Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
PYSEC-2026-2878
  • PyPI/pipecat-ai
 Pipecat: Telephony WebSocket `/ws` Unauthenticated Call-Control Abuse via Attacker-Supplied Call SID 13 Jul
  • Fix available
  • Severity - 7.5 (High)
PYSEC-2026-2877
  • PyPI/pipecat-ai
 Pipecat: Path Traversal in Pipecat Runner `/files` Endpoint — Arbitrary File Read via `%2F`-Encoded Separator 13 Jul
  • Fix available
  • Severity - 7.5 (High)
PYSEC-2026-458
  • PyPI/pipecat-ai
 Pipecat: Remote Code Execution by Pickle Deserialization Through LivekitFrameSerializer 29 Jun
  • Fix available
  • Severity - 9.8 (Critical)
GHSA-j8cv-x86q-rj85
  • PyPI/pipecat-ai
 Pipecat: Telephony WebSocket `/ws` Unauthenticated Call-Control Abuse via Attacker-Supplied Call SID 18 Jun
  • Fix available
  • Severity - 7.5 (High)
GHSA-3363-2ph6-35wh
  • PyPI/pipecat-ai
 Pipecat: Path Traversal in Pipecat Runner `/files` Endpoint — Arbitrary File Read via `%2F`-Encoded Separator 15 May
  • Fix available
  • Severity - 7.5 (High)
GHSA-c2jg-5cp7-6wc7
  • PyPI/pipecat-ai
 Pipecat: Remote Code Execution by Pickle Deserialization Through LivekitFrameSerializer 23 Apr
  • Fix available
  • Severity - 9.8 (Critical)