siga-mcp 0.1.128
RiskcriticalVulnscritical- processes
- 714
- operations
- 358K
- packages
- 140
- compiler runs
- 3
- connections
- 3
- build time
- 4m 31s
- job time
- 4m 31s
- capture
- 5.6 MB
- records
- 679K
- bytes / record
- 8.3
Graph
- Credential store contents reached a network peersecret-exfil · critical
- Package code connected to an undeclared hostegress · medium · build-import
- Package code connected to an undeclared hostegress · medium · build-import
- siga_mcp-0.1.128-py3-none-any.whlarchive · retained · retained 127
Loading the graph
Loading the graph
Loading the graph
Checks
15 of 19 clear Network activity Sensitive data access and transfer +2 moreBuild behavior▲▲✓✓✓✓✓✓✓✓✓
Supply chain▲▲✓✓✓✓✓
Pipeline✓
Detections
2-
criticalCredential store contents reached a network peer
-
mediumPackage code connected to an undeclared host
Network
3 peers- ava3.uniube.br:443 unjudged
- files.pythonhosted.org:443 unjudged
- files.pythonhosted.org:8080 ecosystem
| Vulnerabilities134 | Fix | Severity | |
|---|---|---|---|
| Dependencies | |||
| anyio 4.10.0 | >=4.14.2 | ||
| CVE-2026-63374 | AnyIO: TLSStream IDNA 2003 host name encoding enables potential TLS certificate spoofing | critical | |
| CVE-2026-64847 | AnyIO process-pool workers can block indefinitely on undrained stderr | medium | |
| authlib 1.6.8 | >=1.9.1 | ||
| CVE-2026-27962 | Authlib JWS JWK Header Injection: Signature Verification Bypass | critical | |
| CVE-2026-96760 | Authlib: empty signatures validation in JWS JSON deserialization | critical | |
| CVE-2026-114615 | Authlib incomplete algorithm-confusion fix permits HMAC forgery with prefixed public keys | high | |
| CVE-2026-114616 | Authlib accepts an empty HMAC key, allowing JWS/JWT signature forgery (HS256/HS384/HS512) | high | |
| CVE-2026-116672 | Authlib RFC 7592 examples omit registration-access-token client binding | high | |
| CVE-2026-28490 | Authlib Vulnerable to JWE RSA1_5 Bleichenbacher Padding Oracle | high | |
| CVE-2026-28498 | Authlib: Fail-Open Cryptographic Verification in OIDC Hash Binding | high | |
| CVE-2026-114617 | Authlib: ID token can disable its own nonce validation via the nonce_supported claim | medium | |
| CVE-2026-114618 | Authlib: Default JWT bearer grant accepts assertions for the wrong audience | medium | |
| CVE-2026-114619 | Authlib: OpenID implicit grant checks raw scope instead of allowed scope before issuing ID tokens | medium | |
| CVE-2026-114620 | Authlib: Unvalidated request_uri fetch in JWT-secured authorization request (JAR) leading to SSRF | medium | |
| CVE-2026-41425 | Authlib: Cross-site request forging when using cache | medium | |
| CVE-2026-41479 | Authlib OAuth 2.0 has Open Redirect in Authorization API that allows attacker-controlled redirect_uri through unsupported response_type | medium | |
| CVE-2026-44681 | Authlib OIDC Implicit/Hybrid Authorization Vulnerable to Open Redirect | medium | |
| CVE-2026-114614 | Authlib: is_secure_transport() loopback exemption can be bypassed with a userinfo component, allowing cleartext-HTTP URLs to non-loopback hosts | low | |
| certifi 2025.8.3 | >=2026.10.18 | ||
| GHSA-6q48-6c7w-9gw2 | certifi bundles emSign root CAs with compromised intermediate CA keys | critical | |
| fastmcp 3.0.2 | >=3.4.10 | ||
| CVE-2026-32871 | FastMCP OpenAPI Provider has an SSRF & Path Traversal Vulnerability | critical | |
| CVE-2026-27124 | FastMCP: Missing Consent Verification in OAuth Proxy Callback Facilitates Confused Deputy Vulnerabilities | high | |
| CVE-2025-64340 | FastMCP has a Command Injection vulnerability - Gemini CLI | medium | |
| GHSA-7xgj-8392-5q4r | FastMCP: Post-transform component authorization is skipped on direct calls | medium | |
