorpusReader classes, including WordListCorpusReader, TaggedCorpusReader, and BracketParseCorpusReader. These classe…

VulnCve 2026 0847

high System graph security Trivy conf 1.00 CVE-2026-0847: nltk 3.9.2 — futureagi/uv.lock

nltk: NLTK: Arbitrary file read via path traversal vulnerability A vulnerability in NLTK versions up to and including 3.9.2 allows arbitrary file read via path traversal in multiple CorpusReader classes, including WordListCorpusReader, TaggedCorpusReader, and BracketParseCorpusReader. These classe…

VulnCve 2026 0847

high System graph security Trivy conf 1.00 CVE-2026-12061: nltk 3.9.2 — futureagi/ee/requirements.txt

Natural Language Toolkit (NLTK): ReDoS in NLTK ReviewsCorpusReader FEATURES regex ### Summary `ReviewsCorpusReader` extracts feature annotations of the form *label* followed by a bracketed signed digit (e.g. a label then `[+2]`) from each review line, using the module-level `FEATURES` regex. The f…

VulnCve 2026 12061

high System graph security Trivy conf 1.00 CVE-2026-12061: nltk 3.9.2 — futureagi/requirements.txt

Natural Language Toolkit (NLTK): ReDoS in NLTK ReviewsCorpusReader FEATURES regex ### Summary `ReviewsCorpusReader` extracts feature annotations of the form *label* followed by a bracketed signed digit (e.g. a label then `[+2]`) from each review line, using the module-level `FEATURES` regex. The f…

VulnCve 2026 12061

high System graph security Trivy conf 1.00 CVE-2026-12061: nltk 3.9.2 — futureagi/uv.lock

Natural Language Toolkit (NLTK): ReDoS in NLTK ReviewsCorpusReader FEATURES regex ### Summary `ReviewsCorpusReader` extracts feature annotations of the form *label* followed by a bracketed signed digit (e.g. a label then `[+2]`) from each review line, using the module-level `FEATURES` regex. The f…

VulnCve 2026 12061

high System graph security Trivy conf 1.00 CVE-2026-12072: nltk 3.9.2 — futureagi/ee/requirements.txt

Natural Language Toolkit (NLTK): Path Traversal in NKJPCorpusReader leads to Arbitrary File Read and bypasses the nltk.pathsec sandbox (ENFORCE=True) ### Summary A path-traversal vulnerability in `NKJPCorpusReader` allows an attacker who can influence the `fileids` argument of its public rea…

VulnCve 2026 12072

high System graph security Trivy conf 1.00 CVE-2026-12072: nltk 3.9.2 — futureagi/requirements.txt

Natural Language Toolkit (NLTK): Path Traversal in NKJPCorpusReader leads to Arbitrary File Read and bypasses the nltk.pathsec sandbox (ENFORCE=True) ### Summary A path-traversal vulnerability in `NKJPCorpusReader` allows an attacker who can influence the `fileids` argument of its public rea…

VulnCve 2026 12072

high System graph security Trivy conf 1.00 CVE-2026-12072: nltk 3.9.2 — futureagi/uv.lock

Natural Language Toolkit (NLTK): Path Traversal in NKJPCorpusReader leads to Arbitrary File Read and bypasses the nltk.pathsec sandbox (ENFORCE=True) ### Summary A path-traversal vulnerability in `NKJPCorpusReader` allows an attacker who can influence the `fileids` argument of its public rea…

VulnCve 2026 12072

high System graph security Trivy conf 1.00 CVE-2026-12074: nltk 3.9.2 — futureagi/ee/requirements.txt

Natural Language Toolkit (NLTK) has path traversal in FramenetCorpusReader.frame() that allows arbitrary XML file read, bypassing the nltk.pathsec sandbox (ENFORCE=True) ### Summary `FramenetCorpusReader.frame(name)` interpolates a caller-supplied frame name into an XML file path that is read with…

VulnCve 2026 12074

high System graph security Trivy conf 1.00 CVE-2026-12074: nltk 3.9.2 — futureagi/requirements.txt

Natural Language Toolkit (NLTK) has path traversal in FramenetCorpusReader.frame() that allows arbitrary XML file read, bypassing the nltk.pathsec sandbox (ENFORCE=True) ### Summary `FramenetCorpusReader.frame(name)` interpolates a caller-supplied frame name into an XML file path that is read with…

VulnCve 2026 12074

high System graph security Trivy conf 1.00 CVE-2026-12074: nltk 3.9.2 — futureagi/uv.lock

Natural Language Toolkit (NLTK) has path traversal in FramenetCorpusReader.frame() that allows arbitrary XML file read, bypassing the nltk.pathsec sandbox (ENFORCE=True) ### Summary `FramenetCorpusReader.frame(name)` interpolates a caller-supplied frame name into an XML file path that is read with…

VulnCve 2026 12074

high System graph security Trivy conf 1.00 CVE-2026-12075: nltk 3.9.2 — futureagi/ee/requirements.txt

Natural Language Toolkit (NLTK): DNS-rebinding SSRF filter bypass in nltk.pathsec.urlopen (nltk.download / nltk.data.load) defeats ENFORCE mode ### Summary `nltk.pathsec` provides an SSRF filter that NLTK documents as a security control, blocking loopback, private, link-local, and multicast ranges…

VulnCve 2026 12075

high System graph security Trivy conf 1.00 CVE-2026-12075: nltk 3.9.2 — futureagi/requirements.txt

Natural Language Toolkit (NLTK): DNS-rebinding SSRF filter bypass in nltk.pathsec.urlopen (nltk.download / nltk.data.load) defeats ENFORCE mode ### Summary `nltk.pathsec` provides an SSRF filter that NLTK documents as a security control, blocking loopback, private, link-local, and multicast ranges…

VulnCve 2026 12075

high System graph security Trivy conf 1.00 CVE-2026-12075: nltk 3.9.2 — futureagi/uv.lock

Natural Language Toolkit (NLTK): DNS-rebinding SSRF filter bypass in nltk.pathsec.urlopen (nltk.download / nltk.data.load) defeats ENFORCE mode ### Summary `nltk.pathsec` provides an SSRF filter that NLTK documents as a security control, blocking loopback, private, link-local, and multicast ranges…

VulnCve 2026 12075

high System graph security Trivy conf 1.00 CVE-2026-12143: form-data 4.0.0 — frontend/package-lock.json

form-data: form-data: Form field override via CRLF injection form-data is a library for creating readable multipart/form-data streams. In versions through 4.0.5, the `field` argument to `FormData#append` and the `filename` option are concatenated verbatim into the `Content-Disposition` header with…

VulnCve 2026 12143

high System graph security Trivy conf 1.00 CVE-2026-12143: form-data 4.0.0 — frontend/yarn.lock

form-data: form-data: Form field override via CRLF injection form-data is a library for creating readable multipart/form-data streams. In versions through 4.0.5, the `field` argument to `FormData#append` and the `filename` option are concatenated verbatim into the `Content-Disposition` header with…

VulnCve 2026 12143

high System graph security Trivy conf 1.00 CVE-2026-13149: brace-expansion 1.1.11 — frontend/package-lock.json

brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity brace-expansion through 5.0.6 is vulnerable to denial of service. The expand() function exhibits exponential-time complexity in the number of consecutive non-expanding '{}' brace groups. An attacker who passes a…

VulnCve 2026 13149

high System graph security Trivy conf 1.00 CVE-2026-13149: brace-expansion 2.0.1 — frontend/package-lock.json

brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity brace-expansion through 5.0.6 is vulnerable to denial of service. The expand() function exhibits exponential-time complexity in the number of consecutive non-expanding '{}' brace groups. An attacker who passes a…

VulnCve 2026 13149

high System graph security Trivy conf 1.00 CVE-2026-13149: brace-expansion 2.0.1 — frontend/yarn.lock

brace-expansion: Brace-expansion: Denial of Service due to exponential-time complexity brace-expansion through 5.0.6 is vulnerable to denial of service. The expand() function exhibits exponential-time complexity in the number of consecutive non-expanding '{}' brace groups. An attacker who passes a…

