Public scan — anyone with this URL can view this analysis. Sign up to track your own repos privately, run scheduled re-scans, and get AI fix prompts via your dashboard.
Sign up free Scan another repo

PrismML-Eng/Bonsai-demo

https://github.com/PrismML-Eng/Bonsai-demo · scanned 2026-07-23 19:41 UTC (4 days, 20 hours ago)

256 raw signals (0 security + 256 graph)

File as issue Image
UNIFIED Repobility · multi-layer engine · AI coders

Complete repo analysis

Last scanned 4 days, 20 hours ago · v3 · last Δ +0.5 (diff) · 254 actionable findings from 1 signal source. 2 repeated signals grouped for readability. Security checks, system graph analysis, and verified AI-agent feedback are merged into one review queue.

JSON
Combined
77.1
/100
Security checks
77
0 findings
System graph
77
80.0% cov · 254 findings
Critical
2
click to filter
Agents
10
0 votes
Crowd
0
reported
Severity distribution — click a segment to filter
Active filters: excluding tests × Reset all
Severity: Critical 2 High 42 Medium 190 Low 19 9-Layer: Software Security Quality Integrity Frontend Hardware Data Network Cicd Source: Security checks 0 System graph 254 Crowd 0 Layer: Software 5 Security 100 Cicd 1 Quality 1 Dependencies 147
Scan summary Repository scanned at 77.1/100 with 80.0% coverage. It contains 214 nodes across 0 cross-layer flows, written primarily in mixed languages. Engine surfaced 256 findings — concentrated in dependencies (147), security (100), software (5). Risk profile is high: 2 critical, 42 high, 190 medium. Recommended next step: open the dependencies layer findings first — that's where the highest-impact wins live.

Showing 252 of 254 actionable findings. 256 raw detector signals were grouped into reader-sized issues. Click TP / FP to vote on a finding's accuracy — votes adjust the confidence weighting and improve detection across the platform.

critical System graph security Trivy conf 1.00 CVE-2026-45829: chromadb 1.5.9 — uv.lock
chromadb: ChromaDB Python Project: Arbitrary code execution via pre-authentication code injection A pre-authentication, code injection vulnerability in version 1.0.0 or later of the ChromaDB Python project allows an unauthenticated attacker to run arbitrary code on the server by sending a maliciou…
VulnCve 2026 45829
critical System graph security Skillspector conf 0.60 SkillSpector TT3 (taint) in scripts/openwebui/seed_openwebui.py
with urllib.request.urlopen(req, timeout=timeout) as r: Credentials or environment variables flow to a network sink. This is a high-confidence indicator of credential exfiltration. Skill: unknown Rule: TT3 Category: taint Severity: CRITICAL Confidence: 0.60 Remediation: Never send credentials …
scripts/openwebui/seed_openwebui.py:117 Mcp skillTaintTt3
high System graph security Trivy conf 1.00 CVE-2024-23342: ecdsa 0.19.1 — uv.lock
python-ecdsa: vulnerable to the Minerva attack The `ecdsa` PyPI package is a pure Python implementation of ECC (Elliptic Curve Cryptography) with support for ECDSA (Elliptic Curve Digital Signature Algorithm), EdDSA (Edwards-curve Digital Signature Algorithm) and ECDH (Elliptic Curve Diffie-Hellma…
VulnCve 2024 23342
high System graph security Trivy conf 1.00 CVE-2026-25087: pyarrow 20.0.0 — uv.lock
apache-arrow: Apache Arrow C++: Denial of Service via Use After Free vulnerability when reading IPC files Use After Free vulnerability in Apache Arrow C++. This issue affects Apache Arrow C++ from 15.0.0 through 23.0.0. It can be triggered when reading an Arrow IPC file (but not an IPC stream) wi…
VulnCve 2026 25087
high System graph security Trivy conf 1.00 CVE-2026-41066: lxml 6.0.2 — uv.lock
lxml: python: lxml: Information disclosure via untrusted XML input leading to local file read lxml is a library for processing XML and HTML in the Python language. Prior to 6.1.0, using either of the two parsers in the default configuration (with resolve_entities=True) allows untrusted XML input t…
VulnCve 2026 41066
high System graph security Trivy conf 1.00 CVE-2026-41205: mako 1.3.10 — uv.lock
mako: Mako: Information disclosure via path traversal vulnerability Mako is a template library written in Python. Prior to 1.3.11, TemplateLookup.get_template() is vulnerable to path traversal when a URI starts with // (e.g., //../../../secret.txt). The root cause is an inconsistency between two s…
VulnCve 2026 41205
high System graph security Trivy conf 1.00 CVE-2026-44307: mako 1.3.10 — uv.lock
mako: Mako: Information disclosure via directory traversal Mako is a template library written in Python. Prior to 1.3.12, on Windows, a URI using backslash traversal (e.g. \..\..\ secret.txt) bypasses the directory traversal check in Template.__init__ and the posixpath-based normalization in Templ…
VulnCve 2026 44307
high System graph security Trivy conf 1.00 CVE-2026-44431: urllib3 2.6.3 — uv.lock
urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers urllib3 is an HTTP client library for Python. From 1.23 to before 2.7.0, cross-origin redirects followed from the low-level API via ProxyManager.connection_from_url().urlopen(..., assert_same_host=Fals…
VulnCve 2026 44431
high System graph security Trivy conf 1.00 CVE-2026-44432: urllib3 2.6.3 — uv.lock
urllib3: urllib3: Denial of Service due to excessive HTTP response decompression urllib3 is an HTTP client library for Python. From 2.6.0 to before 2.7.0, urllib3 could decompress the whole response instead of the requested portion (1) during the second HTTPResponse.read(amt=N) call when the respo…
VulnCve 2026 44432
high System graph security Trivy conf 1.00 CVE-2026-45134: langsmith 0.7.22 — uv.lock
LangSmith SDK: Public prompt pull deserializes untrusted manifests without trust boundary warning LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform. Prior to LangSmith SDK Python 0.8.0 and JS/TS 0.6.0, the LangSmith SDK's prompt pull methods (pull_prompt / pull_prompt…
VulnCve 2026 45134
high System graph security Trivy conf 1.00 CVE-2026-48818: starlette 0.52.1 — uv.lock
starlette: Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows Starlette is a lightweight ASGI framework/toolkit. In versions 1.0.1 and earlier, StaticFiles on Windows is vulnerable to SSRF. An UNC path such as \\attacker.com\share can cause os.path.realpath to initia…
VulnCve 2026 48818
high System graph security Trivy conf 1.00 CVE-2026-49476: soupsieve 2.8.3 — uv.lock
python-soupsieve: Soupsieve: Denial of Service via crafted CSS selector string Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.8.4, the CSS selector parser in soupsieve allocates unbounded memory when compiling large comma-separated selector lists, allowi…
VulnCve 2026 49476
high System graph security Trivy conf 1.00 CVE-2026-49477: soupsieve 2.8.3 — uv.lock
soupsieve: Soupsieve: Denial of Service via crafted CSS selector strings Soup Sieve is a CSS selector library designed to be used with Beautiful Soup 4. Prior to 2.8.4, the CSS selector parser in soupsieve contains a regular expression vulnerable to catastrophic backtracking when processing an att…
VulnCve 2026 49477
high System graph security Trivy conf 1.00 CVE-2026-53539: python-multipart 0.0.27 — uv.lock
python-multipart: Python-Multipart: Denial of Service via crafted form-urlencoded bodies Python-Multipart is a streaming multipart parser for Python. Prior to 0.0.30, when parsing application/x-www-form-urlencoded bodies, QuerystringParser located the field separator with a two step lookup: it fir…
VulnCve 2026 53539
high System graph security Trivy conf 1.00 CVE-2026-54058: pillow 12.2.0 — uv.lock
Pillow: Pillow: Memory disclosure or denial of service via crafted McIdas AREA image Pillow is a Python imaging library. Prior to 12.3.0, when Pillow loads an uncompressed McIdas AREA image from a filename through the mmap raw codec path, attacker-controlled header words can set a row stride small…
VulnCve 2026 54058
high System graph security Trivy conf 1.00 CVE-2026-54059: pillow 12.2.0 — uv.lock
python-pillow: Pillow: Denial of Service via crafted PCF font data Pillow is a Python imaging library. Prior to 12.3.0, PIL/PcfFontFile.py _load_bitmaps() read glyph dimensions from the PCF METRICS section and passed them directly to Image.frombytes() without calling Image._decompression_bomb_chec…
VulnCve 2026 54059
high System graph security Trivy conf 1.00 CVE-2026-54060: pillow 12.2.0 — uv.lock
python-pillow: Pillow: Denial of Service via excessive memory allocation when processing font files Pillow is a Python imaging library. Prior to 12.3.0, PIL/FontFile.py FontFile.compile() assembled per-glyph images into a combined bitmap with Image.new("1", (xsize, ysize)) without calling Image._d…
VulnCve 2026 54060
high System graph security Trivy conf 1.00 CVE-2026-54283: starlette 0.52.1 — uv.lock
starlette: Starlette: request.form() limits silently ignored for application/x-www-form-urlencoded enable DoS Starlette is a lightweight ASGI framework/toolkit. From 0.4.1 until 1.3.1, request.form() accepts max_fields and max_part_size to bound resource consumption while parsing form data. These …
VulnCve 2026 54283
high System graph security Trivy conf 1.00 CVE-2026-54293: nltk 3.9.4 — uv.lock
nltk: NLTK: Information Disclosure via Path Traversal in `nltk.data.load()` NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing. Prior to 3.10.0-rc1, nltk.data.load() in NLTK is vulner…
VulnCve 2026 54293
high System graph security Trivy conf 1.00 CVE-2026-55379: pillow 12.2.0 — uv.lock
python-pillow: Pillow: Denial of Service via crafted BDF font file Pillow is a Python imaging library. Prior to 12.3.0, PIL/BdfFontFile.py bdf_char() read the BBX width and height field from a BDF font file and passed attacker-controlled dimensions to Image.new() without calling Image._decompressi…
VulnCve 2026 55379
high System graph security Trivy conf 1.00 CVE-2026-55380: pillow 12.2.0 — uv.lock
python-pillow: Pillow: Denial of Service via crafted GD 2.x image file Pillow is a Python imaging library. Prior to 12.3.0, PIL/GdImageFile.py GdImageFile._open() read image dimensions from the GD 2.x header and stored them in self._size without calling Image._decompression_bomb_check(), allowing …
VulnCve 2026 55380
high System graph security Trivy conf 1.00 CVE-2026-59197: pillow 12.2.0 — uv.lock
Pillow: Pillow: Native heap out-of-bounds write Pillow is a Python imaging library. Prior to 12.3.0, Pillow's public rank-filter API can trigger a native heap out-of-bounds write when given a very large odd filter size because ImageFilter.RankFilter.filter() calls image.expand(size // 2, size // 2…
VulnCve 2026 59197
high System graph security Trivy conf 1.00 CVE-2026-59199: pillow 12.2.0 — uv.lock
Pillow: Pillow: Denial of Service via out-of-bounds write in image processing Pillow is a Python imaging library. Prior to 12.3.0, Pillow public image coordinate APIs can trigger a native heap out-of-bounds write when given coordinates near the signed 32-bit integer limits in Image.paste(), Image.…
VulnCve 2026 59199
high System graph security Trivy conf 1.00 CVE-2026-59200: pillow 12.2.0 — uv.lock
Pillow: Pillow: Denial of service via crafted PDF stream Pillow is a Python imaging library. From 5.1.0 until 12.3.0, PdfParser.PdfStream.decode() in PIL/PdfParser.py calls zlib.decompress() with bufsize set to the PDF stream Length field without bounding the decompressed output size, allowing a c…
VulnCve 2026 59200
high System graph security Trivy conf 1.00 CVE-2026-59204: pillow 12.2.0 — uv.lock
Pillow: Pillow: Denial of Service via crafted JPEG2000 image Pillow is a Python imaging library. From 8.2.0 through 12.2.0, src/libImaging/Jpeg2KDecode.c accumulates total_component_width across every tile in a JPEG2000 image instead of recomputing it per tile, allowing a crafted tiled JPEG2000 fi…
VulnCve 2026 59204
high System graph security Trivy conf 1.00 CVE-2026-59205: pillow 12.2.0 — uv.lock