| pyjwt 2.10.1 | >=2.15.0 | ||
| CVE-2026-102268 | PyJWT: Asymmetric-PEM detection bypass: whitespace/line-ending-mutated public keys skip the HS/asymmetric confusion guard | critical | |
| CVE-2026-102267 | PyJWT: PyJWKClient follows redirects when fetching JWKS | high | |
| CVE-2026-102271 | PyJWT: Public keys in DER form are accepted as HMAC secrets, bypassing the CVE-2022-29217 guard | high | |
| CVE-2026-32597 | PyJWT accepts unknown `crit` header extensions | high | |
| CVE-2026-48526 | PyJWT: Public-key JWK accepted as HMAC secret enables forged HS256 tokens when mixed families are allowed | high | |
| GHSA-pxh4-856f-4h89 | PyJWT: HS256/384/512 verify accepts empty HMAC key via oct JWK (PyJWK/PyJWKClient) enabling token forgery | high | |
| CVE-2026-101917 | PyJWT: PyJWKClient still amplifies unauthenticated JWKS fetches on unknown kid values (incomplete fix of CVE-2026-48524) | medium | |
| CVE-2026-101918 | PyJWT: Unauthenticated RecursionError DoS in pre-verification payload parse (PyJWKClient.get_signing_key_from_jwt / verify_signature=False) | medium | |
| CVE-2026-102269 | PyJWT: Non-canonical signature segments enable raw-token revocation bypass | medium | |
| CVE-2026-102270 | PyJWT: ReDoS vulnerability when calling the `is_pem_format` function. | medium | |
| CVE-2026-102274 | PyJWT: Malformed RSA JWK aborts parsing of an entire JWK Set | medium | |
| CVE-2026-102275 | PyJWT accepts inconsistent OKP x/d JWKs, causing public/private key identity confusion | medium | |
| CVE-2026-48522 | PyJWKClient: missing scheme allowlist enables CVE-2024-21643-class SSRF + token forgery via file://, ftp://, data: schemes | medium | |
| CVE-2026-48523 | PyJWT: Algorithm allow-list bypass when decoding with `PyJWK` / `PyJWKClient` keys | medium | |
| CVE-2026-48525 | PyJWT: Unauthenticated DoS via unbounded Base64URL decoding of unused payload segment in b64=false detached JWS | medium | |
| CVE-2026-48524 | PyJWKClient unbounded JWKS endpoint requests via attacker-controlled kid values (DoS) | low | |
| aiohttp 3.12.15 | >=3.14.4 | ||
| CVE-2025-69223 | AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb | high | |
| CVE-2026-111064 | aiohttp server lacks an initial request/header timeout | high | |
| CVE-2026-111066 | AIOHTTP: File descriptor exhaustion in multipart requests | high | |
| CVE-2026-69244 | AIOHTTP: Out-of-bounds heap read in C HTTP response parser error path (malformed chunked response) | high | |
| GHSA-2g87-pp6c-29x5 | aiohttp: Multiple instances of excessive or unbounded memory/CPU use | high | |
| CVE-2025-69227 | AIOHTTP vulnerable to DoS when bypassing asserts | medium | |
| CVE-2025-69228 | AIOHTTP vulnerable to denial of service through large payloads | medium | |
| CVE-2025-69229 | AIOHTTP vulnerable to DoS through chunked messages | medium | |
| CVE-2026-111063 | AIOHTTP: Secure attribute not enforced for shared cookie | medium | |
| CVE-2026-111065 | AIOHTTP: Connector pool exhaustion via Max-Age overflow | medium | |
| CVE-2026-111748 | AIOHTTP: Absolute-form request targets can spoof Request.scheme | medium | |
| CVE-2026-111750 | AIOHTTP: Pure-Python parser request smuggling | medium | |
| CVE-2026-22815 | aiohttp allows unlimited trailer headers, leading to possible uncapped memory usage | medium | |
| CVE-2026-34515 | AIOHTTP affected by UNC SSRF/NTLMv2 Credential Theft/Local File Read in static resource handler on Windows | medium | |
| CVE-2026-34516 | AIOHTTP has a Multipart Header Size Bypass | medium | |
| CVE-2026-34525 | AIOHTTP accepts duplicate Host headers | medium | |
| CVE-2026-34993 | AIOHTTP is Vulnerable to Deserialization of Untrusted Data | medium | |