VulnCve 2026 13149

high System graph security Trivy conf 1.00 CVE-2026-13676: fast-uri 3.1.0 — futureagi/ee/agenthub/eval_orchestrator/test_mcp_server/package-lock.json

fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization fast-uri versions 2.3.1 through 3.1.2 and 4.0.0 fail to canonicalize Unicode (IDN) hostnames for HTTP-family URLs. The IDN conversion path calls a helper that does not exist on the global URL constructor, …

VulnCve 2026 13676

high System graph security Trivy conf 1.00 CVE-2026-14257: brace-expansion 1.1.11 — frontend/package-lock.json

brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function brace-expansion through 5.0.7 is vulnerable to denial of service via memory exhaustion. The expand() function limits the number of results with a max option (default 100,000) but does not bound the lengt…

VulnCve 2026 14257

high System graph security Trivy conf 1.00 CVE-2026-14257: brace-expansion 2.0.1 — frontend/package-lock.json

brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function brace-expansion through 5.0.7 is vulnerable to denial of service via memory exhaustion. The expand() function limits the number of results with a max option (default 100,000) but does not bound the lengt…

VulnCve 2026 14257

high System graph security Trivy conf 1.00 CVE-2026-14257: brace-expansion 2.0.1 — frontend/yarn.lock

brace-expansion: Brace-expansion: Denial of Service via memory exhaustion in expand() function brace-expansion through 5.0.7 is vulnerable to denial of service via memory exhaustion. The expand() function limits the number of results with a max option (default 100,000) but does not bound the lengt…

VulnCve 2026 14257

high System graph security Trivy conf 1.00 CVE-2026-16221: fast-uri 3.1.0 — futureagi/ee/agenthub/eval_orchestrator/test_mcp_server/package-lock.json

fast-uri: Fast-uri: Security policy bypass due to URL parsing inconsistency Impact: fast-uri versions from 2.3.1 through 4.1.0 (including the 3.x line up to 3.1.3 and the 2.x line up to 2.4.2) do not treat a literal backslash character (U+005C) as an authority delimiter. Node's native WHATWG URL p…

VulnCve 2026 16221

high System graph security Trivy conf 1.00 CVE-2026-18446: fast-uri 3.1.0 — futureagi/ee/agenthub/eval_orchestrator/test_mcp_server/package-lock.json

fast-uri: fast-uri: Host confusion vulnerability via backslash in URI authority fast-uri before 4.1.2, 3.1.5, and 2.4.4 requires a literal double forward slash to recognize a URI authority, so a reference that uses a backslash based introducer in place of it (backslash backslash, forward slash bac…

VulnCve 2026 18446

high System graph security Trivy conf 1.00 CVE-2026-21441: urllib3 2.2.2 — futureagi/model_serving/requirements.txt

urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) urllib3 is an HTTP client library for Python. urllib3's streaming API is designed for the efficient handling of large HTTP responses by reading the content in chunks, rather than loadin…

VulnCve 2026 21441

high System graph security Trivy conf 1.00 CVE-2026-22029: @remix-run/router 1.9.0 — frontend/package-lock.json

@remix-run/router: react-router: React Router vulnerable to XSS via Open Redirects React Router is a router for React. In @remix-run/router version prior to 1.23.2 and react-router 7.0.0 through 7.11.0, React Router (and Remix v1/v2) SPA open navigation redirects originating from loaders or action…

VulnCve 2026 22029

high System graph security Trivy conf 1.00 CVE-2026-22029: @remix-run/router 1.9.0 — frontend/yarn.lock

@remix-run/router: react-router: React Router vulnerable to XSS via Open Redirects React Router is a router for React. In @remix-run/router version prior to 1.23.2 and react-router 7.0.0 through 7.11.0, React Router (and Remix v1/v2) SPA open navigation redirects originating from loaders or action…

VulnCve 2026 22029

high System graph security Trivy conf 1.00 CVE-2026-23490: pyasn1 0.6.1 — futureagi/ee/requirements.txt

pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.2, a Denial-of-Service issue has been found that leads to memory exhaustion from malformed RELATIVE-OID with excessive continuation octets. This vulnera…

VulnCve 2026 23490

high System graph security Trivy conf 1.00 CVE-2026-23490: pyasn1 0.6.1 — futureagi/requirements.txt

pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.2, a Denial-of-Service issue has been found that leads to memory exhaustion from malformed RELATIVE-OID with excessive continuation octets. This vulnera…

VulnCve 2026 23490

high System graph security Trivy conf 1.00 CVE-2026-23490: pyasn1 0.6.1 — futureagi/uv.lock

pyasn1: pyasn1: Denial of Service due to memory exhaustion from malformed RELATIVE-OID pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.2, a Denial-of-Service issue has been found that leads to memory exhaustion from malformed RELATIVE-OID with excessive continuation octets. This vulnera…

VulnCve 2026 23490

high System graph security Trivy conf 1.00 CVE-2026-23745: tar 6.2.1 — frontend/package-lock.json

node-tar: tar: node-tar: Arbitrary file overwrite and symlink poisoning via unsanitized linkpaths in archives node-tar is a Tar for Node.js. The node-tar library (<= 7.5.2) fails to sanitize the linkpath of Link (hardlink) and SymbolicLink entries when preservePaths is false (the default secure be…

VulnCve 2026 23745

high System graph security Trivy conf 1.00 CVE-2026-23745: tar 6.2.1 — frontend/yarn.lock

node-tar: tar: node-tar: Arbitrary file overwrite and symlink poisoning via unsanitized linkpaths in archives node-tar is a Tar for Node.js. The node-tar library (<= 7.5.2) fails to sanitize the linkpath of Link (hardlink) and SymbolicLink entries when preservePaths is false (the default secure be…

VulnCve 2026 23745

high System graph security Trivy conf 1.00 CVE-2026-23950: tar 6.2.1 — frontend/package-lock.json

node-tar: tar: node-tar: Arbitrary file overwrite via Unicode path collision race condition node-tar,a Tar for Node.js, has a race condition vulnerability in versions up to and including 7.5.3. This is due to an incomplete handling of Unicode path collisions in the `path-reservations` system. On c…

VulnCve 2026 23950

high System graph security Trivy conf 1.00 CVE-2026-23950: tar 6.2.1 — frontend/yarn.lock

node-tar: tar: node-tar: Arbitrary file overwrite via Unicode path collision race condition node-tar,a Tar for Node.js, has a race condition vulnerability in versions up to and including 7.5.3. This is due to an incomplete handling of Unicode path collisions in the `path-reservations` system. On c…

VulnCve 2026 23950

high System graph security Trivy conf 1.00 CVE-2026-24842: tar 6.2.1 — frontend/package-lock.json

node-tar: tar: node-tar: Arbitrary file creation via path traversal bypass in hardlink security check node-tar,a Tar for Node.js, contains a vulnerability in versions prior to 7.5.7 where the security check for hardlink entries uses different path resolution semantics than the actual hardlink crea…

VulnCve 2026 24842

high System graph security Trivy conf 1.00 CVE-2026-24842: tar 6.2.1 — frontend/yarn.lock

node-tar: tar: node-tar: Arbitrary file creation via path traversal bypass in hardlink security check node-tar,a Tar for Node.js, contains a vulnerability in versions prior to 7.5.7 where the security check for hardlink entries uses different path resolution semantics than the actual hardlink crea…

VulnCve 2026 24842

high System graph security Trivy conf 1.00 CVE-2026-25087: pyarrow 22.0.0 — futureagi/ee/requirements.txt

apache-arrow: Apache Arrow C++: Denial of Service via Use After Free vulnerability when reading IPC files Use After Free vulnerability in Apache Arrow C++. This issue affects Apache Arrow C++ from 15.0.0 through 23.0.0. It can be triggered when reading an Arrow IPC file (but not an IPC stream) wi…

