Alertas de Seguridad de la Información

M Crítico vulnerabilidad

10/07/2026

[CVE-2026-61444] PraisonAI versions before 4.6.78 contain a code injection vulnerability in deploy/api.py where the a…

PraisonAI versions before 4.6.78 contain a code injection vulnerability in deploy/api.py where the agents_file parameter is directly interpolated into an f-string without sanitization. Attackers can inject arbitrary Python code that executes when the generated server code runs via subprocess.Popen().

nvdcriticovulnerabilidad CVSS 9.1 NVD

P Alto vulnerabilidad

09/07/2026

[CVE-2026-54695] Pipecat is an open-source Python framework for building real-time voice and multimodal conversationa…

Pipecat is an open-source Python framework for building real-time voice and multimodal conversational agents. Prior to 1.4.0, the pipecat development runner registers a /ws WebSocket endpoint for telephony testing that accepts connections without authentication, reads an attacker-supplied callSid from a Twilio stream-start handshake in src/pipecat/runner/utils.py, and passes it to TwilioFrameSeria…

nvdaltovulnerabilidad CVSS 7.5 NVD

O Alto vulnerabilidad

09/07/2026

[CVE-2026-59214] Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.10.…

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.10.0, Open WebUI runs client-side Python with Pyodide in a same-origin web worker, allowing stored chat payloads that use pyodide.http.pyfetch or the js module fetch and XMLHttpRequest APIs to issue authenticated same-origin requests when a victim clicks Run, which can reach admin-only endpoints and ex…

nvdaltovulnerabilidad CVSS 7.3 NVD

O Alto vulnerabilidad

09/07/2026

[CVE-2026-59216] Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.10.…

Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI platform. Prior to 0.10.0, get_event_call delivered execute:python and execute:tool Socket.IO events to a client-supplied session_id after checking only that the session was connected, allowing authenticated users who learned another socket ID through ydoc:document:join to run code interpreter Python or tools in that user …

nvdaltovulnerabilidad CVSS 7.7 NVD

P Alto vulnerabilidad

09/07/2026

[CVE-2026-15308] The incremental HTML parser (html.parser.HTMLParser) allows for CPU denial-of-service through repeat…

The incremental HTML parser (html.parser.HTMLParser) allows for CPU denial-of-service through repeated unterminated markup declarations when processing uncontrolled data.

nvdaltovulnerabilidad CVSS 7.5 NVD

S Alto vulnerabilidad

08/07/2026

[CVE-2026-54499] Stanza is a Stanford NLP Python library for tokenization, sentence segmentation, NER, and parsing of…

Stanza is a Stanford NLP Python library for tokenization, sentence segmentation, NER, and parsing of many human languages. Prior to 1.12.2, Stanza model loaders such as stanza.models.common.pretrain.Pretrain.load() attempt torch.load(..., weights_only=True) but fall back to torch.load(..., weights_only=False) on attacker-controllable pickle.UnpicklingError, allowing a malicious .pt pretrain or mod…

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

08/07/2026

[CVE-2026-55830] RestrictedPython is a tool that helps to define a subset of the Python language which allows to prov…

RestrictedPython is a tool that helps to define a subset of the Python language which allows to provide a program input into a trusted environment. Prior to 8.3, check_function_argument_names() rejected protected guard hook names for regular, variadic, and keyword-only arguments but omitted positional-only arguments, allowing __getattr__, _getitem_, _write_, or _print_ to be shadowed by a local pa…

nvdaltovulnerabilidad CVSS 8.3 NVD

M Alto vulnerabilidad

08/07/2026

[CVE-2026-54591] AsyncSSH is a Python package which provides an asynchronous client and server implementation of the …

AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework. Prior to 2.23.1, a malicious SSH server can write arbitrary files on the asyncssh SCP client's filesystem by sending filenames containing ../ traversal sequences because _parse_cd_args in scp.py returns server-provided names verbatim and _recv_f…

nvdaltovulnerabilidad CVSS 8.1 NVD

P Alto vulnerabilidad

08/07/2026

[CVE-2026-59935] pypdf is a free and open-source pure-python PDF library. Prior to 6.14.2, an attacker can craft a PD…

pypdf is a free and open-source pure-python PDF library. Prior to 6.14.2, an attacker can craft a PDF with a page content stream containing a not terminated inline image that uses the ASCII85 or ASCIIHex filters, causing an infinite loop during parsing such as when extracting page text. This issue is fixed in version 6.14.2.

nvdaltovulnerabilidad CVSS 7.5 NVD

P Alto vulnerabilidad

08/07/2026

[CVE-2026-59936] pypdf is a free and open-source pure-python PDF library. Prior to 6.14.1, an attacker can craft a PD…

pypdf is a free and open-source pure-python PDF library. Prior to 6.14.1, an attacker can craft a PDF with a page content stream containing a not terminated inline image, causing an infinite loop during inline image end marker detection such as when extracting page text. This issue is fixed in version 6.14.1.