| CVE-2026-47265 | AIOHTTP is vulnerable to cross-origin redirect with per-request cookies | medium | |
| CVE-2026-54273 | aiohttp: HTTP/1 Pipelined Requests Queue Without Limit | medium | |
| CVE-2026-54274 | aiohttp: Incomplete websocket frame payloads bypass memory limits | medium | |
| CVE-2026-54276 | aiohttp: DigestAuthMiddleware Applies Credentials to Cross-Origin Redirect Challenges | medium | |
| CVE-2026-54277 | aiohttp: C HTTP Parser Bypasses max_line_size for Fragmented Lines | medium | |
| CVE-2026-54278 | aiohttp: Unread Compressed Request Bodies Bypass client_max_size During Cleanup | medium | |
| CVE-2026-59881 | AIOHTTP: WebSocket client accepts compressed frames without negotiated permessage-deflate | medium | |
| CVE-2026-69243 | AIOHTTP: HTTP request smuggling via WebSocket upgrade | medium | |
| CVE-2025-69224 | AIOHTTP's unicode processing of header values could cause parsing discrepancies | low | |
| CVE-2025-69225 | AIOHTTP has unicode match groups in regexes for ASCII protocol elements | low | |
| CVE-2025-69226 | AIOHTTP vulnerable to brute-force leak of internal static file path components | low | |
| CVE-2025-69230 | AIOHTTP Vulnerable to Cookie Parser Warning Storm | low | |
| CVE-2026-111749 | AIOHTTP: Cookie from subdomain can remove Host-Only Scope from existing cookies | low | |
| CVE-2026-34513 | AIOHTTP Affected by Denial of Service (DoS) via Unbounded DNS Cache in TCPConnector | low | |
| CVE-2026-34514 | AIOHTTP has CRLF injection through multipart part content type header construction | low | |
| CVE-2026-34517 | AIOHTTP has late size enforcement for non-file multipart fields causes memory DoS | low | |
| CVE-2026-34518 | AIOHTTP leaks Cookie and Proxy-Authorization headers on cross-origin redirect | low | |
| CVE-2026-34519 | AIOHTTP has HTTP response splitting via \r in reason phrase | low | |
| CVE-2026-34520 | AIOHTTP's C parser (llhttp) accepts null bytes and control characters in response header values - header injection/security bypass | low | |
| CVE-2026-50269 | aiohttp: CRLF injection in multipart headers | low | |
| CVE-2026-54275 | aiohttp: TLS Server Hostname Override Is Ignored When Reusing HTTPS Connections | low | |
| CVE-2026-54279 | aiohttp: Host-Only Cookies Become Domain Cookies After CookieJar Persistence | low | |
| CVE-2026-54280 | aiohttp: Payload Response Resources Are Not Closed After Mid-Body Disconnect | low | |
| azure-core 1.35.1 | >=1.38.0 | ||
| CVE-2026-21226 | Azure Core is vulnerable to deserialization of untrusted data | high | |
| cryptography 45.0.5 | >=50.0.0 | ||
| CVE-2026-26007 | cryptography Vulnerable to a Subgroup Attack Due to Missing Subgroup Validation for SECT Curves | high | |
| CVE-2026-69247 | cryptography: PKCS#7 EnvelopedData decryption exposes a Bleichenbacher oracle through distinguishable errors and timing | high | |
| CVE-2026-69249 | python-cryptography: Duplicate self-signed intermediates can cause exponential path-building | high | |
| GHSA-537c-gmf6-5ccf | Vulnerable OpenSSL included in cryptography wheels | high | |
| CVE-2026-39892 | Cryptography vulnerable to buffer overflow if non-contiguous buffers were passed to APIs | medium | |
| CVE-2026-69248 | python-cryptography verifier accepts wildcard DNS names allowing escape from permittedSubtrees | medium | |
| CVE-2026-34073 | cryptography has incomplete DNS name constraint enforcement on peer names | low | |
| dnspython 2.7.0 | >=2.9.0 | ||
| CVE-2026-114605 | dnspython dns.name.from_wire_parser() excessive CPU use | high | |
| jaraco-context 6.0.1 | >=6.1.0 | ||
| CVE-2026-23949 | jaraco.context Has a Path Traversal Vulnerability | high | |
| mcp 1.26.0 | >=1.30.0 | ||