VulnCve 2026 25087

high System graph security Trivy conf 1.00 CVE-2026-25087: pyarrow 22.0.0 — futureagi/uv.lock

apache-arrow: Apache Arrow C++: Denial of Service via Use After Free vulnerability when reading IPC files Use After Free vulnerability in Apache Arrow C++. This issue affects Apache Arrow C++ from 15.0.0 through 23.0.0. It can be triggered when reading an Arrow IPC file (but not an IPC stream) wi…

VulnCve 2026 25087

high System graph security Trivy conf 1.00 CVE-2026-25639: axios 1.5.1 — frontend/package-lock.json

axios: Axios affected by Denial of Service via __proto__ Key in mergeConfig Axios is a promise based HTTP client for the browser and Node.js. Prior to versions 0.30.3 and 1.13.5, the mergeConfig function in axios crashes with a TypeError when processing configuration objects containing __proto__ a…

VulnCve 2026 25639

high System graph security Trivy conf 1.00 CVE-2026-25639: axios 1.5.1 — frontend/yarn.lock

axios: Axios affected by Denial of Service via __proto__ Key in mergeConfig Axios is a promise based HTTP client for the browser and Node.js. Prior to versions 0.30.3 and 1.13.5, the mergeConfig function in axios crashes with a TypeError when processing configuration objects containing __proto__ a…

VulnCve 2026 25639

high System graph security Trivy conf 1.00 CVE-2026-25681: golang.org/x/net v0.49.0 — fi-collector/go.mod

golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML before …

VulnCve 2026 25681

high System graph security Trivy conf 1.00 CVE-2026-25990: pillow 10.4.0 — futureagi/model_serving/requirements.txt

pillow: Pillow: Out-of-bounds Write via Specially Crafted PSD Image Pillow is a Python imaging library. From 10.3.0 to before 12.1.1, an out-of-bounds write may be triggered when loading a specially crafted PSD image. This vulnerability is fixed in 12.1.1. Package: pillow Installed: 10.4.0 Fixed …

VulnCve 2026 25990

high System graph security Trivy conf 1.00 CVE-2026-25990: pillow 12.1.0 — futureagi/ee/requirements.txt

pillow: Pillow: Out-of-bounds Write via Specially Crafted PSD Image Pillow is a Python imaging library. From 10.3.0 to before 12.1.1, an out-of-bounds write may be triggered when loading a specially crafted PSD image. This vulnerability is fixed in 12.1.1. Package: pillow Installed: 12.1.0 Fixed …

VulnCve 2026 25990

high System graph security Trivy conf 1.00 CVE-2026-25990: pillow 12.1.0 — futureagi/requirements.txt

pillow: Pillow: Out-of-bounds Write via Specially Crafted PSD Image Pillow is a Python imaging library. From 10.3.0 to before 12.1.1, an out-of-bounds write may be triggered when loading a specially crafted PSD image. This vulnerability is fixed in 12.1.1. Package: pillow Installed: 12.1.0 Fixed …

VulnCve 2026 25990

high System graph security Trivy conf 1.00 CVE-2026-25990: pillow 12.1.0 — futureagi/uv.lock

pillow: Pillow: Out-of-bounds Write via Specially Crafted PSD Image Pillow is a Python imaging library. From 10.3.0 to before 12.1.1, an out-of-bounds write may be triggered when loading a specially crafted PSD image. This vulnerability is fixed in 12.1.1. Package: pillow Installed: 12.1.0 Fixed …

VulnCve 2026 25990

high System graph security Trivy conf 1.00 CVE-2026-26209: cbor2 5.8.0 — futureagi/ee/requirements.txt

cbor2: cbor2: Denial of Service due to uncontrolled recursion via crafted CBOR payloads cbor2 provides encoding and decoding for the Concise Binary Object Representation (CBOR) serialization format. Versions prior to 5.9.0 are vulnerable to a Denial of Service (DoS) attack caused by uncontrolled r…

VulnCve 2026 26209

high System graph security Trivy conf 1.00 CVE-2026-26209: cbor2 5.8.0 — futureagi/requirements.txt

cbor2: cbor2: Denial of Service due to uncontrolled recursion via crafted CBOR payloads cbor2 provides encoding and decoding for the Concise Binary Object Representation (CBOR) serialization format. Versions prior to 5.9.0 are vulnerable to a Denial of Service (DoS) attack caused by uncontrolled r…

VulnCve 2026 26209

high System graph security Trivy conf 1.00 CVE-2026-26209: cbor2 5.8.0 — futureagi/uv.lock

cbor2: cbor2: Denial of Service due to uncontrolled recursion via crafted CBOR payloads cbor2 provides encoding and decoding for the Concise Binary Object Representation (CBOR) serialization format. Versions prior to 5.9.0 are vulnerable to a Denial of Service (DoS) attack caused by uncontrolled r…

VulnCve 2026 26209

high System graph security Trivy conf 1.00 CVE-2026-26960: tar 6.2.1 — frontend/package-lock.json

node-tar: node-tar: Arbitrary file read/write via malicious archive hardlink creation node-tar is a full-featured Tar for Node.js. When using default options in versions 7.5.7 and below, an attacker-controlled archive can create a hardlink inside the extraction directory that points to a file outs…

VulnCve 2026 26960

high System graph security Trivy conf 1.00 CVE-2026-26960: tar 6.2.1 — frontend/yarn.lock

node-tar: node-tar: Arbitrary file read/write via malicious archive hardlink creation node-tar is a full-featured Tar for Node.js. When using default options in versions 7.5.7 and below, an attacker-controlled archive can create a hardlink inside the extraction directory that points to a file outs…

VulnCve 2026 26960

high System graph security Trivy conf 1.00 CVE-2026-26996: minimatch 3.1.2 — frontend/package-lock.json

minimatch: minimatch: Denial of Service via specially crafted glob patterns minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Versions 10.2.0 and below are vulnerable to Regular Expression Denial of Service (ReDoS) when a glob pattern contains …

VulnCve 2026 26996

high System graph security Trivy conf 1.00 CVE-2026-26996: minimatch 8.0.4 — frontend/yarn.lock

minimatch: minimatch: Denial of Service via specially crafted glob patterns minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Versions 10.2.0 and below are vulnerable to Regular Expression Denial of Service (ReDoS) when a glob pattern contains …

VulnCve 2026 26996

high System graph security Trivy conf 1.00 CVE-2026-27136: golang.org/x/net v0.49.0 — fi-collector/go.mod

golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass Parsing arbitrary HTML which is then rendered using Render can result in an unexpected HTML tree. This can be leveraged to execute XSS attacks in applications that attempt to sanitize input HTML befo…

VulnCve 2026 27136

high System graph security Trivy conf 1.00 CVE-2026-27903: minimatch 3.1.2 — frontend/package-lock.json

minimatch: minimatch: Denial of Service due to unbounded recursive backtracking via crafted glob patterns minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Prior to version 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.3, `matchOne(…

VulnCve 2026 27903

high System graph security Trivy conf 1.00 CVE-2026-27903: minimatch 8.0.4 — frontend/yarn.lock

minimatch: minimatch: Denial of Service due to unbounded recursive backtracking via crafted glob patterns minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Prior to version 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.3, `matchOne(…

VulnCve 2026 27903

high System graph security Trivy conf 1.00 CVE-2026-27904: minimatch 3.1.2 — frontend/package-lock.json

minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Prior to version 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.4, nested `*()` extglobs prod…

VulnCve 2026 27904

high System graph security Trivy conf 1.00 CVE-2026-27904: minimatch 8.0.4 — frontend/yarn.lock

minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions minimatch is a minimal matching utility for converting glob expressions into JavaScript RegExp objects. Prior to version 10.2.3, 9.0.7, 8.0.6, 7.4.8, 6.2.2, 5.1.8, 4.2.5, and 3.1.4, nested `*()` extglobs prod…

VulnCve 2026 27904

high System graph security Trivy conf 1.00 CVE-2026-28490: authlib 1.6.6 — futureagi/ee/requirements.txt

authlib: Authlib: Information disclosure due to cryptographic padding oracle in JWE RSA1_5 Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.9, a cryptographic padding oracle vulnerability was identified in the Authlib Python library concerning the imp…