Pillow: Pillow: Controlled native heap corruption in ImageCms.ImageCmsTransform.apply API Pillow is a Python imaging library. Prior to 12.3.0, Pillow's ImageCms.ImageCmsTransform.apply(im, imOut) API can trigger controlled native heap corruption when the caller supplies an output image whose mode …
VulnCve 2026 59205
high System graph security Trivy conf 1.00 CVE-2026-59885: pyasn1 0.6.3 — uv.lock
pyasn1: python-pyasn1: pyasn1: Denial of Service via crafted ASN.1 OBJECT IDENTIFIER pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the BER, CER, and DER decoders process OBJECT IDENTIFIER and RELATIVE-OID values in quadratic time relative to the number of arcs, so a small crafted p…
VulnCve 2026 59885
high System graph security Trivy conf 1.00 CVE-2026-59886: pyasn1 0.6.3 — uv.lock
pyasn1: pyasn1: Denial of Service via crafted ASN.1 REAL values pyasn1 is a generic ASN.1 library for Python. Prior to 0.6.4, the univ.Real type converted its mantissa, base, and exponent value to a Python float using exact big-integer exponentiation. A BER, CER, or DER encoded REAL value only a f…
VulnCve 2026 59886
high System graph security Trivy conf 1.00 CVE-2026-59950: mcp 1.27.2 — uv.lock
MCP Python SDK: WebSocket server transport does not support Host/Origin validation The MCP Python SDK, called mcp on PyPI, is a Python implementation of the Model Context Protocol (MCP). Prior to 1.28.1, the deprecated mcp.server.websocket.websocket_server transport accepted WebSocket handshakes w…
VulnCve 2026 59950
high System graph security Trivy conf 1.00 GHSA-537c-gmf6-5ccf: cryptography 48.0.0 — uv.lock
Vulnerable OpenSSL included in cryptography wheels pyca/cryptography's wheels include a statically linked copy of OpenSSL. The versions of OpenSSL included in wheels prior to cryptograph 48.01 are vulnerable to a security issue. More details about the vulnerability itself can be found in https://o…
VulnGhsa 537c gmf6 5ccf
high System graph security Trivy conf 1.00 GHSA-f4xh-w4cj-qxq8: langsmith 0.7.22 — uv.lock
LangSmith SDK TracingMiddleware: Arbitrary server-side file read # Summary An attacker who can send an HTTP request to a server running the LangSmith SDK's `TracingMiddleware` can cause that server to read an arbitrary file from its local filesystem and upload the contents to LangSmith as a trace…
VulnGhsa f4xh w4cj qxq8
high System graph security Skillspector conf 0.80 SkillSpector E2 (data-exfil) in scripts/download_models.sh
os.environ['BONSAI_TOKEN'] Code accesses environment variables that may contain secrets (API keys, tokens). This is a common pattern for credential theft. Skill: unknown Rule: E2 Category: data-exfil Severity: HIGH Confidence: 0.80 Remediation: Avoid reading sensitive env vars (API keys, token…
scripts/download_models.sh:80 Mcp skillData exfilE2
high System graph security Skillspector conf 0.90 SkillSpector SC2 (supply-chain) in AGENTS.md
curl -s http://localhost:8080/props | python Remote code is downloaded and executed. This bypasses code review and could introduce malicious code. Skill: unknown Rule: SC2 Category: supply-chain Severity: HIGH Confidence: 0.90 Remediation: Avoid downloading and executing remote scripts. Use tr…
AGENTS.md:181 Mcp skillSupply chainSc2
high System graph security Skillspector conf 0.80 SkillSpector SC4 (supply-chain) in pyproject.toml
requires-python Dependency has known vulnerabilities (CVEs). Using packages with unpatched security flaws exposes the environment to known exploits. Skill: unknown Rule: SC4 Category: supply-chain Severity: HIGH Confidence: 0.80 Remediation: Update the dependency to a patched version that addr…
pyproject.toml:4 Mcp skillSupply chainSc4
high System graph security Skillspector conf 0.75 SkillSpector TM2 (tool-misuse) in .github/workflows/manual-platform-smoke.yml
| sudo Tool calls are chained to bypass individual safety checks or escalate capabilities beyond what any single tool call would allow. Skill: unknown Rule: TM2 Category: tool-misuse Severity: HIGH Confidence: 0.75 Remediation: Limit tool chaining depth and validate the output of eac…
.github/workflows/manual-platform-smoke.yml:305 Mcp skillTool misuseTm2
high System graph security Skillspector conf 0.75 SkillSpector TM2 (tool-misuse) in scripts/make_kv_bias.sh
&& rm - Tool calls are chained to bypass individual safety checks or escalate capabilities beyond what any single tool call would allow. Skill: unknown Rule: TM2 Category: tool-misuse Severity: HIGH Confidence: 0.75 Remediation: Limit tool chaining depth and validate the output of each tool be…
scripts/make_kv_bias.sh:138 Mcp skillTool misuseTm2
high System graph dependencies dependencies conf 0.90 Vulnerable dependency cryptography 48.0.0: GHSA-537c-gmf6-5ccf
OSV.dev reports `cryptography` at version `48.0.0` (resolved in `uv.lock`) is affected by GHSA-537c-gmf6-5ccf. Note: `cryptography` is a transitive dependency — pulled in by another package, not declared directly in a manifest. Vulnerable OpenSSL included in cryptography wheels Advisory: https://…
uv.lock ScaOsvGhsa 537c gmf6 5ccf
high System graph dependencies dependencies conf 0.90 Vulnerable dependency langsmith 0.7.22: GHSA-3644-q5cj-c5c7
OSV.dev reports `langsmith` at version `0.7.22` (resolved in `uv.lock`) is affected by GHSA-3644-q5cj-c5c7 (aka CVE-2026-45134). Note: `langsmith` is a transitive dependency — pulled in by another package, not declared directly in a manifest. LangSmith SDK: Public prompt pull deserializes untruste…
uv.lock ScaOsvGhsa 3644 q5cj c5c7
high System graph dependencies dependencies conf 0.90 Vulnerable dependency mako 1.3.10: GHSA-2h4p-vjrc-8xpq
OSV.dev reports `mako` at version `1.3.10` (resolved in `uv.lock`) is affected by GHSA-2h4p-vjrc-8xpq (aka CVE-2026-44307). Note: `mako` is a transitive dependency — pulled in by another package, not declared directly in a manifest. Mako vulnerable to path traversal via backslash URI on Windows in…
uv.lock ScaOsvGhsa 2h4p vjrc 8xpq
high System graph dependencies dependencies conf 0.90 Vulnerable dependency pillow 12.2.0: GHSA-45hq-cxwh-f6vc
OSV.dev reports `pillow` at version `12.2.0` (resolved in `uv.lock`) is affected by GHSA-45hq-cxwh-f6vc (aka CVE-2026-55379). Note: `pillow` is a transitive dependency — pulled in by another package, not declared directly in a manifest. Pillow `BdfFontFile`: `Image.new()` called without `_decompre…
uv.lock ScaOsvGhsa 45hq cxwh f6vc
high System graph dependencies dependencies conf 0.90 Vulnerable dependency pypdf 6.7.5: GHSA-4pxv-j86v-mhcw
OSV.dev reports `pypdf` at version `6.7.5` (resolved in `uv.lock`) is affected by GHSA-4pxv-j86v-mhcw (aka CVE-2026-41313). Note: `pypdf` is a transitive dependency — pulled in by another package, not declared directly in a manifest. pypdf: Possible long runtimes for wrong size values in increment…
uv.lock ScaOsvGhsa 4pxv j86v mhcw
high System graph dependencies dependencies conf 0.90 Vulnerable dependency pypdf 6.7.5: GHSA-52x6-gq3r-vpf4
OSV.dev reports `pypdf` at version `6.7.5` (resolved in `uv.lock`) is affected by GHSA-52x6-gq3r-vpf4 (aka CVE-2026-54530). Note: `pypdf` is a transitive dependency — pulled in by another package, not declared directly in a manifest. pypdf: Possible infinite loop when retrieving fonts for layout-m…
uv.lock ScaOsvGhsa 52x6 gq3r vpf4
high System graph dependencies dependencies conf 0.90 Vulnerable dependency python-multipart 0.0.27: GHSA-5rvq-cxj2-64vf
OSV.dev reports `python-multipart` at version `0.0.27` (resolved in `uv.lock`) is affected by GHSA-5rvq-cxj2-64vf (aka CVE-2026-53539). Note: `python-multipart` is a transitive dependency — pulled in by another package, not declared directly in a manifest. python-multipart: Quadratic-time querystr…
uv.lock ScaOsvGhsa 5rvq cxj2 64vf
high System graph dependencies dependencies conf 0.90 Vulnerable dependency soupsieve 2.8.3: GHSA-2wc2-fm75-p42x
OSV.dev reports `soupsieve` at version `2.8.3` (resolved in `uv.lock`) is affected by GHSA-2wc2-fm75-p42x (aka CVE-2026-49476). Note: `soupsieve` is a transitive dependency — pulled in by another package, not declared directly in a manifest. Soup Sieve has Memory Exhaustion via Large Comma-Separat…
uv.lock ScaOsvGhsa 2wc2 fm75 p42x
medium System graph security Trivy conf 1.00 CVE-2026-31826: pypdf 6.7.5 — uv.lock
pypdf: pypdf: Denial of Service due to excessive memory consumption via crafted PDF pypdf is a free and open-source pure-python PDF library. Prior to 6.8.0, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing a content stream with a rath…
VulnCve 2026 31826
medium System graph security Trivy conf 1.00 CVE-2026-33123: pypdf 6.7.5 — uv.lock
pypdf: pypdf: Denial of Service due to excessive resource consumption from crafted PDF pypdf is a free and open-source pure-python PDF library. Versions prior to 6.9.1 allow an attacker to craft a malicious PDF which leads to long runtimes and/or large memory usage. Exploitation requires accessing…
VulnCve 2026 33123
medium System graph security Trivy conf 1.00 CVE-2026-33699: pypdf 6.7.5 — uv.lock
pypdf: pypdf: Denial of Service via crafted PDF in non-strict mode pypdf is a free and open-source pure-python PDF library. Versions prior to 6.9.2 have a vulnerability in which an attacker can craft a PDF which leads to an infinite loop. This requires reading a file in non-strict mode. This has b…
VulnCve 2026 33699
medium System graph security Trivy conf 1.00 CVE-2026-33936: ecdsa 0.19.1 — uv.lock
python-ecdsa: ecdsa: Denial of Service via crafted DER input The `ecdsa` PyPI package is a pure Python implementation of ECC (Elliptic Curve Cryptography) with support for ECDSA (Elliptic Curve Digital Signature Algorithm), EdDSA (Edwards-curve Digital Signature Algorithm) and ECDH (Elliptic Curve…
VulnCve 2026 33936
medium System graph security Trivy conf 1.00 CVE-2026-34450: anthropic 0.86.0 — uv.lock
Claude SDK for Python has Insecure Default File Permissions in Local Filesystem Memory Tool The Claude SDK for Python provides access to the Claude API from Python applications. From version 0.86.0 to before version 0.87.0, the local filesystem memory tool in the Anthropic Python SDK created memor…
VulnCve 2026 34450
medium System graph security Trivy conf 1.00 CVE-2026-34452: anthropic 0.86.0 — uv.lock
Claude SDK for Python: Memory Tool Path Validation Race Condition Allows Sandbox Escape The Claude SDK for Python provides access to the Claude API from Python applications. From version 0.86.0 to before version 0.87.0, the async local filesystem memory tool in the Anthropic Python SDK validated t…
VulnCve 2026 34452
medium System graph security Trivy conf 1.00 CVE-2026-34993: aiohttp 3.13.5 — uv.lock
aiohttp: AIOHTTP: Arbitrary code execution via untrusted input to CookieJar.load() AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.14.0, using ``CookieJar.load()`` with untrusted input may allow arbitrary code execution. Most applications using th…
VulnCve 2026 34993
medium System graph security Trivy conf 1.00 CVE-2026-40260: pypdf 6.7.5 — uv.lock
pypdf: pypdf: Denial of Service due to memory exhaustion via manipulated XMP metadata pypdf is a free and open-source pure-python PDF library. In versions prior to 6.10.0, manipulated XMP metadata entity declarations can exhaust RAM. An attacker who exploits this vulnerability can craft a PDF whic…
VulnCve 2026 40260
medium System graph security Trivy conf 1.00 CVE-2026-41168: pypdf 6.7.5 — uv.lock
pypdf: pypdf: Denial of Service via crafted PDF with oversized streams pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.1 can craft a PDF which leads to long runtimes. This requires cross-reference streams with wrong la…
VulnCve 2026 41168
medium System graph security Trivy conf 1.00 CVE-2026-41182: langsmith 0.7.22 — uv.lock
LangSmith SDK: Streaming token events bypass output redaction LangSmith Client SDKs provide SDK's for interacting with the LangSmith platform. Prior to version 0.5.19 of the JavaScript SDK and version 0.7.31 of the Python SDK, the LangSmith SDK's output redaction controls (hideOutputs in JS, hide_…
VulnCve 2026 41182