| CVE-2026-52869 | MCP Python SDK: HTTP transports serve session requests without verifying the authenticated principal | high | |
| CVE-2026-52870 | MCP Python SDK: Experimental task handlers allow any client to access and cancel other clients' tasks | high | |
| CVE-2026-59950 | MCP Python SDK: WebSocket server transport does not support Host/Origin validation | high | |
| CVE-2026-116684 | Model Context Protocol Python SDK: Server bearer-token authentication accepts tokens issued for a different resource server | medium | |
| CVE-2026-116685 | Model Context Protocol Python SDK: HTTP client transports followed cross-origin redirects carrying custom headers and bodies | medium | |
| CVE-2026-116686 | Model Context Protocol Python SDK: Client fetched server-chosen $ref URLs while validating tool results against output schemas | medium | |
| CVE-2026-59951 | MCP Python SDK: Unbounded Session Accumulation in StreamableHTTP Transport Enables Resource Exhaustion | medium | |
| microsoft-kiota-http 1.9.7 | >=1.9.9 | ||
| CVE-2026-44503 | Kiota abstractions RedirectHandler leaks Cookie/Proxy-Authorization headers on cross-host redirect | high | |
| protobuf 6.32.1 | >=6.33.5 | ||
| CVE-2026-0994 | protobuf affected by a JSON recursion depth bypass | high | |
| python-multipart 0.0.20 | >=0.0.31 | ||
| CVE-2026-24486 | Python-Multipart has Arbitrary File Write via Non-Default Configuration | high | |
| CVE-2026-42561 | python-multipart has Denial of Service via unbounded multipart part headers | high | |
| CVE-2026-53539 | python-multipart: Quadratic-time querystring parsing with semicolon separators causes CPU denial of service | high | |
| CVE-2026-40347 | python-multipart affected by Denial of Service via large multipart preamble or epilogue data | medium | |
| CVE-2026-53537 | python-multipart: Content-Disposition parameter smuggling via RFC 2231/5987 extended parameters | low | |
| CVE-2026-53538 | python-multipart: Semicolon treated as querystring field separator enables parameter smuggling | low | |
| CVE-2026-53540 | python-multipart: Negative Content-Length in parse_form buffers the entire body in memory | low | |
| starlette 0.47.2 | >=1.3.1 | ||
| CVE-2025-62727 | Starlette vulnerable to O(n^2) DoS via Range header merging in ``starlette.responses.FileResponse`` | high | |
| CVE-2026-48818 | Starlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on Windows | high | |
| CVE-2026-54283 | Starlette: request.form() limits silently ignored for application/x-www-form-urlencoded enable DoS | high | |
| CVE-2026-48710 | Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks | medium | |
| CVE-2026-48817 | Starlette: Arbitrary HTTP method dispatched to `HTTPEndpoint` attributes via `getattr` | medium | |
| CVE-2026-54282 | Starlette: Unvalidated request path concatenated into authority poisons request.url.hostname | low | |
| ujson 5.10.0 | >=5.13.0 | ||
| CVE-2026-32874 | UltraJSON has a Memory Leak parsing large integers allows DoS | high | |
| CVE-2026-32875 | UltraJSON has an integer overflow handling large indent leads to buffer overflow or infinite loop | high | |
| CVE-2026-44660 | UltraJSON has a Memory Leak in ujson.dump() on Write Failure | high | |
| CVE-2026-54911 | UltraJSON: Malformed/Truncated UTF-8 Accepted and Silently Rewritten in ujson.dumps() | medium | |
| urllib3 2.5.0 | >=2.8.0 | ||
| CVE-2025-66418 | urllib3 allows an unbounded number of links in the decompression chain | high | |
| CVE-2025-66471 | urllib3 streaming API improperly handles highly compressed data | high | |
| CVE-2026-21441 | Decompression-bomb safeguards bypassed when following HTTP redirects (streaming API) | high | |