VulnCve 2026 28490

high System graph security Trivy conf 1.00 CVE-2026-28490: authlib 1.6.6 — futureagi/uv.lock

authlib: Authlib: Information disclosure due to cryptographic padding oracle in JWE RSA1_5 Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.9, a cryptographic padding oracle vulnerability was identified in the Authlib Python library concerning the imp…

VulnCve 2026 28490

high System graph security Trivy conf 1.00 CVE-2026-28498: authlib 1.6.6 — futureagi/ee/requirements.txt

authlib: Authlib: Authentication bypass via forged OpenID Connect ID Tokens Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.9, a library-level vulnerability was identified in the Authlib Python library concerning the validation of OpenID Connect (OID…

VulnCve 2026 28498

high System graph security Trivy conf 1.00 CVE-2026-28498: authlib 1.6.6 — futureagi/uv.lock

authlib: Authlib: Authentication bypass via forged OpenID Connect ID Tokens Authlib is a Python library which builds OAuth and OpenID Connect servers. Prior to version 1.6.9, a library-level vulnerability was identified in the Authlib Python library concerning the validation of OpenID Connect (OID…

VulnCve 2026 28498

high System graph security Trivy conf 1.00 CVE-2026-28802: authlib 1.6.6 — futureagi/ee/requirements.txt

authlib: Authlib: Signature verification bypass via malicious JWT allows unauthorized access Authlib is a Python library which builds OAuth and OpenID Connect servers. From version 1.6.5 to before version 1.6.7, previous tests involving passing a malicious JWT containing alg: none and an empty sig…

VulnCve 2026 28802

high System graph security Trivy conf 1.00 CVE-2026-28802: authlib 1.6.6 — futureagi/uv.lock

authlib: Authlib: Signature verification bypass via malicious JWT allows unauthorized access Authlib is a Python library which builds OAuth and OpenID Connect servers. From version 1.6.5 to before version 1.6.7, previous tests involving passing a malicious JWT containing alg: none and an empty sig…

VulnCve 2026 28802

high System graph security Trivy conf 1.00 CVE-2026-29786: tar 6.2.1 — frontend/package-lock.json

node-tar: hardlink path traversal via drive-relative linkpath node-tar is a full-featured Tar for Node.js. Prior to version 7.5.10, tar can be tricked into creating a hardlink that points outside the extraction directory by using a drive-relative link target such as C:../target.txt, which enables …

VulnCve 2026 29786

high System graph security Trivy conf 1.00 CVE-2026-29786: tar 6.2.1 — frontend/yarn.lock

node-tar: hardlink path traversal via drive-relative linkpath node-tar is a full-featured Tar for Node.js. Prior to version 7.5.10, tar can be tricked into creating a hardlink that points outside the extraction directory by using a drive-relative link target such as C:../target.txt, which enables …

VulnCve 2026 29786

high System graph security Trivy conf 1.00 CVE-2026-30922: pyasn1 0.6.1 — futureagi/ee/requirements.txt

pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the `pyasn1` library is vulnerable to a Denial of Service (DoS) attack caused by uncontrolled recursion when decoding ASN.1 data with deeply nested structures. An at…

VulnCve 2026 30922

high System graph security Trivy conf 1.00 CVE-2026-30922: pyasn1 0.6.1 — futureagi/requirements.txt

pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the `pyasn1` library is vulnerable to a Denial of Service (DoS) attack caused by uncontrolled recursion when decoding ASN.1 data with deeply nested structures. An at…

VulnCve 2026 30922

high System graph security Trivy conf 1.00 CVE-2026-30922: pyasn1 0.6.1 — futureagi/uv.lock

pyasn1: pyasn1 Vulnerable to Denial of Service via Unbounded Recursion pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.3, the `pyasn1` library is vulnerable to a Denial of Service (DoS) attack caused by uncontrolled recursion when decoding ASN.1 data with deeply nested structures. An at…

VulnCve 2026 30922

high System graph security Trivy conf 1.00 CVE-2026-31802: tar 6.2.1 — frontend/package-lock.json

tar: tar: File overwrite via drive-relative symlink traversal node-tar is a full-featured Tar for Node.js. Prior to version 7.5.11, tar (npm) can be tricked into creating a symlink that points outside the extraction directory by using a drive-relative symlink target such as C:../../../target.txt, …

VulnCve 2026 31802

high System graph security Trivy conf 1.00 CVE-2026-31802: tar 6.2.1 — frontend/yarn.lock

tar: tar: File overwrite via drive-relative symlink traversal node-tar is a full-featured Tar for Node.js. Prior to version 7.5.11, tar (npm) can be tricked into creating a symlink that points outside the extraction directory by using a drive-relative symlink target such as C:../../../target.txt, …

VulnCve 2026 31802

high System graph security Trivy conf 1.00 CVE-2026-31958: tornado 6.5.4 — futureagi/ee/requirements.txt

tornado-python: Tornado: Denial of Service via large multipart bodies Tornado is a Python web framework and asynchronous networking library. In versions of Tornado prior to 6.5.5, the only limit on the number of parts in multipart/form-data is the max_body_size setting (default 100MB). Since parsi…

VulnCve 2026 31958

high System graph security Trivy conf 1.00 CVE-2026-31958: tornado 6.5.4 — futureagi/requirements.txt

tornado-python: Tornado: Denial of Service via large multipart bodies Tornado is a Python web framework and asynchronous networking library. In versions of Tornado prior to 6.5.5, the only limit on the number of parts in multipart/form-data is the max_body_size setting (default 100MB). Since parsi…

VulnCve 2026 31958

high System graph security Trivy conf 1.00 CVE-2026-31958: tornado 6.5.4 — futureagi/uv.lock

tornado-python: Tornado: Denial of Service via large multipart bodies Tornado is a Python web framework and asynchronous networking library. In versions of Tornado prior to 6.5.5, the only limit on the number of parts in multipart/form-data is the max_body_size setting (default 100MB). Since parsi…

VulnCve 2026 31958

high System graph security Trivy conf 1.00 CVE-2026-32597: pyjwt 2.10.1 — futureagi/ee/requirements.txt

pyjwt: PyJWT accepts unknown `crit` header extensions (RFC 7515 §4.1.11 MUST violation) PyJWT is a JSON Web Token implementation in Python. Prior to 2.12.0, PyJWT does not validate the crit (Critical) Header Parameter defined in RFC 7515 §4.1.11. When a JWS token contains a crit array listing exte…

VulnCve 2026 32597

high System graph security Trivy conf 1.00 CVE-2026-32597: pyjwt 2.10.1 — futureagi/requirements.txt

pyjwt: PyJWT accepts unknown `crit` header extensions (RFC 7515 §4.1.11 MUST violation) PyJWT is a JSON Web Token implementation in Python. Prior to 2.12.0, PyJWT does not validate the crit (Critical) Header Parameter defined in RFC 7515 §4.1.11. When a JWS token contains a crit array listing exte…

VulnCve 2026 32597

high System graph security Trivy conf 1.00 CVE-2026-32597: pyjwt 2.10.1 — futureagi/uv.lock

pyjwt: PyJWT accepts unknown `crit` header extensions (RFC 7515 §4.1.11 MUST violation) PyJWT is a JSON Web Token implementation in Python. Prior to 2.12.0, PyJWT does not validate the crit (Critical) Header Parameter defined in RFC 7515 §4.1.11. When a JWS token contains a crit array listing exte…

VulnCve 2026 32597

high System graph security Trivy conf 1.00 CVE-2026-33231: nltk 3.9.2 — futureagi/ee/requirements.txt

nltk: NLTK: Denial of Service via unauthenticated remote shutdown NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing. In versions 3.9.3 and prior, `nltk.app.wordnet_app` allows unauth…