medium System graph security Trivy conf 1.00 CVE-2026-41312: pypdf 6.7.5 — uv.lock
pypdf: pypdf: Denial of Service due to excessive memory consumption via specially crafted PDF pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.2 can craft a PDF which leads to the RAM being exhausted. This requires acce…
VulnCve 2026 41312
medium System graph security Trivy conf 1.00 CVE-2026-41313: pypdf 6.7.5 — uv.lock
pypdf: pypdf: Denial of Service via crafted PDF with large trailer /Size value pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.2 can craft a PDF which leads to long runtimes. This requires loading a PDF with a large tr…
VulnCve 2026 41313
medium System graph security Trivy conf 1.00 CVE-2026-41314: pypdf 6.7.5 — uv.lock
pypdf: pypdf: Denial of Service via crafted PDF with large image sizes pypdf is a free and open-source pure-python PDF library. An attacker who uses a vulnerability present in versions prior to 6.10.2 can craft a PDF which leads to the RAM being exhausted. This requires accessing an image using `/…
VulnCve 2026 41314
medium System graph security Trivy conf 1.00 CVE-2026-45409: idna 3.11 — uv.lock
python-idna: idna: Denial of Service via specially crafted long inputs Internationalized Domain Names in Applications (IDNA) for Python provides support for Internationalized Domain Names in Applications (IDNA) and Unicode IDNA Compatibility Processing. In versions prior to 3.15, payloads such as …
VulnCve 2026 45409
medium System graph security Trivy conf 1.00 CVE-2026-47265: aiohttp 3.13.5 — uv.lock
python-aiohttp: AIOHTTP: Information disclosure via improper handling of cookies during cross-origin redirects AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to version 3.14.0, cookies set with the `cookies` parameter on requests are sent after following a cr…
VulnCve 2026 47265
medium System graph security Trivy conf 1.00 CVE-2026-48155: pypdf 6.7.5 — uv.lock
pypdf: pypdf: Denial of Service via crafted PDF with large character offsets pypdf is a free and open-source pure-python PDF library. Prior to 6.12.0, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires extracting text in layout mode with large …
VulnCve 2026 48155
medium System graph security Trivy conf 1.00 CVE-2026-48156: pypdf 6.7.5 — uv.lock
pypdf: pypdf: Denial of Service via crafted PDF pypdf is a free and open-source pure-python PDF library. Prior to 6.12.0, an attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires cross-reference streams with /W [0 0 0] values and large /Size values. This …
VulnCve 2026 48156
medium System graph security Trivy conf 1.00 CVE-2026-48710: starlette 0.52.1 — uv.lock
starlette: Starlette: Security restriction bypass via malformed HTTP Host header Starlette is a lightweight ASGI framework/toolkit. Prior to version 1.0.1, the HTTP `Host` request header was not validated before being used to reconstruct `request.url`. Because the routing algorithm relies on the r…
VulnCve 2026 48710
medium System graph security Trivy conf 1.00 CVE-2026-48735: pypdf 6.7.5 — uv.lock
pypdf: pypdf: Denial of Service via crafted PDF with large XMP metadata pypdf is a free and open-source pure-python PDF library. Prior to 6.12.1, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires parsing large XMP metadata, possibly with lots …
VulnCve 2026 48735
medium System graph security Trivy conf 1.00 CVE-2026-48775: langgraph-checkpoint 4.0.1 — uv.lock
langgraph: langgraph-checkpoint: LangGraph: Arbitrary code execution via insecure deserialization of modified checkpoint bytes LangGraph SQLite Checkpoint is an implementation of LangGraph CheckpointSaver that uses SQLite DB (both sync and async, via aiosqlite). In versions 4.1.0 and prior, the Js…
VulnCve 2026 48775
medium System graph security Trivy conf 1.00 CVE-2026-48776: langgraph-sdk 0.3.12 — uv.lock
langgraph: langgraph-sdk: LangGraph Python SDK: Unsafe URL path construction leads to unauthorized resource access LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs from Python applications. Versions 0.3.14 and prior have unsafe UR…
VulnCve 2026 48776
medium System graph security Trivy conf 1.00 CVE-2026-48817: starlette 0.52.1 — uv.lock
starlette: Starlette: Information disclosure and unintended method execution via non-standard HTTP methods Starlette is a lightweight ASGI framework/toolkit. In versions 1.0.1 and below, when dispatching a request, HTTPEndpoint selects the handler by lowercasing the HTTP method and looking it up a…
VulnCve 2026 48817
medium System graph security Trivy conf 1.00 CVE-2026-49460: pypdf 6.7.5 — uv.lock
pypdf: pypdf: Denial of Service via crafted PDF with FlateDecode filter pypdf is a free and open-source pure-python PDF library. Prior to 6.12.2, an attacker who uses this vulnerability can craft a PDF which leads to long runtimes. This requires accessing a stream which uses the /FlateDecode filte…
VulnCve 2026 49460
medium System graph security Trivy conf 1.00 CVE-2026-49461: pypdf 6.7.5 — uv.lock
pypdf: pypdf: Denial of Service via crafted PDF with self-referencing form XObject pypdf is a free and open-source pure-python PDF library. Prior to 6.12.2, an attacker who uses this vulnerability can craft a PDF which leads to large memory usage. This requires extracting the text of a page which …
VulnCve 2026 49461
medium System graph security Trivy conf 1.00 CVE-2026-54273: aiohttp 3.13.5 — uv.lock
aiohttp: AIOHTTP: Denial of Service via excessive pipelined requests AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, no limit was present on the number of pipelined requests that could be queued. An attacker may be able to use pipelined requests to …
VulnCve 2026 54273
medium System graph security Trivy conf 1.00 CVE-2026-54274: aiohttp 3.13.5 — uv.lock
aiohttp: aiohttp: Denial of Service via incomplete websocket frame payloads AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, if an attacker sends large incomplete websocket frame payloads, it may be possible to bypass the usual size limits on memory …
VulnCve 2026 54274
medium System graph security Trivy conf 1.00 CVE-2026-54276: aiohttp 3.13.5 — uv.lock
aiohttp: aiohttp: Information disclosure via DigestAuthMiddleware after cross-origin redirect AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, DigestAuthMiddleware can send an authentication response after following a cross-origin redirect. This like…
VulnCve 2026 54276
medium System graph security Trivy conf 1.00 CVE-2026-54277: aiohttp 3.13.5 — uv.lock
aiohttp: aiohttp: Denial of Service via oversized HTTP request lines bypassing max_line_size check AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, it is possible to bypass the max_line_size check in parts of an HTTP request in the C parser. If using…
VulnCve 2026 54277
medium System graph security Trivy conf 1.00 CVE-2026-54278: aiohttp 3.13.5 — uv.lock
aiohttp: aiohttp: Denial of Service due to excessive memory consumption from compressed request body AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, during cleanup it is possible for a compressed request body to be decompressed into memory in one ch…
VulnCve 2026 54278
medium System graph security Trivy conf 1.00 CVE-2026-54530: pypdf 6.7.5 — uv.lock
pypdf: python-pypdf: pypdf: Denial of Service via crafted PDF processing pypdf is a free and open-source pure-python PDF library. Prior to 6.13.0, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires extracting the text in layout mode. This vulnera…
VulnCve 2026 54530
medium System graph security Trivy conf 1.00 CVE-2026-54531: pypdf 6.7.5 — uv.lock
pypdf: pypdf: Denial of Service via crafted PDF with outlines pypdf is a free and open-source pure-python PDF library. Prior to 6.13.0, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires merging a file with outlines into a writer. This vulnerabil…
VulnCve 2026 54531
medium System graph security Trivy conf 1.00 CVE-2026-54651: pypdf 6.7.5 — uv.lock
pypdf: python-pypdf: pypdf: Denial of Service via crafted PDF pypdf is a free and open-source pure-python PDF library. Prior to 6.13.1, an attacker who uses this vulnerability can craft a PDF which leads to an infinite loop. This requires merging a file with threads/articles into a writer. This vu…
VulnCve 2026 54651
medium System graph security Trivy conf 1.00 CVE-2026-55443: langchain 1.2.10 — uv.lock
LangChain: Path traversal and sandbox escape in LangChain file-search middleware and loaders LangChain is a framework for building agents and LLM-powered applications. Prior to 1.3.9, several LangChain components that resolve filesystem paths or expand search patterns do not consistently confine t…
VulnCve 2026 55443
medium System graph security Trivy conf 1.00 CVE-2026-55798: pillow 12.2.0 — uv.lock
python-pillow: Pillow: Arbitrary command injection via shell metacharacters in file paths Pillow is a Python imaging library. Prior to 12.3.0, WindowsViewer.get_command() constructed a cmd.exe shell command by directly embedding a file path into an f-string without escaping and passed the result t…
VulnCve 2026 55798
medium System graph security Trivy conf 1.00 CVE-2026-59198: pillow 12.2.0 — uv.lock
Pillow: Pillow: Information disclosure via TGA RLE encoder out-of-bounds read Pillow is a Python imaging library. From 5.2.0 until 12.3.0, Pillow's TGA RLE encoder reads past its packed row buffer when saving a mode 1 image with TGA RLE compression, allowing adjacent process heap bytes to be copie…
VulnCve 2026 59198
medium System graph security Trivy conf 1.00 CVE-2026-59203: pillow 12.2.0 — uv.lock
Pillow: Pillow: Denial of Service via crafted EPS file Pillow is a Python imaging library. From 12.0.0 through 12.2.0, Pillow's EPS parser in PIL/EpsImagePlugin.py accepts a negative byte count in the %%BeginBinary directive, allowing a crafted EPS file to cause Image.open() to seek backwards to t…
VulnCve 2026 59203
medium System graph security Trivy conf 1.00 CVE-2026-59890: setuptools 82.0.1 — uv.lock
setuptools: setuptools: MANIFEST.in exclusion bypass in sdist via Unicode normalization collision (NFC/NFD) setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. Prior to 83.0.0, FileList applied MANIFEST.in exclude, global-exclude, recursiv…
VulnCve 2026 59890
medium System graph security Semgrep conf 0.55 dynamic urllib use detected — scripts/openwebui/seed_openwebui.py:117
Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. R…
scripts/openwebui/seed_openwebui.py:117 SecurityPython
medium System graph security Semgrep conf 0.55 dynamic urllib use detected — scripts/openwebui/tool_weather.py:13
Detected a dynamic value being used with urllib. urllib supports 'file://' schemes, so a dynamic value controlled by a malicious actor may allow them to read arbitrary files. Audit uses of urllib calls to ensure user data cannot control the URLs, or consider using the 'requests' library instead. R…
scripts/openwebui/tool_weather.py:13 SecurityPython
medium System graph security Trivy conf 1.00 GHSA-4xgf-cpjx-pc3j: pydantic-settings 2.13.1 — uv.lock
pydantic-settings: NestedSecretsSettingsSource follows symlinks outside secrets_dir, enabling local file read and bypassing secrets_dir_max_size ### Summary `NestedSecretsSettingsSource` reads secret values from files in a configured `secrets_dir`. When `secrets_nested_subdir=True`, a directory e…
VulnGhsa 4xgf cpjx pc3j
medium System graph security Trivy conf 1.00 GHSA-jm82-fx9c-mx94: pypdf 6.7.5 — uv.lock
pypdf: Missing stream length values ignore defined limits ### Impact An attacker who uses this vulnerability can craft a PDF which leads to large memory usage, as `MAX_DECLARED_STREAM_LENGTH` is sometimes ignored. This requires parsing a content stream without a `/Length` value. ### Patches This…
VulnGhsa jm82 fx9c mx94
medium System graph security Coverage conf 1.00 No auth library detected
The scanner did not find any standard auth library (JWT, OAuth, NextAuth, Auth0, etc.). The repo has auth/admin/session surface indicators, so auth may live in custom code, in a separate service, or be missing.
