Search Vulnerabilities

Malicious code in random-ua-generator (PyPI)

Malicious code in blessclient (PyPI)

AWS Bedrock AgentCore: Improper neutralization of argument delimiters in the Python SDK install_packages()

libp2p: yamux connection DoS via oversized data frame

AWS API MCP Server Security Policy Bypass via Startup Initialization Failure

Malicious code in trongridy (PyPI)

vantage6: Algorithm developer can edit another developer's algorithm that is pending / under review

GitPython: Environment-variable exfiltration via Repo.create_remote() / Remote.add() URL (incomplete fix of GHSA-rwj8-pgh3-r573)

open-webui terminal proxy path traversal guard bypass via 9x encoded traversal

Open WebUI: Arena task endpoints can bypass underlying model access controls

Open WebUI: Model meta.knowledge read-only file access can be upgraded to file write/delete

Open WebUI: Terminal proxy forwards a spoofable, integrity-unbound user identity to the upstream (X-User-Id header and ws_terminal session_id query...

Open WebUI: `WEB_FETCH_FILTER_LIST` host allow/block filter bypassable via URL path and non-label-boundary matching

yt-dlp: Downstream command injection via improper sanitization of yt-dlp --write-link output

Malicious code in discordnv (PyPI)

Open WebUI: /api/v1/channels/{id}/members exposes full user model including sensitive credentials

Open WebUI: Private channel messages can be disclosed through cross-channel thread parent_id binding

Open WebUI: Cross-user model-list exposure via static cache key in get_all_models (aiocache key= vs key_builder= misuse)

Open WebUI: Upload `metadata.knowledge_id` bypasses the knowledge-base write-access check (read-only users can add files to KB)

Open WebUI: Cross-user code-interpreter and tool execution via unvalidated Socket.IO event-caller session_id