VulnCve 2026 33231

high System graph security Trivy conf 1.00 CVE-2026-33231: nltk 3.9.2 — futureagi/requirements.txt

nltk: NLTK: Denial of Service via unauthenticated remote shutdown NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing. In versions 3.9.3 and prior, `nltk.app.wordnet_app` allows unauth…

VulnCve 2026 33231

high System graph security Trivy conf 1.00 CVE-2026-33231: nltk 3.9.2 — futureagi/uv.lock

nltk: NLTK: Denial of Service via unauthenticated remote shutdown NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing. In versions 3.9.3 and prior, `nltk.app.wordnet_app` allows unauth…

VulnCve 2026 33231

high System graph security Trivy conf 1.00 CVE-2026-33236: nltk 3.9.2 — futureagi/ee/requirements.txt

nltk: NLTK: Arbitrary file overwrite and creation via path traversal in XML index files NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing. In versions 3.9.3 and prior, the NLTK downl…

VulnCve 2026 33236

high System graph security Trivy conf 1.00 CVE-2026-33236: nltk 3.9.2 — futureagi/requirements.txt

nltk: NLTK: Arbitrary file overwrite and creation via path traversal in XML index files NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing. In versions 3.9.3 and prior, the NLTK downl…

VulnCve 2026 33236

high System graph security Trivy conf 1.00 CVE-2026-33236: nltk 3.9.2 — futureagi/uv.lock

nltk: NLTK: Arbitrary file overwrite and creation via path traversal in XML index files NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing. In versions 3.9.3 and prior, the NLTK downl…

VulnCve 2026 33236

high System graph security Trivy conf 1.00 CVE-2026-33671: picomatch 2.3.1 — frontend/package-lock.json

picomatch: Picomatch: Regular Expression Denial of Service via crafted extglob patterns Picomatch is a glob matcher written JavaScript. Versions prior to 4.0.4, 3.0.2, and 2.3.2 are vulnerable to Regular Expression Denial of Service (ReDoS) when processing crafted extglob patterns. Certain pattern…

VulnCve 2026 33671

high System graph security Trivy conf 1.00 CVE-2026-33671: picomatch 2.3.1 — frontend/yarn.lock

picomatch: Picomatch: Regular Expression Denial of Service via crafted extglob patterns Picomatch is a glob matcher written JavaScript. Versions prior to 4.0.4, 3.0.2, and 2.3.2 are vulnerable to Regular Expression Denial of Service (ReDoS) when processing crafted extglob patterns. Certain pattern…

VulnCve 2026 33671

high System graph security Trivy conf 1.00 CVE-2026-33814: golang.org/x/net v0.49.0 — fi-collector/go.mod

net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a SETTINGS_MAX_FRAME_SIZE with a value of 0. Pack…

VulnCve 2026 33814

high System graph security Trivy conf 1.00 CVE-2026-34070: langchain-core 0.3.83 — futureagi/ee/requirements.txt

langchain: path traversal in legacy load_prompt functions in langchain-core LangChain is a framework for building agents and LLM-powered applications. Prior to version 1.2.22, multiple functions in langchain_core.prompts.loading read files from paths embedded in deserialized config dicts without v…

VulnCve 2026 34070

high System graph security Trivy conf 1.00 CVE-2026-34070: langchain-core 0.3.83 — futureagi/requirements.txt

langchain: path traversal in legacy load_prompt functions in langchain-core LangChain is a framework for building agents and LLM-powered applications. Prior to version 1.2.22, multiple functions in langchain_core.prompts.loading read files from paths embedded in deserialized config dicts without v…

VulnCve 2026 34070

high System graph security Trivy conf 1.00 CVE-2026-34070: langchain-core 0.3.83 — futureagi/uv.lock

langchain: path traversal in legacy load_prompt functions in langchain-core LangChain is a framework for building agents and LLM-powered applications. Prior to version 1.2.22, multiple functions in langchain_core.prompts.loading read files from paths embedded in deserialized config dicts without v…

VulnCve 2026 34070

high System graph security Trivy conf 1.00 CVE-2026-35029: litellm 1.81.11 — futureagi/ee/requirements.txt

litellm: LiteLLM: Remote code execution and privilege escalation via unrestricted proxy configuration endpoint LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.0, the /config/update endpoint does not enforce admin role authorization. A user who is…

VulnCve 2026 35029

high System graph security Trivy conf 1.00 CVE-2026-35029: litellm 1.81.11 — futureagi/requirements.txt

litellm: LiteLLM: Remote code execution and privilege escalation via unrestricted proxy configuration endpoint LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.0, the /config/update endpoint does not enforce admin role authorization. A user who is…

VulnCve 2026 35029

high System graph security Trivy conf 1.00 CVE-2026-35029: litellm 1.81.11 — futureagi/uv.lock

litellm: LiteLLM: Remote code execution and privilege escalation via unrestricted proxy configuration endpoint LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.83.0, the /config/update endpoint does not enforce admin role authorization. A user who is…

VulnCve 2026 35029

high System graph security Trivy conf 1.00 CVE-2026-35536: tornado 6.5.4 — futureagi/ee/requirements.txt

tornado: Tornado: Cookie attribute injection due to improper handling of cookie arguments In Tornado before 6.5.5, cookie attribute injection could occur because the domain, path, and samesite arguments to .RequestHandler.set_cookie were not checked for crafted characters. Package: tornado Instal…

VulnCve 2026 35536

high System graph security Trivy conf 1.00 CVE-2026-35536: tornado 6.5.4 — futureagi/requirements.txt

tornado: Tornado: Cookie attribute injection due to improper handling of cookie arguments In Tornado before 6.5.5, cookie attribute injection could occur because the domain, path, and samesite arguments to .RequestHandler.set_cookie were not checked for crafted characters. Package: tornado Instal…

VulnCve 2026 35536

high System graph security Trivy conf 1.00 CVE-2026-35536: tornado 6.5.4 — futureagi/uv.lock

tornado: Tornado: Cookie attribute injection due to improper handling of cookie arguments In Tornado before 6.5.5, cookie attribute injection could occur because the domain, path, and samesite arguments to .RequestHandler.set_cookie were not checked for crafted characters. Package: tornado Instal…

VulnCve 2026 35536

high System graph security Trivy conf 1.00 CVE-2026-39821: golang.org/x/net v0.49.0 — fi-collector/go.mod

golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label. For example, ToUnicode("xn--example-.com") incorrectly ret…

VulnCve 2026 39821

high System graph security Trivy conf 1.00 CVE-2026-39828: golang.org/x/crypto v0.48.0 — fi-collector/go.mod

golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions When an SSH server authentication callback returned PartialSuccessError with non-nil Permissions, those permissions were silently discarded, potentially dropping certificate restrictions …

VulnCve 2026 39828

high System graph security Trivy conf 1.00 CVE-2026-39829: golang.org/x/crypto v0.48.0 — fi-collector/go.mod

golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters The RSA and DSA public key parsers did not enforce size limits on key parameters. A crafted public key with an excessively large modulus or DSA parameter could cause several minutes…

VulnCve 2026 39829

high System graph security Trivy conf 1.00 CVE-2026-39830: golang.org/x/crypto v0.48.0 — fi-collector/go.mod

golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the connection's read loop. The blocked goroutine could not be released by …

VulnCve 2026 39830

high System graph security Trivy conf 1.00 CVE-2026-39831: golang.org/x/crypto v0.48.0 — fi-collector/go.mod

golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check The Verify() method for FIDO/U2F security key types ([email protected], [email protected]) did not check the User Presence flag. Signatures generated without physical …

VulnCve 2026 39831

high System graph security Trivy conf 1.00 CVE-2026-39832: golang.org/x/crypto v0.48.0 — fi-collector/go.mod

golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions When adding a key to a remote agent constraint extensions such as [email protected] were not serialized in the request. Destination restrictions were silent…

VulnCve 2026 39832

high System graph security Trivy conf 1.00 CVE-2026-39835: golang.org/x/crypto v0.48.0 — fi-collector/go.mod

golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be caused to panic by a client presenting a certificate. CertChecker now retur…