auth
medium System graph security Skillspector conf 0.60 SkillSpector E1 (data-exfil) in scripts/openwebui/tool_weather.py
https://api.open-meteo.com/ Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended. Skill: unknown Rule: E1 Category: data-exfil Severity: MEDIUM Confidence: 0.60 Remediation: Verify the destination URL is trusted and necess…
scripts/openwebui/tool_weather.py:43 Mcp skillData exfilE1
medium System graph security Skillspector conf 0.70 SkillSpector E1 (data-exfil) in scripts/start_openwebui.sh
curl -fsS --max-time 1 "http://localhost:$LLAMA_PORT/health" >/dev/null 2>&1; then break fi _tries=$((_tries + 1)) sleep 1 done info Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. M…
scripts/start_openwebui.sh:197 Mcp skillData exfilE1
medium System graph security Skillspector conf 0.60 SkillSpector E1 (data-exfil) in TOOLS.md
curl -s http://localhost:8080/v1/chat/completions -H "Content-Type: application/json" -d Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended. Skill: unknown Rule: E1 Category: data-exfil Severity: MEDIUM Confidence: 0.60 …
TOOLS.md:16 Mcp skillData exfilE1
medium System graph security Skillspector conf 0.85 SkillSpector EA1 (excessive-agency) in OPENWEBUI.md
Tools:* Skill grants unrestricted tool access without appropriate constraints. An agent with unfettered tool access can perform arbitrary actions including file modification, network requests, and code execution. Skill: unknown Rule: EA1 Category: excessive-agency Severity: MEDIUM Confidence: 0…
OPENWEBUI.md:28 Mcp skillExcessive agencyEa1
medium System graph security Skillspector conf 0.70 SkillSpector PE2 (priv-esc) in .github/workflows/manual-platform-smoke.yml
sudo Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified. Skill: unknown Rule: PE2 Category: priv-esc Severity: MEDIUM Confidence: 0.70 Remediation: Avoid sudo/root unless strictly required. Prefer least-privilege patterns. If elevation is needed, do…
.github/workflows/manual-platform-smoke.yml:306 Mcp skillPriv escPe2
medium System graph security Skillspector conf 0.70 SkillSpector PE2 (priv-esc) in setup.sh
sudo Commands invoke sudo or root privileges. Verify this elevated access is necessary and justified. Skill: unknown Rule: PE2 Category: priv-esc Severity: MEDIUM Confidence: 0.70 Remediation: Avoid sudo/root unless strictly required. Prefer least-privilege patterns. If elevation is needed, do…
setup.sh:78 Mcp skillPriv escPe2
medium System graph security Skillspector conf 0.75 SkillSpector TM3 (tool-misuse) in scripts/openwebui/seed_openwebui.py
AUTH=false Tool defaults are unsafe or overly permissive (e.g. disabled TLS verification, no authentication, world-writable permissions). Unsafe defaults widen the attack surface. Skill: unknown Rule: TM3 Category: tool-misuse Severity: MEDIUM Confidence: 0.75 Remediation: Override unsafe defa…
scripts/openwebui/seed_openwebui.py:122 Mcp skillTool misuseTm3
medium System graph security Skillspector conf 0.75 SkillSpector TM3 (tool-misuse) in scripts/start_openwebui.sh
AUTH=false Tool defaults are unsafe or overly permissive (e.g. disabled TLS verification, no authentication, world-writable permissions). Unsafe defaults widen the attack surface. Skill: unknown Rule: TM3 Category: tool-misuse Severity: MEDIUM Confidence: 0.75 Remediation: Override unsafe defa…
scripts/start_openwebui.sh:305 Mcp skillTool misuseTm3
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency aiohttp 3.13.5: GHSA-2fqr-mr3j-6wp8
OSV.dev reports `aiohttp` at version `3.13.5` (resolved in `uv.lock`) is affected by GHSA-2fqr-mr3j-6wp8 (aka CVE-2026-54279). Note: `aiohttp` is a transitive dependency — pulled in by another package, not declared directly in a manifest. aiohttp: Host-Only Cookies Become Domain Cookies After Cook…
uv.lock ScaOsvGhsa 2fqr mr3j 6wp8
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency aiohttp 3.13.5: GHSA-4fvr-rgm6-gqmc
OSV.dev reports `aiohttp` at version `3.13.5` (resolved in `uv.lock`) is affected by GHSA-4fvr-rgm6-gqmc (aka CVE-2026-54273). Note: `aiohttp` is a transitive dependency — pulled in by another package, not declared directly in a manifest. aiohttp: HTTP/1 Pipelined Requests Queue Without Limit Ali…
uv.lock ScaOsvGhsa 4fvr rgm6 gqmc
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency aiohttp 3.13.5: GHSA-4m7w-qmgq-4wj5
OSV.dev reports `aiohttp` at version `3.13.5` (resolved in `uv.lock`) is affected by GHSA-4m7w-qmgq-4wj5 (aka CVE-2026-54275). Note: `aiohttp` is a transitive dependency — pulled in by another package, not declared directly in a manifest. aiohttp: TLS Server Hostname Override Is Ignored When Reusi…
uv.lock ScaOsvGhsa 4m7w qmgq 4wj5
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency aiohttp 3.13.5: GHSA-63hw-fmq6-xxg2
OSV.dev reports `aiohttp` at version `3.13.5` (resolved in `uv.lock`) is affected by GHSA-63hw-fmq6-xxg2. Note: `aiohttp` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-63hw-fmq…
uv.lock ScaOsvGhsa 63hw fmq6 xxg2
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency aiohttp 3.13.5: GHSA-9x8q-7h8h-wcw9
OSV.dev reports `aiohttp` at version `3.13.5` (resolved in `uv.lock`) is affected by GHSA-9x8q-7h8h-wcw9. Note: `aiohttp` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-9x8q-7h8…
uv.lock ScaOsvGhsa 9x8q 7h8h wcw9
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency aiohttp 3.13.5: GHSA-g3cq-j2xw-wf74
OSV.dev reports `aiohttp` at version `3.13.5` (resolved in `uv.lock`) is affected by GHSA-g3cq-j2xw-wf74. Note: `aiohttp` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-g3cq-j2x…
uv.lock ScaOsvGhsa g3cq j2xw wf74
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency aiohttp 3.13.5: GHSA-hg6j-4rv6-33pg
OSV.dev reports `aiohttp` at version `3.13.5` (resolved in `uv.lock`) is affected by GHSA-hg6j-4rv6-33pg. Note: `aiohttp` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-hg6j-4rv…
uv.lock ScaOsvGhsa hg6j 4rv6 33pg
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency aiohttp 3.13.5: GHSA-hpj7-wq8m-9hgp
OSV.dev reports `aiohttp` at version `3.13.5` (resolved in `uv.lock`) is affected by GHSA-hpj7-wq8m-9hgp. Note: `aiohttp` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-hpj7-wq8…
uv.lock ScaOsvGhsa hpj7 wq8m 9hgp
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency aiohttp 3.13.5: GHSA-jg22-mg44-37j8
OSV.dev reports `aiohttp` at version `3.13.5` (resolved in `uv.lock`) is affected by GHSA-jg22-mg44-37j8. Note: `aiohttp` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-jg22-mg4…
uv.lock ScaOsvGhsa jg22 mg44 37j8
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency aiohttp 3.13.5: GHSA-m6qw-4cw2-hm4m
OSV.dev reports `aiohttp` at version `3.13.5` (resolved in `uv.lock`) is affected by GHSA-m6qw-4cw2-hm4m. Note: `aiohttp` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-m6qw-4cw…
uv.lock ScaOsvGhsa m6qw 4cw2 hm4m
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency aiohttp 3.13.5: GHSA-xcgm-r5h9-7989
OSV.dev reports `aiohttp` at version `3.13.5` (resolved in `uv.lock`) is affected by GHSA-xcgm-r5h9-7989. Note: `aiohttp` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-xcgm-r5h…
uv.lock ScaOsvGhsa xcgm r5h9 7989
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency aiohttp 3.13.5: PYSEC-2026-2104
OSV.dev reports `aiohttp` at version `3.13.5` (resolved in `uv.lock`) is affected by PYSEC-2026-2104. Note: `aiohttp` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/PYSEC-2026-2104 F…
uv.lock ScaOsvPysec 2026 2104
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency aiohttp 3.13.5: PYSEC-2026-2105
OSV.dev reports `aiohttp` at version `3.13.5` (resolved in `uv.lock`) is affected by PYSEC-2026-2105. Note: `aiohttp` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/PYSEC-2026-2105 F…
uv.lock ScaOsvPysec 2026 2105
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency aiohttp 3.13.5: PYSEC-2026-2106
OSV.dev reports `aiohttp` at version `3.13.5` (resolved in `uv.lock`) is affected by PYSEC-2026-2106. Note: `aiohttp` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/PYSEC-2026-2106 F…
uv.lock ScaOsvPysec 2026 2106
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency aiohttp 3.13.5: PYSEC-2026-2108
OSV.dev reports `aiohttp` at version `3.13.5` (resolved in `uv.lock`) is affected by PYSEC-2026-2108. Note: `aiohttp` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/PYSEC-2026-2108 F…
uv.lock ScaOsvPysec 2026 2108
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency aiohttp 3.13.5: PYSEC-2026-2109
OSV.dev reports `aiohttp` at version `3.13.5` (resolved in `uv.lock`) is affected by PYSEC-2026-2109. Note: `aiohttp` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/PYSEC-2026-2109 F…
uv.lock ScaOsvPysec 2026 2109
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency aiohttp 3.13.5: PYSEC-2026-2110
OSV.dev reports `aiohttp` at version `3.13.5` (resolved in `uv.lock`) is affected by PYSEC-2026-2110. Note: `aiohttp` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/PYSEC-2026-2110 F…
uv.lock ScaOsvPysec 2026 2110
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency aiohttp 3.13.5: PYSEC-2026-2111
OSV.dev reports `aiohttp` at version `3.13.5` (resolved in `uv.lock`) is affected by PYSEC-2026-2111. Note: `aiohttp` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/PYSEC-2026-2111 F…
uv.lock ScaOsvPysec 2026 2111
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency aiohttp 3.13.5: PYSEC-2026-2113
OSV.dev reports `aiohttp` at version `3.13.5` (resolved in `uv.lock`) is affected by PYSEC-2026-2113. Note: `aiohttp` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/PYSEC-2026-2113 F…
uv.lock ScaOsvPysec 2026 2113
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency anthropic 0.86.0: GHSA-q5f5-3gjm-7mfm
OSV.dev reports `anthropic` at version `0.86.0` (resolved in `uv.lock`) is affected by GHSA-q5f5-3gjm-7mfm. Note: `anthropic` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-q5f5…
uv.lock ScaOsvGhsa q5f5 3gjm 7mfm
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency anthropic 0.86.0: GHSA-w828-4qhx-vxx3
OSV.dev reports `anthropic` at version `0.86.0` (resolved in `uv.lock`) is affected by GHSA-w828-4qhx-vxx3. Note: `anthropic` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-w828…
uv.lock ScaOsvGhsa w828 4qhx vxx3
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency anthropic 0.86.0: PYSEC-2026-2114
OSV.dev reports `anthropic` at version `0.86.0` (resolved in `uv.lock`) is affected by PYSEC-2026-2114. Note: `anthropic` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/PYSEC-2026-21…