nvdaltovulnerabilidad CVSS 7.5 NVD

H Alto vulnerabilidad

08/07/2026

[CVE-2026-59939] httplib2 is a comprehensive HTTP client library for Python. Prior to 0.32.0, httplib2 performs unbou…

httplib2 is a comprehensive HTTP client library for Python. Prior to 0.32.0, httplib2 performs unbounded decompression of HTTP response bodies encoded with Content-Encoding: gzip or deflate in _decompressContent in httplib2/init.py, allowing a malicious or compromised HTTP server to return a small compressed payload that expands to an arbitrarily large size in memory and causes MemoryError or OOM-…

nvdaltovulnerabilidad CVSS 7.5 NVD

L Alto vulnerabilidad

08/07/2026

[CVE-2026-59821] LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.82.…

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.82.0-stable, LiteLLM's Custom Code Guardrails production create and update paths did not apply the same sandboxing and validation used by the test endpoint, allowing a privileged user with access to create or update guardrails to submit custom Python code that executed in the LiteLLM proxy environment …

nvdaltovulnerabilidad CVSS 7.2 NVD

P Alto vulnerabilidad

08/07/2026

[CVE-2026-59937] pypdf is a free and open-source pure-python PDF library. Prior to 6.14.0, an attacker can craft a PD…

pypdf is a free and open-source pure-python PDF library. Prior to 6.14.0, an attacker can craft a PDF with repeated malformed cross-reference streams that cause pypdf to spend long runtimes recovering broken cross-reference table entries. This issue is fixed in version 6.14.0.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

08/07/2026

[CVE-2026-59925] Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, long sequences of we…

Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, long sequences of well-formed double-asterisk or triple-asterisk emphasis pairs around a character cause quadratic work in src/mistune/inline_parser.py because the parser scans forward for matching close markers from every potential opening run, allowing denial of service in default Mistune parsing. This issue is fixed…

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

08/07/2026

[CVE-2026-59928] Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, a Markdown document …

Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, a Markdown document containing many repeated or distinct reference-link definitions causes quadratic work in src/mistune/block_parser.py and the ref_links environment dictionary handling, allowing denial of service through CPU exhaustion. This issue is fixed in version 3.3.0.

nvdaltovulnerabilidad CVSS 7.5 NVD

M Alto vulnerabilidad

08/07/2026

[CVE-2026-59922] Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, a run of closed tild…

Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, a run of closed tilde, equals-sign, or caret marker pairs around a character causes quadratic work in src/mistune/plugins/formatting.py when the strikethrough, mark, or insert plugin scans for matching markers from each possible start position, allowing denial of service through CPU exhaustion. This issue is fixed in v…

nvdaltovulnerabilidad CVSS 7.5 NVD

M Crítico vulnerabilidad

08/07/2026

[CVE-2026-15062] SQL injection vulnerabilities in the Snowflake Snowpark Python SDK (snowpark-python) versions prior …

SQL injection vulnerabilities in the Snowflake Snowpark Python SDK (snowpark-python) versions prior to 1.53.0 could allow authenticated low-privilege users to execute SQL beyond their authorization scope. An attacker could exploit these vulnerabilities by embedding SQL payloads in source database column names to escalate privileges via the DataFrameReader.dbapi() API by supplying a specially craft…

nvdcriticovulnerabilidad CVSS 9.6 NVD

P Alto vulnerabilidad

06/07/2026

[CVE-2026-54059] Pillow is a Python imaging library. Prior to 12.3.0, PIL/PcfFontFile.py _load_bitmaps() read glyph d…

Pillow is a Python imaging library. Prior to 12.3.0, PIL/PcfFontFile.py _load_bitmaps() read glyph dimensions from the PCF METRICS section and passed them directly to Image.frombytes() without calling Image._decompression_bomb_check(), allowing crafted PCF font data to cause excessive memory allocation. This issue is fixed in version 12.3.0.

nvdaltovulnerabilidad CVSS 7.5 NVD

P Alto vulnerabilidad

06/07/2026

[CVE-2026-54060] Pillow is a Python imaging library. Prior to 12.3.0, PIL/FontFile.py FontFile.compile() assembled pe…

Pillow is a Python imaging library. Prior to 12.3.0, PIL/FontFile.py FontFile.compile() assembled per-glyph images into a combined bitmap with Image.new("1", (xsize, ysize)) without calling Image._decompression_bomb_check(), allowing a font to trigger excessive allocation during conversion or saving. This issue is fixed in version 12.3.0.

nvdaltovulnerabilidad CVSS 7.5 NVD

P Alto vulnerabilidad

06/07/2026

[CVE-2026-55379] Pillow is a Python imaging library. Prior to 12.3.0, PIL/BdfFontFile.py bdf_char() read the BBX widt…

Pillow is a Python imaging library. Prior to 12.3.0, PIL/BdfFontFile.py bdf_char() read the BBX width and height field from a BDF font file and passed attacker-controlled dimensions to Image.new() without calling Image._decompression_bomb_check(), bypassing Pillow's documented decompression bomb protection and allowing excessive memory allocation. This issue is fixed in version 12.3.0.

nvdaltovulnerabilidad CVSS 7.5 NVD