VulnCve 2026 39835

high System graph security Trivy conf 1.00 CVE-2026-40192: pillow 10.4.0 — futureagi/model_serving/requirements.txt

Pillow: Pillow: Denial of Service via decompression bomb in FITS image processing Pillow is a Python imaging library. Versions 10.3.0 through 12.1.1 did not limit the amount of GZIP-compressed data read when decoding a FITS image, making them vulnerable to decompression bomb attacks. A specially c…

VulnCve 2026 40192

high System graph security Trivy conf 1.00 CVE-2026-40192: pillow 12.1.0 — futureagi/ee/requirements.txt

Pillow: Pillow: Denial of Service via decompression bomb in FITS image processing Pillow is a Python imaging library. Versions 10.3.0 through 12.1.1 did not limit the amount of GZIP-compressed data read when decoding a FITS image, making them vulnerable to decompression bomb attacks. A specially c…

VulnCve 2026 40192

high System graph security Trivy conf 1.00 CVE-2026-40192: pillow 12.1.0 — futureagi/requirements.txt

Pillow: Pillow: Denial of Service via decompression bomb in FITS image processing Pillow is a Python imaging library. Versions 10.3.0 through 12.1.1 did not limit the amount of GZIP-compressed data read when decoding a FITS image, making them vulnerable to decompression bomb attacks. A specially c…

VulnCve 2026 40192

high System graph security Trivy conf 1.00 CVE-2026-40192: pillow 12.1.0 — futureagi/uv.lock

Pillow: Pillow: Denial of Service via decompression bomb in FITS image processing Pillow is a Python imaging library. Versions 10.3.0 through 12.1.1 did not limit the amount of GZIP-compressed data read when decoding a FITS image, making them vulnerable to decompression bomb attacks. A specially c…

VulnCve 2026 40192

high System graph security Trivy conf 1.00 CVE-2026-40217: litellm 1.81.11 — futureagi/ee/requirements.txt

LiteLLM: LiteLLM: Arbitrary Code Execution via bytecode rewriting LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/test_custom_code URI. Package: litellm Installed: 1.81.11 Fixed in: 1.83.10 Severity: HIGH Fix: Upgrade litellm …

VulnCve 2026 40217

high System graph security Trivy conf 1.00 CVE-2026-40217: litellm 1.81.11 — futureagi/requirements.txt

LiteLLM: LiteLLM: Arbitrary Code Execution via bytecode rewriting LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/test_custom_code URI. Package: litellm Installed: 1.81.11 Fixed in: 1.83.10 Severity: HIGH Fix: Upgrade litellm …

VulnCve 2026 40217

high System graph security Trivy conf 1.00 CVE-2026-40217: litellm 1.81.11 — futureagi/uv.lock

LiteLLM: LiteLLM: Arbitrary Code Execution via bytecode rewriting LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/test_custom_code URI. Package: litellm Installed: 1.81.11 Fixed in: 1.83.10 Severity: HIGH Fix: Upgrade litellm …

VulnCve 2026 40217

high System graph security Trivy conf 1.00 CVE-2026-41066: lxml 6.0.2 — futureagi/ee/requirements.txt

lxml: python: lxml: Information disclosure via untrusted XML input leading to local file read lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.0, using either of the two parsers in the default configuration (with resolve_entities=True) allows untrusted XML input t…

VulnCve 2026 41066

high System graph security Trivy conf 1.00 CVE-2026-41066: lxml 6.0.2 — futureagi/requirements.txt

lxml: python: lxml: Information disclosure via untrusted XML input leading to local file read lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.0, using either of the two parsers in the default configuration (with resolve_entities=True) allows untrusted XML input t…

VulnCve 2026 41066

high System graph security Trivy conf 1.00 CVE-2026-41066: lxml 6.0.2 — futureagi/uv.lock

lxml: python: lxml: Information disclosure via untrusted XML input leading to local file read lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.0, using either of the two parsers in the default configuration (with resolve_entities=True) allows untrusted XML input t…

VulnCve 2026 41066

high System graph security Trivy conf 1.00 CVE-2026-41205: mako 1.3.10 — futureagi/ee/requirements.txt

mako: Mako: Information disclosure via path traversal vulnerability Mako is a template library written in Python. Prior to 1.3.11, TemplateLookup.get_template() is vulnerable to path traversal when a URI starts with // (e.g., //../../../secret.txt). The root cause is an inconsistency between two s…

VulnCve 2026 41205

high System graph security Trivy conf 1.00 CVE-2026-41205: mako 1.3.10 — futureagi/uv.lock

mako: Mako: Information disclosure via path traversal vulnerability Mako is a template library written in Python. Prior to 1.3.11, TemplateLookup.get_template() is vulnerable to path traversal when a URI starts with // (e.g., //../../../secret.txt). The root cause is an inconsistency between two s…

VulnCve 2026 41205

high System graph security Trivy conf 1.00 CVE-2026-42033: axios 1.5.1 — frontend/package-lock.json

axios: Axios: HTTP Transport Hijacking via Prototype Pollution Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, when Object.prototype has been polluted by any co-dependency with keys that axios reads without a hasOwnProperty guard, an attacker can (a) s…

VulnCve 2026 42033

high System graph security Trivy conf 1.00 CVE-2026-42033: axios 1.5.1 — frontend/yarn.lock

axios: Axios: HTTP Transport Hijacking via Prototype Pollution Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, when Object.prototype has been polluted by any co-dependency with keys that axios reads without a hasOwnProperty guard, an attacker can (a) s…

VulnCve 2026 42033

high System graph security Trivy conf 1.00 CVE-2026-42035: axios 1.5.1 — frontend/package-lock.json

axios: Axios: Arbitrary HTTP header injection via prototype pollution Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, a prototype pollution gadget exists in the Axios HTTP adapter (lib/adapters/http.js) that allows an attacker to inject arbitrary HTTP …

VulnCve 2026 42035

high System graph security Trivy conf 1.00 CVE-2026-42035: axios 1.5.1 — frontend/yarn.lock

axios: Axios: Arbitrary HTTP header injection via prototype pollution Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, a prototype pollution gadget exists in the Axios HTTP adapter (lib/adapters/http.js) that allows an attacker to inject arbitrary HTTP …

VulnCve 2026 42035

high System graph security Trivy conf 1.00 CVE-2026-42043: axios 1.5.1 — frontend/package-lock.json

axios: Axios: NO_PROXY bypass via crafted URL Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, an attacker who can influence the target URL of an Axios request can use any address in the 127.0.0.0/8 range (other than 127.0.0.1) to completely bypass the …

VulnCve 2026 42043

high System graph security Trivy conf 1.00 CVE-2026-42043: axios 1.5.1 — frontend/yarn.lock

axios: Axios: NO_PROXY bypass via crafted URL Axios is a promise based HTTP client for the browser and Node.js. Prior to 1.15.1 and 0.31.1, an attacker who can influence the target URL of an Axios request can use any address in the 127.0.0.0/8 range (other than 127.0.0.1) to completely bypass the …

VulnCve 2026 42043

high System graph security Trivy conf 1.00 CVE-2026-42203: litellm 1.81.11 — futureagi/ee/requirements.txt

litellm: LiteLLM: Arbitrary code execution via unsandboxed prompt templates LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.80.5 to before version 1.83.7, the POST /prompts/test endpoint accepted user-supplied prompt templates and rendered them …

VulnCve 2026 42203

high System graph security Trivy conf 1.00 CVE-2026-42203: litellm 1.81.11 — futureagi/requirements.txt

litellm: LiteLLM: Arbitrary code execution via unsandboxed prompt templates LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.80.5 to before version 1.83.7, the POST /prompts/test endpoint accepted user-supplied prompt templates and rendered them …

VulnCve 2026 42203

high System graph security Trivy conf 1.00 CVE-2026-42203: litellm 1.81.11 — futureagi/uv.lock

litellm: LiteLLM: Arbitrary code execution via unsandboxed prompt templates LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.80.5 to before version 1.83.7, the POST /prompts/test endpoint accepted user-supplied prompt templates and rendered them …

