# Python security incidents · pwn.watch

> Security incidents affecting Python runtimes, frameworks and libraries.

Page: https://pwn.watch/t/python · generated 2026-10-22T16:23:59.585Z

## Status (as of 2026-10-22)
- Incidents: 16 (2 live, 1 live and not fully patched, 15 patched)
- Days without a Python security incident: 0 (1 still unpatched, so the counter stays at 0)
- Newest incident started: 2026-10-21

## Feeds
- JSON (incidents + changes + posts): https://pwn.watch/t/python.json
- RSS (every update): https://pwn.watch/t/python/feed.xml
- This file: https://pwn.watch/t/python/llms.txt
- Whole site: https://pwn.watch/llms.txt · all tags: https://pwn.watch/tags.json

## Incidents (newest first by start date)
- [LiteLLM 1.107.0 PyPI/Docker supply-chain compromise](https://pwn.watch/i/litellm-1-107-0-pypi-compromise) ([json](https://pwn.watch/i/litellm-1-107-0-pypi-compromise.json)): critical, live, patched, started 2026-10-21, MAL-2026-2144
- [HTTP/3 QPACK “Header Accordions” memory-amplification DoS](https://pwn.watch/i/http3-qpack-header-accordions) ([json](https://pwn.watch/i/http3-qpack-header-accordions.json)): unknown, live, partial, started 2026-10-20, CVE-2025-64702, CVE-2026-12523, CVE-2025-13945
- [BerriAI LiteLLM: BerriAI LiteLLM Improper Authentication Vulnerability](https://pwn.watch/i/berriai-litellm-cve-2026-59822) ([json](https://pwn.watch/i/berriai-litellm-cve-2026-59822.json)): high, closed, patched, started 2026-09-02, CVE-2026-59822
- [MLflow MLflow: MLflow Server-Side Request Forgery Vulnerability](https://pwn.watch/i/mlflow-mlflow-cve-2026-64849) ([json](https://pwn.watch/i/mlflow-mlflow-cve-2026-64849.json)): high, closed, patched, started 2026-08-19, CVE-2026-64849
- [Ray-Project Ray: Ray-Project Ray Code Injection Vulnerability](https://pwn.watch/i/ray-project-ray-cve-2025-62593) ([json](https://pwn.watch/i/ray-project-ray-cve-2025-62593.json)): high, closed, patched, started 2026-08-17, CVE-2025-62593
- [IBM Langflow: IBM Langflow Code Injection Vulnerability](https://pwn.watch/i/ibm-langflow-cve-2026-9198) ([json](https://pwn.watch/i/ibm-langflow-cve-2026-9198.json)): high, closed, patched, started 2026-08-04, CVE-2026-9198
- [Langflow Langflow: Langflow Inclusion of Functionality from Untrusted Control Sphere Vulnerability](https://pwn.watch/i/langflow-langflow-cve-2026-0770) ([json](https://pwn.watch/i/langflow-langflow-cve-2026-0770.json)): high, closed, patched, started 2026-07-21, CVE-2026-0770
- [Langflow Langflow: Langflow Authorization Bypass Through User-Controlled Key Vulnerability](https://pwn.watch/i/langflow-langflow-cve-2026-55255) ([json](https://pwn.watch/i/langflow-langflow-cve-2026-55255.json)): high, closed, patched, started 2026-07-07, CVE-2026-55255
- [BerriAI LiteLLM: BerriAI LiteLLM Command Injection Vulnerability](https://pwn.watch/i/berriai-litellm-cve-2026-42271) ([json](https://pwn.watch/i/berriai-litellm-cve-2026-42271.json)): high, closed, patched, started 2026-06-08, CVE-2026-42271, CVE-2026-48710
- [Langflow Langflow: Langflow Origin Validation Error Vulnerability](https://pwn.watch/i/langflow-langflow-cve-2025-34291) ([json](https://pwn.watch/i/langflow-langflow-cve-2025-34291.json)): high, closed, patched, started 2026-05-21, CVE-2025-34291
- [BerriAI LiteLLM: BerriAI LiteLLM SQL Injection Vulnerability](https://pwn.watch/i/berriai-litellm-cve-2026-42208) ([json](https://pwn.watch/i/berriai-litellm-cve-2026-42208.json)): high, closed, patched, started 2026-05-08, CVE-2026-42208
- [Langflow Langflow: Langflow Code Injection Vulnerability](https://pwn.watch/i/langflow-langflow-cve-2026-33017) ([json](https://pwn.watch/i/langflow-langflow-cve-2026-33017.json)): high, closed, patched, started 2026-03-25, CVE-2026-33017
- [Langflow: Missing Authentication Vulnerability](https://pwn.watch/i/langflow-cve-2025-3248) ([json](https://pwn.watch/i/langflow-cve-2025-3248.json)): critical, closed, patched, started 2025-05-05, CVE-2025-3248
- [Ultralytics PyPI releases backdoored with a crypto miner](https://pwn.watch/i/ultralytics-pypi-supply-chain-attack) ([json](https://pwn.watch/i/ultralytics-pypi-supply-chain-attack.json)): high, closed, patched, started 2024-12-04
- [Apache Superset Insecure Default Initialization of Resource](https://pwn.watch/i/apache-superset-cve-2023-27524) ([json](https://pwn.watch/i/apache-superset-cve-2023-27524.json)): high, closed, patched, started 2024-01-08, CVE-2023-27524
- [libwebp heap overflow exploited in the wild (CVE-2023-4863)](https://pwn.watch/i/libwebp-heap-overflow-cve-2023-4863) ([json](https://pwn.watch/i/libwebp-heap-overflow-cve-2023-4863.json)): high, closed, patched, started 2023-09-11, CVE-2023-4863