uv.lock ScaOsvPysec 2026 2114
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency anthropic 0.86.0: PYSEC-2026-2115
OSV.dev reports `anthropic` at version `0.86.0` (resolved in `uv.lock`) is affected by PYSEC-2026-2115. Note: `anthropic` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/PYSEC-2026-21…
uv.lock ScaOsvPysec 2026 2115
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency chromadb 1.5.9: GHSA-f4j7-r4q5-qw2c
OSV.dev reports `chromadb` at version `1.5.9` (resolved in `uv.lock`) is affected by GHSA-f4j7-r4q5-qw2c. Note: `chromadb` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-f4j7-r4…
uv.lock ScaOsvGhsa f4j7 r4q5 qw2c
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency chromadb 1.5.9: PYSEC-2026-311
OSV.dev reports `chromadb` at version `1.5.9` (resolved in `uv.lock`) is affected by PYSEC-2026-311. Note: `chromadb` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/PYSEC-2026-311 Fi…
uv.lock ScaOsvPysec 2026 311
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency click 8.3.1: PYSEC-2026-2132
OSV.dev reports `click` at version `8.3.1` (resolved in `uv.lock`) is affected by PYSEC-2026-2132. Note: `click` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/PYSEC-2026-2132 Fix: u…
uv.lock ScaOsvPysec 2026 2132
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency ecdsa 0.19.1: GHSA-9f5j-8jwj-x28g
OSV.dev reports `ecdsa` at version `0.19.1` (resolved in `uv.lock`) is affected by GHSA-9f5j-8jwj-x28g. Note: `ecdsa` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-9f5j-8jwj-x2…
uv.lock ScaOsvGhsa 9f5j 8jwj x28g
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency ecdsa 0.19.1: GHSA-wj6h-64fc-37mp
OSV.dev reports `ecdsa` at version `0.19.1` (resolved in `uv.lock`) is affected by GHSA-wj6h-64fc-37mp. Note: `ecdsa` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-wj6h-64fc-37…
uv.lock ScaOsvGhsa wj6h 64fc 37mp
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency ecdsa 0.19.1: PYSEC-2026-1325
OSV.dev reports `ecdsa` at version `0.19.1` (resolved in `uv.lock`) is affected by PYSEC-2026-1325. Note: `ecdsa` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/PYSEC-2026-1325 Fix: …
uv.lock ScaOsvPysec 2026 1325
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency ecdsa 0.19.1: PYSEC-2026-2467
OSV.dev reports `ecdsa` at version `0.19.1` (resolved in `uv.lock`) is affected by PYSEC-2026-2467. Note: `ecdsa` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/PYSEC-2026-2467 Fix: …
uv.lock ScaOsvPysec 2026 2467
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency httplib2 0.31.2: PYSEC-2026-3444
OSV.dev reports `httplib2` at version `0.31.2` (resolved in `uv.lock`) is affected by PYSEC-2026-3444. Note: `httplib2` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/PYSEC-2026-3444…
uv.lock ScaOsvPysec 2026 3444
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency idna 3.11: GHSA-65pc-fj4g-8rjx
OSV.dev reports `idna` at version `3.11` (resolved in `uv.lock`) is affected by GHSA-65pc-fj4g-8rjx. Note: `idna` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-65pc-fj4g-8rjx F…
uv.lock ScaOsvGhsa 65pc fj4g 8rjx
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency idna 3.11: PYSEC-2026-215
OSV.dev reports `idna` at version `3.11` (resolved in `uv.lock`) is affected by PYSEC-2026-215. Note: `idna` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/PYSEC-2026-215 Fix: upgrad…
uv.lock ScaOsvPysec 2026 215
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency langchain 1.2.10: GHSA-gr75-jv2w-4656
OSV.dev reports `langchain` at version `1.2.10` (resolved in `uv.lock`) is affected by GHSA-gr75-jv2w-4656. Note: `langchain` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-gr75…
uv.lock ScaOsvGhsa gr75 jv2w 4656
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency langchain 1.2.10: PYSEC-2026-2192
OSV.dev reports `langchain` at version `1.2.10` (resolved in `uv.lock`) is affected by PYSEC-2026-2192. Note: `langchain` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/PYSEC-2026-21…
uv.lock ScaOsvPysec 2026 2192
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency langgraph-checkpoint 4.0.1: GHSA-fjqc-hq36-qh5p
OSV.dev reports `langgraph-checkpoint` at version `4.0.1` (resolved in `uv.lock`) is affected by GHSA-fjqc-hq36-qh5p. Note: `langgraph-checkpoint` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vu…
uv.lock ScaOsvGhsa fjqc hq36 qh5p
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency langgraph-checkpoint 4.0.1: PYSEC-2026-2573
OSV.dev reports `langgraph-checkpoint` at version `4.0.1` (resolved in `uv.lock`) is affected by PYSEC-2026-2573. Note: `langgraph-checkpoint` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulner…
uv.lock ScaOsvPysec 2026 2573
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency langgraph-sdk 0.3.12: GHSA-w39p-vh2g-g8g5
OSV.dev reports `langgraph-sdk` at version `0.3.12` (resolved in `uv.lock`) is affected by GHSA-w39p-vh2g-g8g5. Note: `langgraph-sdk` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/G…
uv.lock ScaOsvGhsa w39p vh2g g8g5
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency langgraph-sdk 0.3.12: PYSEC-2026-2575
OSV.dev reports `langgraph-sdk` at version `0.3.12` (resolved in `uv.lock`) is affected by PYSEC-2026-2575. Note: `langgraph-sdk` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/PYSEC…
uv.lock ScaOsvPysec 2026 2575
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency langsmith 0.7.22: GHSA-f4xh-w4cj-qxq8
OSV.dev reports `langsmith` at version `0.7.22` (resolved in `uv.lock`) is affected by GHSA-f4xh-w4cj-qxq8. Note: `langsmith` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-f4xh…
uv.lock ScaOsvGhsa f4xh w4cj qxq8
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency langsmith 0.7.22: GHSA-rr7j-v2q5-chgv
OSV.dev reports `langsmith` at version `0.7.22` (resolved in `uv.lock`) is affected by GHSA-rr7j-v2q5-chgv. Note: `langsmith` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-rr7j…
uv.lock ScaOsvGhsa rr7j v2q5 chgv
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency langsmith 0.7.22: PYSEC-2026-2583
OSV.dev reports `langsmith` at version `0.7.22` (resolved in `uv.lock`) is affected by PYSEC-2026-2583. Note: `langsmith` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/PYSEC-2026-25…
uv.lock ScaOsvPysec 2026 2583
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency lxml 6.0.2: GHSA-vfmq-68hx-4jfw
OSV.dev reports `lxml` at version `6.0.2` (resolved in `uv.lock`) is affected by GHSA-vfmq-68hx-4jfw. Note: `lxml` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-vfmq-68hx-4jfw …
uv.lock ScaOsvGhsa vfmq 68hx 4jfw
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency lxml 6.0.2: PYSEC-2026-87
OSV.dev reports `lxml` at version `6.0.2` (resolved in `uv.lock`) is affected by PYSEC-2026-87. Note: `lxml` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/PYSEC-2026-87 Fix: upgrade…
uv.lock ScaOsvPysec 2026 87
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency mako 1.3.10: GHSA-v92g-xgxw-vvmm
OSV.dev reports `mako` at version `1.3.10` (resolved in `uv.lock`) is affected by GHSA-v92g-xgxw-vvmm. Note: `mako` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-v92g-xgxw-vvmm…
uv.lock ScaOsvGhsa v92g xgxw vvmm
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency mako 1.3.10: PYSEC-2026-88
OSV.dev reports `mako` at version `1.3.10` (resolved in `uv.lock`) is affected by PYSEC-2026-88. Note: `mako` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/PYSEC-2026-88 Fix: upgrad…
uv.lock ScaOsvPysec 2026 88
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency mcp 1.27.2: GHSA-vj7q-gjh5-988w
OSV.dev reports `mcp` at version `1.27.2` (resolved in `uv.lock`) is affected by GHSA-vj7q-gjh5-988w. Note: `mcp` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-vj7q-gjh5-988w F…
uv.lock ScaOsvGhsa vj7q gjh5 988w
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency mcp 1.27.2: PYSEC-2026-3483
OSV.dev reports `mcp` at version `1.27.2` (resolved in `uv.lock`) is affected by PYSEC-2026-3483. Note: `mcp` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/PYSEC-2026-3483 Fix: upgr…
uv.lock ScaOsvPysec 2026 3483
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency nltk 3.9.4: GHSA-p4gq-832x-fm9v
OSV.dev reports `nltk` at version `3.9.4` (resolved in `uv.lock`) is affected by GHSA-p4gq-832x-fm9v. Note: `nltk` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-p4gq-832x-fm9v …
uv.lock ScaOsvGhsa p4gq 832x fm9v
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency nltk 3.9.4: PYSEC-2026-2078
OSV.dev reports `nltk` at version `3.9.4` (resolved in `uv.lock`) is affected by PYSEC-2026-2078. Note: `nltk` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/PYSEC-2026-2078 Fix: upg…
uv.lock ScaOsvPysec 2026 2078
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency nltk 3.9.4: PYSEC-2026-597
OSV.dev reports `nltk` at version `3.9.4` (resolved in `uv.lock`) is affected by PYSEC-2026-597. Note: `nltk` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/PYSEC-2026-597 Fix: upgra…
uv.lock ScaOsvPysec 2026 597
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pillow 12.2.0: GHSA-4x4j-2g7c-83w6
OSV.dev reports `pillow` at version `12.2.0` (resolved in `uv.lock`) is affected by GHSA-4x4j-2g7c-83w6 (aka CVE-2026-55798). Note: `pillow` is a transitive dependency — pulled in by another package, not declared directly in a manifest. Pillow: WindowsViewer.get_command() OS command injection via …
uv.lock ScaOsvGhsa 4x4j 2g7c 83w6
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pillow 12.2.0: GHSA-5x94-69rx-g8h2
OSV.dev reports `pillow` at version `12.2.0` (resolved in `uv.lock`) is affected by GHSA-5x94-69rx-g8h2. Note: `pillow` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-5x94-69rx-…
uv.lock ScaOsvGhsa 5x94 69rx g8h2
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pillow 12.2.0: GHSA-62p4-gmf7-7g93
OSV.dev reports `pillow` at version `12.2.0` (resolved in `uv.lock`) is affected by GHSA-62p4-gmf7-7g93. Note: `pillow` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-62p4-gmf7-…
uv.lock ScaOsvGhsa 62p4 gmf7 7g93
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pillow 12.2.0: GHSA-6r8x-57c9-28j4
OSV.dev reports `pillow` at version `12.2.0` (resolved in `uv.lock`) is affected by GHSA-6r8x-57c9-28j4. Note: `pillow` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-6r8x-57c9-…
uv.lock ScaOsvGhsa 6r8x 57c9 28j4
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pillow 12.2.0: GHSA-8v84-f9pq-wr9x