VulnCve 2026 42203

high System graph security Trivy conf 1.00 CVE-2026-42264: axios 1.5.1 — frontend/package-lock.json

axios: Axios: Prototype pollution allows information disclosure and request manipulation Axios is a promise based HTTP client for the browser and Node.js. From version 1.0.0 to before version 1.15.2, fFive config properties (auth, baseURL, socketPath, beforeRedirect, and insecureHTTPParser) in the…

VulnCve 2026 42264

high System graph security Trivy conf 1.00 CVE-2026-42264: axios 1.5.1 — frontend/yarn.lock

axios: Axios: Prototype pollution allows information disclosure and request manipulation Axios is a promise based HTTP client for the browser and Node.js. From version 1.0.0 to before version 1.15.2, fFive config properties (auth, baseURL, socketPath, beforeRedirect, and insecureHTTPParser) in the…

VulnCve 2026 42264

high System graph security Trivy conf 1.00 CVE-2026-42271: litellm 1.81.11 — futureagi/ee/requirements.txt

litellm: LiteLLM: Authenticated command execution via MCP stdio test endpoints LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.74.2 to before version 1.83.7, two endpoints used to preview an MCP server before saving it — POST /mcp-rest/test/conn…

VulnCve 2026 42271

high System graph security Trivy conf 1.00 CVE-2026-42271: litellm 1.81.11 — futureagi/requirements.txt

litellm: LiteLLM: Authenticated command execution via MCP stdio test endpoints LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.74.2 to before version 1.83.7, two endpoints used to preview an MCP server before saving it — POST /mcp-rest/test/conn…

VulnCve 2026 42271

high System graph security Trivy conf 1.00 CVE-2026-42271: litellm 1.81.11 — futureagi/uv.lock

litellm: LiteLLM: Authenticated command execution via MCP stdio test endpoints LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.74.2 to before version 1.83.7, two endpoints used to preview an MCP server before saving it — POST /mcp-rest/test/conn…

VulnCve 2026 42271

high System graph security Trivy conf 1.00 CVE-2026-42311: pillow 10.4.0 — futureagi/model_serving/requirements.txt

Pillow: python-pillow: Pillow: Arbitrary code execution via malicious PSD file processing Pillow is a Python imaging library. From version 10.3.0 to before version 12.2.0, processing a malicious PSD file could lead to memory corruption, potentially resulting in a crash or arbitrary code execution.…

VulnCve 2026 42311

high System graph security Trivy conf 1.00 CVE-2026-42311: pillow 12.1.0 — futureagi/ee/requirements.txt

Pillow: python-pillow: Pillow: Arbitrary code execution via malicious PSD file processing Pillow is a Python imaging library. From version 10.3.0 to before version 12.2.0, processing a malicious PSD file could lead to memory corruption, potentially resulting in a crash or arbitrary code execution.…

VulnCve 2026 42311

high System graph security Trivy conf 1.00 CVE-2026-42311: pillow 12.1.0 — futureagi/requirements.txt

Pillow: python-pillow: Pillow: Arbitrary code execution via malicious PSD file processing Pillow is a Python imaging library. From version 10.3.0 to before version 12.2.0, processing a malicious PSD file could lead to memory corruption, potentially resulting in a crash or arbitrary code execution.…

VulnCve 2026 42311

high System graph security Trivy conf 1.00 CVE-2026-42311: pillow 12.1.0 — futureagi/uv.lock

Pillow: python-pillow: Pillow: Arbitrary code execution via malicious PSD file processing Pillow is a Python imaging library. From version 10.3.0 to before version 12.2.0, processing a malicious PSD file could lead to memory corruption, potentially resulting in a crash or arbitrary code execution.…

VulnCve 2026 42311

high System graph security Trivy conf 1.00 CVE-2026-42508: golang.org/x/crypto v0.48.0 — fi-collector/go.mod

golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. Now, both the 'key' and 'key.SignatureKey' are checked for @revoked. Packag…

VulnCve 2026 42508

high System graph security Trivy conf 1.00 CVE-2026-42544: granian 2.6.1 — futureagi/ee/requirements.txt

Granian vulnerable to unauthenticated DoS via WebSocket subprotocol header panic Granian is a Rust HTTP server for Python applications. From 1.2.0 to 2.7.4, Granian aborts a worker process when an unauthenticated client sends a WebSocket upgrade request whose Sec-WebSocket-Protocol header contains…

VulnCve 2026 42544

high System graph security Trivy conf 1.00 CVE-2026-42544: granian 2.6.1 — futureagi/requirements.txt

Granian vulnerable to unauthenticated DoS via WebSocket subprotocol header panic Granian is a Rust HTTP server for Python applications. From 1.2.0 to 2.7.4, Granian aborts a worker process when an unauthenticated client sends a WebSocket upgrade request whose Sec-WebSocket-Protocol header contains…

VulnCve 2026 42544

high System graph security Trivy conf 1.00 CVE-2026-42544: granian 2.6.1 — futureagi/uv.lock

Granian vulnerable to unauthenticated DoS via WebSocket subprotocol header panic Granian is a Rust HTTP server for Python applications. From 1.2.0 to 2.7.4, Granian aborts a worker process when an unauthenticated client sends a WebSocket upgrade request whose Sec-WebSocket-Protocol header contains…

VulnCve 2026 42544

high System graph security Trivy conf 1.00 CVE-2026-4372: transformers 4.44.2 — futureagi/model_serving/requirements.txt

HuggingFace transformers vulnerable to remote code execution A critical remote code execution vulnerability exists in all versions of the HuggingFace transformers library prior to version 5.3.0. The vulnerability allows an attacker to craft a malicious `config.json` file containing the `_attn_impl…

VulnCve 2026 4372

high System graph security Trivy conf 1.00 CVE-2026-4372: transformers 4.57.1 — futureagi/ee/requirements.txt

HuggingFace transformers vulnerable to remote code execution A critical remote code execution vulnerability exists in all versions of the HuggingFace transformers library prior to version 5.3.0. The vulnerability allows an attacker to craft a malicious `config.json` file containing the `_attn_impl…

VulnCve 2026 4372

high System graph security Trivy conf 1.00 CVE-2026-4372: transformers 4.57.1 — futureagi/uv.lock

HuggingFace transformers vulnerable to remote code execution A critical remote code execution vulnerability exists in all versions of the HuggingFace transformers library prior to version 5.3.0. The vulnerability allows an attacker to craft a malicious `config.json` file containing the `_attn_impl…

VulnCve 2026 4372

high System graph security Trivy conf 1.00 CVE-2026-44289: protobufjs 7.5.4 — frontend/package-lock.json

protobufjs: protobufjs: Denial of Service via uncontrolled recursion in protobuf decoding protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs could recurse without a depth limit while decoding nested protobuf data. This affected both skippi…

VulnCve 2026 44289

high System graph security Trivy conf 1.00 CVE-2026-44289: protobufjs 7.5.4 — frontend/yarn.lock

protobufjs: protobufjs: Denial of Service via uncontrolled recursion in protobuf decoding protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs could recurse without a depth limit while decoding nested protobuf data. This affected both skippi…

VulnCve 2026 44289

high System graph security Trivy conf 1.00 CVE-2026-44290: protobufjs 7.5.4 — frontend/package-lock.json

protobufjs: protobufjs: Denial of Service via crafted schema protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs allowed certain schema option paths to traverse through inherited object properties while applying options. A crafted protobuf …

VulnCve 2026 44290

high System graph security Trivy conf 1.00 CVE-2026-44290: protobufjs 7.5.4 — frontend/yarn.lock

protobufjs: protobufjs: Denial of Service via crafted schema protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs allowed certain schema option paths to traverse through inherited object properties while applying options. A crafted protobuf …

VulnCve 2026 44290

high System graph security Trivy conf 1.00 CVE-2026-44291: protobufjs 7.5.4 — frontend/package-lock.json

protobufjs: protobufjs: Arbitrary Code Execution via prototype pollution protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs used plain objects with inherited prototypes for internal type lookup tables used by generated encode and decode fu…

