pipecat-ai
PyPI · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Pipecat: Public exposure of Pipecat’s development runner can allow unauthenticated bot session creation | pipecat-ai | PyPI | Medium | Fix reported | |
| Pipecat: Path Traversal in Pipecat Runner `/files` Endpoint — Arbitrary File Read via `%2F`-Encoded Separator | pipecat-ai | PyPI | High | Fix reported | |
| Pipecat: Telephony WebSocket `/ws` Unauthenticated Call-Control Abuse via Attacker-Supplied Call SID | pipecat-ai | PyPI | High | Fix reported | |
| Pipecat: Remote Code Execution by Pickle Deserialization Through LivekitFrameSerializer | pipecat-ai | PyPI | Critical | Fix reported |