OSV.dev reports `pillow` at version `12.2.0` (resolved in `uv.lock`) is affected by GHSA-8v84-f9pq-wr9x. Note: `pillow` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-8v84-f9pq-…
uv.lock ScaOsvGhsa 8v84 f9pq wr9x
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pillow 12.2.0: GHSA-9hw9-ch79-4vh6
OSV.dev reports `pillow` at version `12.2.0` (resolved in `uv.lock`) is affected by GHSA-9hw9-ch79-4vh6. Note: `pillow` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-9hw9-ch79-…
uv.lock ScaOsvGhsa 9hw9 ch79 4vh6
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pillow 12.2.0: GHSA-fj7v-r99m-22gq
OSV.dev reports `pillow` at version `12.2.0` (resolved in `uv.lock`) is affected by GHSA-fj7v-r99m-22gq. Note: `pillow` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-fj7v-r99m-…
uv.lock ScaOsvGhsa fj7v r99m 22gq
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pillow 12.2.0: GHSA-jjj6-mw9f-p565
OSV.dev reports `pillow` at version `12.2.0` (resolved in `uv.lock`) is affected by GHSA-jjj6-mw9f-p565. Note: `pillow` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-jjj6-mw9f-…
uv.lock ScaOsvGhsa jjj6 mw9f p565
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pillow 12.2.0: GHSA-pg7v-jwj7-p798
OSV.dev reports `pillow` at version `12.2.0` (resolved in `uv.lock`) is affected by GHSA-pg7v-jwj7-p798. Note: `pillow` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-pg7v-jwj7-…
uv.lock ScaOsvGhsa pg7v jwj7 p798
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pillow 12.2.0: GHSA-phj9-mv4w-65pm
OSV.dev reports `pillow` at version `12.2.0` (resolved in `uv.lock`) is affected by GHSA-phj9-mv4w-65pm. Note: `pillow` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-phj9-mv4w-…
uv.lock ScaOsvGhsa phj9 mv4w 65pm
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pillow 12.2.0: GHSA-vjc4-5qp5-m44j
OSV.dev reports `pillow` at version `12.2.0` (resolved in `uv.lock`) is affected by GHSA-vjc4-5qp5-m44j. Note: `pillow` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-vjc4-5qp5-…
uv.lock ScaOsvGhsa vjc4 5qp5 m44j
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pillow 12.2.0: GHSA-xj96-63gp-2gmr
OSV.dev reports `pillow` at version `12.2.0` (resolved in `uv.lock`) is affected by GHSA-xj96-63gp-2gmr. Note: `pillow` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-xj96-63gp-…
uv.lock ScaOsvGhsa xj96 63gp 2gmr
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pillow 12.2.0: PYSEC-2026-2253
OSV.dev reports `pillow` at version `12.2.0` (resolved in `uv.lock`) is affected by PYSEC-2026-2253. Note: `pillow` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/PYSEC-2026-2253 Fix…
uv.lock ScaOsvPysec 2026 2253
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pillow 12.2.0: PYSEC-2026-2254
OSV.dev reports `pillow` at version `12.2.0` (resolved in `uv.lock`) is affected by PYSEC-2026-2254. Note: `pillow` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/PYSEC-2026-2254 Fix…
uv.lock ScaOsvPysec 2026 2254
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pillow 12.2.0: PYSEC-2026-2256
OSV.dev reports `pillow` at version `12.2.0` (resolved in `uv.lock`) is affected by PYSEC-2026-2256. Note: `pillow` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/PYSEC-2026-2256 Fix…
uv.lock ScaOsvPysec 2026 2256
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pillow 12.2.0: PYSEC-2026-3451
OSV.dev reports `pillow` at version `12.2.0` (resolved in `uv.lock`) is affected by PYSEC-2026-3451. Note: `pillow` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/PYSEC-2026-3451 Fix…
uv.lock ScaOsvPysec 2026 3451
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pillow 12.2.0: PYSEC-2026-3452
OSV.dev reports `pillow` at version `12.2.0` (resolved in `uv.lock`) is affected by PYSEC-2026-3452. Note: `pillow` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/PYSEC-2026-3452 Fix…
uv.lock ScaOsvPysec 2026 3452
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pillow 12.2.0: PYSEC-2026-3453
OSV.dev reports `pillow` at version `12.2.0` (resolved in `uv.lock`) is affected by PYSEC-2026-3453. Note: `pillow` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/PYSEC-2026-3453 Fix…
uv.lock ScaOsvPysec 2026 3453
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pillow 12.2.0: PYSEC-2026-3454
OSV.dev reports `pillow` at version `12.2.0` (resolved in `uv.lock`) is affected by PYSEC-2026-3454. Note: `pillow` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/PYSEC-2026-3454 Fix…
uv.lock ScaOsvPysec 2026 3454
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pillow 12.2.0: PYSEC-2026-3493
OSV.dev reports `pillow` at version `12.2.0` (resolved in `uv.lock`) is affected by PYSEC-2026-3493. Note: `pillow` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/PYSEC-2026-3493 Fix…
uv.lock ScaOsvPysec 2026 3493
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pillow 12.2.0: PYSEC-2026-3494
OSV.dev reports `pillow` at version `12.2.0` (resolved in `uv.lock`) is affected by PYSEC-2026-3494. Note: `pillow` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/PYSEC-2026-3494 Fix…
uv.lock ScaOsvPysec 2026 3494
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pillow 12.2.0: PYSEC-2026-3495
OSV.dev reports `pillow` at version `12.2.0` (resolved in `uv.lock`) is affected by PYSEC-2026-3495. Note: `pillow` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/PYSEC-2026-3495 Fix…
uv.lock ScaOsvPysec 2026 3495
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pillow 12.2.0: PYSEC-2026-3496
OSV.dev reports `pillow` at version `12.2.0` (resolved in `uv.lock`) is affected by PYSEC-2026-3496. Note: `pillow` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/PYSEC-2026-3496 Fix…
uv.lock ScaOsvPysec 2026 3496
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pyarrow 20.0.0: GHSA-rgxp-2hwp-jwgg
OSV.dev reports `pyarrow` at version `20.0.0` (resolved in `uv.lock`) is affected by GHSA-rgxp-2hwp-jwgg. Note: `pyarrow` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-rgxp-2hw…
uv.lock ScaOsvGhsa rgxp 2hwp jwgg
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pyarrow 20.0.0: PYSEC-2026-113
OSV.dev reports `pyarrow` at version `20.0.0` (resolved in `uv.lock`) is affected by PYSEC-2026-113. Note: `pyarrow` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/PYSEC-2026-113 Fix…
uv.lock ScaOsvPysec 2026 113
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pyasn1 0.6.3: GHSA-8ppf-4f7h-5ppj
OSV.dev reports `pyasn1` at version `0.6.3` (resolved in `uv.lock`) is affected by GHSA-8ppf-4f7h-5ppj. Note: `pyasn1` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-8ppf-4f7h-5…
uv.lock ScaOsvGhsa 8ppf 4f7h 5ppj
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pyasn1 0.6.3: GHSA-hm4w-wwcw-mr6r
OSV.dev reports `pyasn1` at version `0.6.3` (resolved in `uv.lock`) is affected by GHSA-hm4w-wwcw-mr6r. Note: `pyasn1` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-hm4w-wwcw-m…
uv.lock ScaOsvGhsa hm4w wwcw mr6r
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pyasn1 0.6.3: PYSEC-2026-3455
OSV.dev reports `pyasn1` at version `0.6.3` (resolved in `uv.lock`) is affected by PYSEC-2026-3455. Note: `pyasn1` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/PYSEC-2026-3455 Fix:…
uv.lock ScaOsvPysec 2026 3455
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pyasn1 0.6.3: PYSEC-2026-3456
OSV.dev reports `pyasn1` at version `0.6.3` (resolved in `uv.lock`) is affected by PYSEC-2026-3456. Note: `pyasn1` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/PYSEC-2026-3456 Fix:…
uv.lock ScaOsvPysec 2026 3456
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pyasn1 0.6.3: PYSEC-2026-3457
OSV.dev reports `pyasn1` at version `0.6.3` (resolved in `uv.lock`) is affected by PYSEC-2026-3457. Note: `pyasn1` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/PYSEC-2026-3457 Fix:…
uv.lock ScaOsvPysec 2026 3457
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pydantic-settings 2.13.1: GHSA-4xgf-cpjx-pc3j
OSV.dev reports `pydantic-settings` at version `2.13.1` (resolved in `uv.lock`) is affected by GHSA-4xgf-cpjx-pc3j (aka CVE-2026-58203). Note: `pydantic-settings` is a transitive dependency — pulled in by another package, not declared directly in a manifest. pydantic-settings: NestedSecretsSetting…
uv.lock ScaOsvGhsa 4xgf cpjx pc3j
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pygments 2.19.2: GHSA-5239-wwwm-4pmq
OSV.dev reports `pygments` at version `2.19.2` (resolved in `uv.lock`) is affected by GHSA-5239-wwwm-4pmq (aka CVE-2026-4539). Note: `pygments` is a transitive dependency — pulled in by another package, not declared directly in a manifest. Pygments has Regular Expression Denial of Service (ReDoS) …
uv.lock ScaOsvGhsa 5239 wwwm 4pmq
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pypdf 6.7.5: GHSA-248m-82v9-q6g6
OSV.dev reports `pypdf` at version `6.7.5` (resolved in `uv.lock`) is affected by GHSA-248m-82v9-q6g6 (aka CVE-2026-48156). Note: `pypdf` is a transitive dependency — pulled in by another package, not declared directly in a manifest. pypdf: Possible long runtimes for zero-only width values in cros…
uv.lock ScaOsvGhsa 248m 82v9 q6g6
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pypdf 6.7.5: GHSA-3crg-w4f6-42mx
OSV.dev reports `pypdf` at version `6.7.5` (resolved in `uv.lock`) is affected by GHSA-3crg-w4f6-42mx (aka CVE-2026-40260). Note: `pypdf` is a transitive dependency — pulled in by another package, not declared directly in a manifest. pypdf: Manipulated XMP metadata entity declarations can exhaust …
uv.lock ScaOsvGhsa 3crg w4f6 42mx
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pypdf 6.7.5: GHSA-55h5-xmcq-c37v
OSV.dev reports `pypdf` at version `6.7.5` (resolved in `uv.lock`) is affected by GHSA-55h5-xmcq-c37v (aka CVE-2026-59937). Note: `pypdf` is a transitive dependency — pulled in by another package, not declared directly in a manifest. pypdf: Possible long runtimes for repeated malformed cross-refer…
uv.lock ScaOsvGhsa 55h5 xmcq c37v
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pypdf 6.7.5: GHSA-5hgr-hg42-57jg
OSV.dev reports `pypdf` at version `6.7.5` (resolved in `uv.lock`) is affected by GHSA-5hgr-hg42-57jg (aka CVE-2026-49460). Note: `pypdf` is a transitive dependency — pulled in by another package, not declared directly in a manifest. pypdf: Inefficient decoding of FlateDecode PNG predictor streams…
uv.lock ScaOsvGhsa 5hgr hg42 57jg
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pypdf 6.7.5: GHSA-5qjq-93h5-hrgp