VulnCve 2026 44291

high System graph security Trivy conf 1.00 CVE-2026-44291: protobufjs 7.5.4 — frontend/yarn.lock

protobufjs: protobufjs: Arbitrary Code Execution via prototype pollution protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs used plain objects with inherited prototypes for internal type lookup tables used by generated encode and decode fu…

VulnCve 2026 44291

high System graph security Trivy conf 1.00 CVE-2026-44293: protobufjs 7.5.4 — frontend/package-lock.json

protobufjs: protobufjs: Arbitrary code execution due to unsafe expression generation from crafted protobuf descriptors protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs generated JavaScript for toObject conversion could include an unsafe …

VulnCve 2026 44293

high System graph security Trivy conf 1.00 CVE-2026-44293: protobufjs 7.5.4 — frontend/yarn.lock

protobufjs: protobufjs: Arbitrary code execution due to unsafe expression generation from crafted protobuf descriptors protobufjs compiles protobuf definitions into JavaScript (JS) functions. Prior to 7.5.6 and 8.0.2, protobufjs generated JavaScript for toObject conversion could include an unsafe …

VulnCve 2026 44293

high System graph security Trivy conf 1.00 CVE-2026-44307: mako 1.3.10 — futureagi/ee/requirements.txt

mako: Mako: Information disclosure via directory traversal Mako is a template library written in Python. Prior to 1.3.12, on Windows, a URI using backslash traversal (e.g. \..\..\ secret.txt) bypasses the directory traversal check in Template.__init__ and the posixpath-based normalization in Templ…

VulnCve 2026 44307

high System graph security Trivy conf 1.00 CVE-2026-44307: mako 1.3.10 — futureagi/uv.lock

mako: Mako: Information disclosure via directory traversal Mako is a template library written in Python. Prior to 1.3.12, on Windows, a URI using backslash traversal (e.g. \..\..\ secret.txt) bypasses the directory traversal check in Template.__init__ and the posixpath-based normalization in Templ…

VulnCve 2026 44307

high System graph security Trivy conf 1.00 CVE-2026-44431: urllib3 2.2.2 — futureagi/model_serving/requirements.txt

urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed from the low-level API via ProxyManager.connection_from_url().urlopen(..., assert_same_host=Fals…

VulnCve 2026 44431

high System graph security Trivy conf 1.00 CVE-2026-44486: axios 1.5.1 — frontend/package-lock.json

axios: Axios: Information disclosure of proxy credentials via HTTP redirects Axios is a promise based HTTP client for the browser and Node.js. Prior to 0.32.0 and 1.16.0, Axios’ Node.js HTTP adapter can leak proxy credentials to a redirect target in affected versions. When a request is sent throug…

VulnCve 2026 44486

high System graph security Trivy conf 1.00 CVE-2026-44486: axios 1.5.1 — frontend/yarn.lock

axios: Axios: Information disclosure of proxy credentials via HTTP redirects Axios is a promise based HTTP client for the browser and Node.js. Prior to 0.32.0 and 1.16.0, Axios’ Node.js HTTP adapter can leak proxy credentials to a redirect target in affected versions. When a request is sent throug…

VulnCve 2026 44486

high System graph security Trivy conf 1.00 CVE-2026-44487: axios 1.5.1 — frontend/package-lock.json

axios: Axios: Information disclosure of proxy credentials via redirect flows Axios is a promise based HTTP client for the browser and Node.js. Prior to 0.32.0 and 1.16.0, Axios’s Node.js HTTP adapter may forward a Proxy-Authorization header to a redirected origin during specific proxy-to-direct re…

VulnCve 2026 44487

high System graph security Trivy conf 1.00 CVE-2026-44487: axios 1.5.1 — frontend/yarn.lock

axios: Axios: Information disclosure of proxy credentials via redirect flows Axios is a promise based HTTP client for the browser and Node.js. Prior to 0.32.0 and 1.16.0, Axios’s Node.js HTTP adapter may forward a Proxy-Authorization header to a redirected origin during specific proxy-to-direct re…

VulnCve 2026 44487

high System graph security Trivy conf 1.00 CVE-2026-44494: axios 1.5.1 — frontend/package-lock.json

axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution Axios is a promise based HTTP client for the browser and Node.js. From 1.0.0 to before 1.16.0, the Axios library is vulnerable to a Prototype Pollution "Gadget" attack that allows any Object.prototype pollution in the applicatio…

VulnCve 2026 44494

high System graph security Trivy conf 1.00 CVE-2026-44494: axios 1.5.1 — frontend/yarn.lock

axios: Axios: Man-in-the-Middle (MITM) attack via Prototype Pollution Axios is a promise based HTTP client for the browser and Node.js. From 1.0.0 to before 1.16.0, the Axios library is vulnerable to a Prototype Pollution "Gadget" attack that allows any Object.prototype pollution in the applicatio…

VulnCve 2026 44494

high System graph security Trivy conf 1.00 CVE-2026-44495: axios 1.5.1 — frontend/package-lock.json

axios: Axios: Information disclosure due to prototype pollution vulnerability Axios is a promise based HTTP client for the browser and Node.js. From 0.19.0 to before 0.31.1 and 1.15.2, Axios contains prototype-pollution gadgets in request config processing. If another vulnerability in the same Jav…

VulnCve 2026 44495

high System graph security Trivy conf 1.00 CVE-2026-44495: axios 1.5.1 — frontend/yarn.lock

axios: Axios: Information disclosure due to prototype pollution vulnerability Axios is a promise based HTTP client for the browser and Node.js. From 0.19.0 to before 0.31.1 and 1.15.2, Axios contains prototype-pollution gadgets in request config processing. If another vulnerability in the same Jav…

VulnCve 2026 44495

high System graph security Trivy conf 1.00 CVE-2026-44496: axios 1.5.1 — frontend/package-lock.json

axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name Axios is a promise based HTTP client for the browser and Node.js. Axios versions before 0.32.0 on the 0.x line and before 1.16.0 on the 1.x line build a regular expression from the configured XSRF co…

VulnCve 2026 44496

high System graph security Trivy conf 1.00 CVE-2026-44496: axios 1.5.1 — frontend/yarn.lock

axios: Axios: Client-side Denial of Service via unescaped regex metacharacters in XSRF cookie name Axios is a promise based HTTP client for the browser and Node.js. Axios versions before 0.32.0 on the 0.x line and before 1.16.0 on the 1.x line build a regular expression from the configured XSRF co…

VulnCve 2026 44496

high System graph security Trivy conf 1.00 CVE-2026-44843: langchain-core 0.3.83 — futureagi/ee/requirements.txt

langchain: LangChain: Information disclosure and data integrity compromise via insecure deserialization LangChain is a framework for building agents and LLM-powered applications. Prior to 0.3.85 and 1.3.3, LangChain contains older runtime code paths that deserialize run inputs, run outputs, or oth…

VulnCve 2026 44843

high System graph security Trivy conf 1.00 CVE-2026-44843: langchain-core 0.3.83 — futureagi/requirements.txt

langchain: LangChain: Information disclosure and data integrity compromise via insecure deserialization LangChain is a framework for building agents and LLM-powered applications. Prior to 0.3.85 and 1.3.3, LangChain contains older runtime code paths that deserialize run inputs, run outputs, or oth…

VulnCve 2026 44843

high System graph security Trivy conf 1.00 CVE-2026-44843: langchain-core 0.3.83 — futureagi/uv.lock

langchain: LangChain: Information disclosure and data integrity compromise via insecure deserialization LangChain is a framework for building agents and LLM-powered applications. Prior to 0.3.85 and 1.3.3, LangChain contains older runtime code paths that deserialize run inputs, run outputs, or oth…

VulnCve 2026 44843

high System graph security Trivy conf 1.00 CVE-2026-45134: langchain 0.3.27 — futureagi/ee/requirements.txt