cryptography has a buffer overflow if non-contiguous buffers were passed to APIs

LiteLLM has an authentication bypass via OIDC userinfo cache key collision

LiteLLM through 2026-04-08 allows remote attackers to execute arbitrary code via bytecode rewriting at the /guardrails/test_custom_code URI

LiteLLM affected by privilege escalation via unrestricted proxy configuration endpoint

NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File Overwrite

Pillow is vulnerable to a FITS GZIP decompression bomb

NLTK has unauthenticated remote shutdown in nltk.app.wordnet_app

ReDoS in multipart 1.3.0 - `parse_options_header()`

Arbitrary File Read via Absolute Path Input in nltk.util.filestring()

Path Traversal in nltk/nltk

Python-Multipart has Arbitrary File Write via Non-Default Configuration

Ffmpeg: ffmpeg: denial of service and potential arbitrary code execution via signed integer overflow in dvd subtitle parser

pip can extract console_scripts and gui_scripts outside installation directory