All products

upsonic

PyPI · Package
3 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Upsonic: remote code execution vulnerability in its MCP server/task creation functionalityCVE-2026-30625 · GHSA-CW73-5F7H-M4GVVersion ranges need review. upsonic PyPI Critical Fix reported
Upsonic is vulnerable to Path Traversal attack through its os.path.join functionCVE-2025-6278 · GHSA-8JF4-FCJR-68C2Version ranges need review. upsonic PyPI Low Fix reported
Upsonic has vulnerability in Pickle Handler component that can lead to deserializationCVE-2025-6279 · GHSA-RPFV-46XJ-5984Version ranges need review. upsonic PyPI Low Fix reported