OSV.dev reports `pypdf` at version `6.7.5` (resolved in `uv.lock`) is affected by GHSA-5qjq-93h5-hrgp (aka CVE-2026-59938). Note: `pypdf` is a transitive dependency — pulled in by another package, not declared directly in a manifest. pypdf: Possible large memory usage for wrong image dimensions A…
uv.lock ScaOsvGhsa 5qjq 93h5 hrgp
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pypdf 6.7.5: GHSA-5xf7-4p34-54qr
OSV.dev reports `pypdf` at version `6.7.5` (resolved in `uv.lock`) is affected by GHSA-5xf7-4p34-54qr. Note: `pypdf` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-5xf7-4p34-54q…
uv.lock ScaOsvGhsa 5xf7 4p34 54qr
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pypdf 6.7.5: GHSA-7gw9-cf7v-778f
OSV.dev reports `pypdf` at version `6.7.5` (resolved in `uv.lock`) is affected by GHSA-7gw9-cf7v-778f. Note: `pypdf` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-7gw9-cf7v-778…
uv.lock ScaOsvGhsa 7gw9 cf7v 778f
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pypdf 6.7.5: GHSA-87mj-5ggw-8qc3
OSV.dev reports `pypdf` at version `6.7.5` (resolved in `uv.lock`) is affected by GHSA-87mj-5ggw-8qc3. Note: `pypdf` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-87mj-5ggw-8qc…
uv.lock ScaOsvGhsa 87mj 5ggw 8qc3
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pypdf 6.7.5: GHSA-cj93-chg6-vgv8
OSV.dev reports `pypdf` at version `6.7.5` (resolved in `uv.lock`) is affected by GHSA-cj93-chg6-vgv8. Note: `pypdf` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-cj93-chg6-vgv…
uv.lock ScaOsvGhsa cj93 chg6 vgv8
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pypdf 6.7.5: GHSA-g867-7843-wf8q
OSV.dev reports `pypdf` at version `6.7.5` (resolved in `uv.lock`) is affected by GHSA-g867-7843-wf8q. Note: `pypdf` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-g867-7843-wf8…
uv.lock ScaOsvGhsa g867 7843 wf8q
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pypdf 6.7.5: GHSA-g9xf-7f8q-9mcj
OSV.dev reports `pypdf` at version `6.7.5` (resolved in `uv.lock`) is affected by GHSA-g9xf-7f8q-9mcj. Note: `pypdf` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-g9xf-7f8q-9mc…
uv.lock ScaOsvGhsa g9xf 7f8q 9mcj
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pypdf 6.7.5: GHSA-hqmh-ppp3-xvm7
OSV.dev reports `pypdf` at version `6.7.5` (resolved in `uv.lock`) is affected by GHSA-hqmh-ppp3-xvm7. Note: `pypdf` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-hqmh-ppp3-xvm…
uv.lock ScaOsvGhsa hqmh ppp3 xvm7
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pypdf 6.7.5: GHSA-j543-4vmf-qm7v
OSV.dev reports `pypdf` at version `6.7.5` (resolved in `uv.lock`) is affected by GHSA-j543-4vmf-qm7v. Note: `pypdf` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-j543-4vmf-qm7…
uv.lock ScaOsvGhsa j543 4vmf qm7v
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pypdf 6.7.5: GHSA-jj6c-8h6c-hppx
OSV.dev reports `pypdf` at version `6.7.5` (resolved in `uv.lock`) is affected by GHSA-jj6c-8h6c-hppx. Note: `pypdf` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-jj6c-8h6c-hpp…
uv.lock ScaOsvGhsa jj6c 8h6c hppx
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pypdf 6.7.5: GHSA-jm82-fx9c-mx94
OSV.dev reports `pypdf` at version `6.7.5` (resolved in `uv.lock`) is affected by GHSA-jm82-fx9c-mx94. Note: `pypdf` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-jm82-fx9c-mx9…
uv.lock ScaOsvGhsa jm82 fx9c mx94
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pypdf 6.7.5: GHSA-m2v9-299j-rv96
OSV.dev reports `pypdf` at version `6.7.5` (resolved in `uv.lock`) is affected by GHSA-m2v9-299j-rv96. Note: `pypdf` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-m2v9-299j-rv9…
uv.lock ScaOsvGhsa m2v9 299j rv96
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pypdf 6.7.5: GHSA-qpxp-75px-xjcp
OSV.dev reports `pypdf` at version `6.7.5` (resolved in `uv.lock`) is affected by GHSA-qpxp-75px-xjcp. Note: `pypdf` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-qpxp-75px-xjc…
uv.lock ScaOsvGhsa qpxp 75px xjcp
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pypdf 6.7.5: GHSA-wjqc-6w8f-h24c
OSV.dev reports `pypdf` at version `6.7.5` (resolved in `uv.lock`) is affected by GHSA-wjqc-6w8f-h24c. Note: `pypdf` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-wjqc-6w8f-h24…
uv.lock ScaOsvGhsa wjqc 6w8f h24c
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pypdf 6.7.5: GHSA-x284-j5p8-9c5p
OSV.dev reports `pypdf` at version `6.7.5` (resolved in `uv.lock`) is affected by GHSA-x284-j5p8-9c5p. Note: `pypdf` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-x284-j5p8-9c5…
uv.lock ScaOsvGhsa x284 j5p8 9c5p
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pypdf 6.7.5: PYSEC-2026-3011
OSV.dev reports `pypdf` at version `6.7.5` (resolved in `uv.lock`) is affected by PYSEC-2026-3011. Note: `pypdf` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/PYSEC-2026-3011 Fix: u…
uv.lock ScaOsvPysec 2026 3011
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pypdf 6.7.5: PYSEC-2026-3012
OSV.dev reports `pypdf` at version `6.7.5` (resolved in `uv.lock`) is affected by PYSEC-2026-3012. Note: `pypdf` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/PYSEC-2026-3012 Fix: u…
uv.lock ScaOsvPysec 2026 3012
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pypdf 6.7.5: PYSEC-2026-3016
OSV.dev reports `pypdf` at version `6.7.5` (resolved in `uv.lock`) is affected by PYSEC-2026-3016. Note: `pypdf` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/PYSEC-2026-3016 Fix: u…
uv.lock ScaOsvPysec 2026 3016
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pypdf 6.7.5: PYSEC-2026-3018
OSV.dev reports `pypdf` at version `6.7.5` (resolved in `uv.lock`) is affected by PYSEC-2026-3018. Note: `pypdf` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/PYSEC-2026-3018 Fix: u…
uv.lock ScaOsvPysec 2026 3018
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pypdf 6.7.5: PYSEC-2026-3019
OSV.dev reports `pypdf` at version `6.7.5` (resolved in `uv.lock`) is affected by PYSEC-2026-3019. Note: `pypdf` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/PYSEC-2026-3019 Fix: u…
uv.lock ScaOsvPysec 2026 3019
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pypdf 6.7.5: PYSEC-2026-3020
OSV.dev reports `pypdf` at version `6.7.5` (resolved in `uv.lock`) is affected by PYSEC-2026-3020. Note: `pypdf` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/PYSEC-2026-3020 Fix: u…
uv.lock ScaOsvPysec 2026 3020
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pypdf 6.7.5: PYSEC-2026-3021
OSV.dev reports `pypdf` at version `6.7.5` (resolved in `uv.lock`) is affected by PYSEC-2026-3021. Note: `pypdf` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/PYSEC-2026-3021 Fix: u…
uv.lock ScaOsvPysec 2026 3021
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pypdf 6.7.5: PYSEC-2026-3022
OSV.dev reports `pypdf` at version `6.7.5` (resolved in `uv.lock`) is affected by PYSEC-2026-3022. Note: `pypdf` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/PYSEC-2026-3022 Fix: u…
uv.lock ScaOsvPysec 2026 3022
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pypdf 6.7.5: PYSEC-2026-3023
OSV.dev reports `pypdf` at version `6.7.5` (resolved in `uv.lock`) is affected by PYSEC-2026-3023. Note: `pypdf` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/PYSEC-2026-3023 Fix: u…
uv.lock ScaOsvPysec 2026 3023
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pypdf 6.7.5: PYSEC-2026-3025
OSV.dev reports `pypdf` at version `6.7.5` (resolved in `uv.lock`) is affected by PYSEC-2026-3025. Note: `pypdf` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/PYSEC-2026-3025 Fix: u…
uv.lock ScaOsvPysec 2026 3025
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency pypdf 6.7.5: PYSEC-2026-3026
OSV.dev reports `pypdf` at version `6.7.5` (resolved in `uv.lock`) is affected by PYSEC-2026-3026. Note: `pypdf` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/PYSEC-2026-3026 Fix: u…
uv.lock ScaOsvPysec 2026 3026
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency python-multipart 0.0.27: GHSA-6jv3-5f52-599m
OSV.dev reports `python-multipart` at version `0.0.27` (resolved in `uv.lock`) is affected by GHSA-6jv3-5f52-599m. Note: `python-multipart` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerabi…
uv.lock ScaOsvGhsa 6jv3 5f52 599m
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency python-multipart 0.0.27: GHSA-v9pg-7xvm-68hf
OSV.dev reports `python-multipart` at version `0.0.27` (resolved in `uv.lock`) is affected by GHSA-v9pg-7xvm-68hf. Note: `python-multipart` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerabi…
uv.lock ScaOsvGhsa v9pg 7xvm 68hf
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency python-multipart 0.0.27: GHSA-vffw-93wf-4j4q
OSV.dev reports `python-multipart` at version `0.0.27` (resolved in `uv.lock`) is affected by GHSA-vffw-93wf-4j4q. Note: `python-multipart` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerabi…
uv.lock ScaOsvGhsa vffw 93wf 4j4q
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency python-multipart 0.0.27: PYSEC-2026-3037
OSV.dev reports `python-multipart` at version `0.0.27` (resolved in `uv.lock`) is affected by PYSEC-2026-3037. Note: `python-multipart` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability…
uv.lock ScaOsvPysec 2026 3037
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency python-multipart 0.0.27: PYSEC-2026-3040
OSV.dev reports `python-multipart` at version `0.0.27` (resolved in `uv.lock`) is affected by PYSEC-2026-3040. Note: `python-multipart` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability…
uv.lock ScaOsvPysec 2026 3040
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency python-multipart 0.0.27: PYSEC-2026-3041
OSV.dev reports `python-multipart` at version `0.0.27` (resolved in `uv.lock`) is affected by PYSEC-2026-3041. Note: `python-multipart` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability…
uv.lock ScaOsvPysec 2026 3041
medium System graph dependencies dependencies conf 1.00 Vulnerable dependency setuptools 82.0.1: GHSA-h35f-9h28-mq5c
OSV.dev reports `setuptools` at version `82.0.1` (resolved in `uv.lock`) is affected by GHSA-h35f-9h28-mq5c. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-h35f-9h28-mq5c Fix: upgrade `setuptools` past the affected range per the advisory.
uv.lock ScaOsvGhsa h35f 9h28 mq5c
medium System graph dependencies dependencies conf 1.00 Vulnerable dependency setuptools 82.0.1: PYSEC-2026-3447
OSV.dev reports `setuptools` at version `82.0.1` (resolved in `uv.lock`) is affected by PYSEC-2026-3447. No summary published yet. Advisory: https://osv.dev/vulnerability/PYSEC-2026-3447 Fix: upgrade `setuptools` past the affected range per the advisory.
uv.lock ScaOsvPysec 2026 3447
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency soupsieve 2.8.3: GHSA-836r-79rf-4m37
OSV.dev reports `soupsieve` at version `2.8.3` (resolved in `uv.lock`) is affected by GHSA-836r-79rf-4m37. Note: `soupsieve` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-836r-…
uv.lock ScaOsvGhsa 836r 79rf 4m37
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency soupsieve 2.8.3: PYSEC-2026-3072
OSV.dev reports `soupsieve` at version `2.8.3` (resolved in `uv.lock`) is affected by PYSEC-2026-3072. Note: `soupsieve` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/PYSEC-2026-307…
uv.lock ScaOsvPysec 2026 3072
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency starlette 0.52.1: GHSA-82w8-qh3p-5jfq
OSV.dev reports `starlette` at version `0.52.1` (resolved in `uv.lock`) is affected by GHSA-82w8-qh3p-5jfq. Note: `starlette` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-82w8…
uv.lock ScaOsvGhsa 82w8 qh3p 5jfq
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency starlette 0.52.1: GHSA-86qp-5c8j-p5mr
OSV.dev reports `starlette` at version `0.52.1` (resolved in `uv.lock`) is affected by GHSA-86qp-5c8j-p5mr. Note: `starlette` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-86qp…
uv.lock ScaOsvGhsa 86qp 5c8j p5mr
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency starlette 0.52.1: GHSA-jp82-jpqv-5vv3
OSV.dev reports `starlette` at version `0.52.1` (resolved in `uv.lock`) is affected by GHSA-jp82-jpqv-5vv3. Note: `starlette` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-jp82…
uv.lock ScaOsvGhsa jp82 jpqv 5vv3
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency starlette 0.52.1: GHSA-wqp7-x3pw-xc5r
OSV.dev reports `starlette` at version `0.52.1` (resolved in `uv.lock`) is affected by GHSA-wqp7-x3pw-xc5r. Note: `starlette` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-wqp7…
uv.lock ScaOsvGhsa wqp7 x3pw xc5r
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency starlette 0.52.1: GHSA-x746-7m8f-x49c
OSV.dev reports `starlette` at version `0.52.1` (resolved in `uv.lock`) is affected by GHSA-x746-7m8f-x49c. Note: `starlette` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-x746…
uv.lock ScaOsvGhsa x746 7m8f x49c
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency starlette 0.52.1: PYSEC-2026-161
OSV.dev reports `starlette` at version `0.52.1` (resolved in `uv.lock`) is affected by PYSEC-2026-161. Note: `starlette` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/PYSEC-2026-161…
uv.lock ScaOsvPysec 2026 161
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency starlette 0.52.1: PYSEC-2026-2280
OSV.dev reports `starlette` at version `0.52.1` (resolved in `uv.lock`) is affected by PYSEC-2026-2280. Note: `starlette` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/PYSEC-2026-22…
uv.lock ScaOsvPysec 2026 2280
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency starlette 0.52.1: PYSEC-2026-2281
OSV.dev reports `starlette` at version `0.52.1` (resolved in `uv.lock`) is affected by PYSEC-2026-2281. Note: `starlette` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/PYSEC-2026-22…
uv.lock ScaOsvPysec 2026 2281
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency starlette 0.52.1: PYSEC-2026-248
OSV.dev reports `starlette` at version `0.52.1` (resolved in `uv.lock`) is affected by PYSEC-2026-248. Note: `starlette` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/PYSEC-2026-248…
uv.lock ScaOsvPysec 2026 248
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency starlette 0.52.1: PYSEC-2026-249
OSV.dev reports `starlette` at version `0.52.1` (resolved in `uv.lock`) is affected by PYSEC-2026-249. Note: `starlette` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/PYSEC-2026-249…
uv.lock ScaOsvPysec 2026 249
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency torch 2.10.0: GHSA-rrmf-rvhw-rf47
OSV.dev reports `torch` at version `2.10.0` (resolved in `uv.lock`) is affected by GHSA-rrmf-rvhw-rf47. Note: `torch` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-rrmf-rvhw-rf…
uv.lock ScaOsvGhsa rrmf rvhw rf47
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency torch 2.10.0: PYSEC-2026-139
OSV.dev reports `torch` at version `2.10.0` (resolved in `uv.lock`) is affected by PYSEC-2026-139. Note: `torch` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/PYSEC-2026-139 Fix: up…
uv.lock ScaOsvPysec 2026 139
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency urllib3 2.6.3: GHSA-mf9v-mfxr-j63j
OSV.dev reports `urllib3` at version `2.6.3` (resolved in `uv.lock`) is affected by GHSA-mf9v-mfxr-j63j. Note: `urllib3` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-mf9v-mfxr…
uv.lock ScaOsvGhsa mf9v mfxr j63j
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency urllib3 2.6.3: GHSA-qccp-gfcp-xxvc
OSV.dev reports `urllib3` at version `2.6.3` (resolved in `uv.lock`) is affected by GHSA-qccp-gfcp-xxvc. Note: `urllib3` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/GHSA-qccp-gfcp…
uv.lock ScaOsvGhsa qccp gfcp xxvc
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency urllib3 2.6.3: PYSEC-2026-141
OSV.dev reports `urllib3` at version `2.6.3` (resolved in `uv.lock`) is affected by PYSEC-2026-141. Note: `urllib3` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/PYSEC-2026-141 Fix:…
uv.lock ScaOsvPysec 2026 141
medium System graph dependencies dependencies conf 0.90 Vulnerable dependency urllib3 2.6.3: PYSEC-2026-142
OSV.dev reports `urllib3` at version `2.6.3` (resolved in `uv.lock`) is affected by PYSEC-2026-142. Note: `urllib3` is a transitive dependency — pulled in by another package, not declared directly in a manifest. No summary published yet. Advisory: https://osv.dev/vulnerability/PYSEC-2026-142 Fix:…
uv.lock ScaOsvPysec 2026 142
low System graph security Trivy conf 1.00 CVE-2025-3000: torch 2.10.0 — uv.lock
A vulnerability classified as critical has been found in PyTorch 2.6.0 ... A vulnerability classified as critical has been found in PyTorch 2.6.0. This affects the function torch.jit.script. The manipulation leads to memory corruption. It is possible to launch the attack on the local host. The exp…
VulnCve 2025 3000
low System graph security Trivy conf 1.00 CVE-2026-4539: pygments 2.19.2 — uv.lock
pygments: Pygments: Denial of Service via inefficient regular expression processing in AdlLexer A security flaw has been discovered in pygments up to 2.19.2. The impacted element is the function AdlLexer of the file pygments/lexers/archetype.py. The manipulation results in inefficient regular expr…
VulnCve 2026 4539
low System graph security Trivy conf 1.00 CVE-2026-50269: aiohttp 3.13.5 — uv.lock
aiohttp: AIOHTTP: CRLF injection in multipart headers AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.0, attacker-controlled input included into multipart/payload headers can be used to modify a request to inject additional headers or similar. In the u…
VulnCve 2026 50269
low System graph security Trivy conf 1.00 CVE-2026-53537: python-multipart 0.0.27 — uv.lock
multipart: Python-Multipart: Information disclosure via header parsing discrepancy Python-Multipart is a streaming multipart parser for Python. Prior to 0.0.30, parse_options_header parsed Content-Disposition (and Content-Type) headers with email.message.Message, which transparently applies RFC 22…
VulnCve 2026 53537
low System graph security Trivy conf 1.00 CVE-2026-53538: python-multipart 0.0.27 — uv.lock
python-multipart: Python-Multipart: Information disclosure due to parser differential in form data handling Python-Multipart is a streaming multipart parser for Python. Prior to 0.0.30, QuerystringParser treated ; as a field separator in application/x-www-form-urlencoded bodies, in addition to &. …
VulnCve 2026 53538
low System graph security Trivy conf 1.00 CVE-2026-53540: python-multipart 0.0.27 — uv.lock
python-multipart: Python-Multipart: Negative Content-Length in parse_form buffers the entire body in memory Python-Multipart is a streaming multipart parser for Python. Prior to 0.0.31, parse_form() did not validate the Content-Length header before using it to bound its chunked read of the request…
VulnCve 2026 53540
low System graph security Trivy conf 1.00 CVE-2026-54275: aiohttp 3.13.5 — uv.lock
aiohttp: AIOHTTP: TLS SNI check bypass via connection reuse AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, the server_hostname TLS SNI check can be bypassed when an existing connection is reused. If an application makes multiple requests to the sam…
VulnCve 2026 54275
low System graph security Trivy conf 1.00 CVE-2026-54279: aiohttp 3.13.5 — uv.lock
aiohttp: AIOHTTP: Host-Only Cookies Become Domain Cookies After CookieJar Persistence AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, host-only cookies that are saved with CookieJar.save() and then restored later with CookieJar.load() lose their hos…
VulnCve 2026 54279
low System graph security Trivy conf 1.00 CVE-2026-54280: aiohttp 3.13.5 — uv.lock
AIOHTTP is an asynchronous HTTP client/server framework for asyncio an ... AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, payload resources are not closed correctly when a client disconnects in the middle of a write. If a payload is using an open f…
VulnCve 2026 54280
low System graph security Trivy conf 1.00 CVE-2026-54282: starlette 0.52.1 — uv.lock
starlette: Starlette: Information disclosure due to improper HTTP request path validation Starlette is a lightweight ASGI framework/toolkit. Prior to 1.3.0, the HTTP request path is not validated before being used to reconstruct request.url. Because request.url is rebuilt by concatenating {scheme}…
VulnCve 2026 54282
low System graph quality Debug conf 1.00 Debug logging residue appears in source files
Found 14 console/debugger/print-style debug statements in non-test source. This is a common fast-generation residue before production cleanup.
CleanupRepo hardeningGenerated repo pattern
low System graph cicd CI/CD security conf 1.00 3 occurrences GitHub Action is tag-pinned rather than SHA-pinned
actions/cache@v4 can move without a code change in this repo. Pin third-party actions to a reviewed 40-character commit SHA.
3 files, 3 locations
.github/workflows/build-from-source-smoke.yml:30
.github/workflows/check-no-em-dashes.yml:21
.github/workflows/manual-platform-smoke.yml:66
CI/CD securitySupply chainGithub actions
low System graph software Dead code conf 1.00 Possibly dead Python function: execute_code
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
scripts/openwebui/tool_code_interpreter.py:150
low System graph software Dead code conf 1.00 Possibly dead Python function: handle_data
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
scripts/openwebui/tool_web_fetch.py:135
low System graph software Dead code conf 1.00 Possibly dead Python function: handle_startendtag
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
scripts/openwebui/tool_web_fetch.py:131
low System graph software Dead code conf 1.00 Possibly dead Python function: redirect_request
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
scripts/openwebui/tool_web_fetch.py:214
low System graph software Dead code conf 1.00 Possibly dead Python function: stream
No callers detected by AST scan in this repo. Could be exported for external callers or a framework handler.
scripts/openwebui/filter_mlx_stream.py:9
low System graph security Skillspector conf 0.70 SkillSpector EA3 (excessive-agency) in LICENSE
not limited to Skill's behavior or capabilities extend beyond its stated purpose. Scope creep allows an agent to perform actions unrelated to its documented functionality, increasing the attack surface. Skill: unknown Rule: EA3 Category: excessive-agency Severity: LOW Confidence: 0.70 Remediat…
LICENSE:27 Mcp skillExcessive agencyEa3
low System graph security Skillspector conf 0.15 SkillSpector TM1 (tool-misuse) in community-benchmarks/ternary-bonsai/cuda-rtx5060ti-linux.md
rm --gpus all -e CUDA_VISIBLE_DEVICES=$GPU -v "$D":/w nvidia/ Tool parameters are crafted to achieve unintended or unsafe behavior. Parameter abuse can bypass intended safety checks (e.g. shell=True, --force, dangerous glob patterns). Skill: unknown Rule: TM1 Category: tool-misuse Severity: LOW …
community-benchmarks/ternary-bonsai/cuda-rtx5060ti-linux.md:17 Mcp skillTool misuseTm1
For AI agents: Voting guide (TP/FP) MCP manifest Stdio wrapper SARIF Integrate Findings queue Vote TP/FP on findings to calibrate the engine.
For AI agents + API integrations
Email me when this repo regresses
Free. We re-scan periodically; new criticals → your inbox. No signup required for the scan itself.
API access

This page is publicly accessible at: https://repobility.com/scan/9cd6981e-5ccf-49ce-a07a-6fec118684e2/

To check status programmatically (no auth required): 

curl -s https://repobility.com/api/v1/public/scan/9cd6981e-5ccf-49ce-a07a-6fec118684e2/

Important — please don't re-submit the same URL repeatedly. The submission endpoint is idempotent: re-submitting the same git URL returns this same scan_token, not a new one. To re-scan this repo, sign up free and use the dashboard.