| CVE-2026-44431 | urllib3: Sensitive headers forwarded across origins in proxied low-level redirects | high | |
| CVE-2026-97687 | urllib3: HTTPS proxy TLS configuration may be ignored or overridden | high | |
| CVE-2026-97689 | urllib3: HTTPResponse.stream()/read_chunked() buffers an unbounded chunk-size line into memory | high | |
| h2 4.3.0 | >=4.4.1 | ||
| CVE-2026-71554 | h2: Duplicate Host header could facilitate request smuggling | medium | |
| hpack 4.1.0 | >=4.2.0 | ||
| CVE-2026-59980 | hpack: Unbounded variable integer decoding can cause run-away computation on malformed input | medium | |
| idna 3.10 | >=3.15 | ||
| CVE-2026-45409 | Internationalized Domain Names in Applications (IDNA): Specially crafted inputs to idna.encode() can bypass CVE-2024-3651 fix | medium | |
| opentelemetry-api 1.37.0 | >=1.45.1 | ||
| CVE-2026-114603 | OpenTelemetry Python: Unbounded tracestate parsing in opentelemetry-api | medium | |
| pip 25.1.1 | >=26.2.0 | ||
| CVE-2025-8869 | pip's fallback tar extraction doesn't check symbolic links point to extraction directory | medium | |
| CVE-2026-13346 | pip would incorrectly handle doubly-encoded package URLs from indexes | medium | |
| CVE-2026-3219 | pip has an interpretation conflict due to handling both concatenated tar and ZIP files as ZIP files | medium | |
| CVE-2026-6357 | pip Vulnerable to Inclusion of Functionality from Untrusted Control Sphere | medium | |
| CVE-2026-8643 | pip: Path traversal in console_scripts/gui_scripts entry point names allows installing scripts outside of target directory | medium | |
| CVE-2026-1703 | pip Path Traversal vulnerability | low | |
| python-dotenv 1.1.1 | >=1.2.2 | ||
| CVE-2026-28684 | python-dotenv: Symlink following in set_key allows arbitrary file overwrite via cross-device rename fallback | medium | |
| requests 2.32.4 | >=2.33.0 | ||
| CVE-2026-25645 | Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function | medium | |
| pygments 2.19.2 | >=2.20.0 | ||
| CVE-2026-4539 | Pygments has Regular Expression Denial of Service (ReDoS) due to Inefficient Regex for GUID Matching | low | |
| pytest 8.4.2 dev · only with group dev | >=9.0.3 | ||
| CVE-2025-71176 | pytest has vulnerable tmpdir handling | medium | |
Versions127
0.1.128criticalcritical2026-07-280.1.127not analyzed2026-04-290.1.126not analyzed2026-04-010.1.125not analyzed2026-03-310.1.124not analyzed2026-03-310.1.123not analyzed2026-03-310.1.122not analyzed2026-03-310.1.121not analyzed2026-03-310.1.120not analyzed2026-03-310.1.119not analyzed2026-03-310.1.118not analyzed2026-03-310.1.117not analyzed2026-03-310.1.116not analyzed2026-02-260.1.115not analyzed2026-02-260.1.114not analyzed2026-02-200.1.113not analyzed2026-02-200.1.112not analyzed2026-02-130.1.111not analyzed2026-02-120.1.110not analyzed2026-02-120.1.109not analyzed2026-02-110.1.108not analyzed2026-02-090.1.107not analyzed2026-02-090.1.106not analyzed2026-02-090.1.105not analyzed2025-12-020.1.104not analyzed2025-12-020.1.103not analyzed2025-11-280.1.102not analyzed2025-11-260.1.101not analyzed2025-11-260.1.100not analyzed2025-11-260.1.99not analyzed2025-11-240.1.98not analyzed2025-11-240.1.97not analyzed2025-11-210.1.96not analyzed2025-11-210.1.95not analyzed2025-11-210.1.94not analyzed2025-11-210.1.93not analyzed2025-11-210.1.92not analyzed2025-11-210.1.91not analyzed2025-11-210.1.90not analyzed2025-11-190.1.89not analyzed2025-11-190.1.88not analyzed2025-11-190.1.87not analyzed2025-11-180.1.86not analyzed2025-11-170.1.85not analyzed2025-11-170.1.83not analyzed2025-11-170.1.82not analyzed2025-11-170.1.81not analyzed2025-11-170.1.80not analyzed2025-11-170.1.79not analyzed2025-11-170.1.78not analyzed2025-11-140.1.77not analyzed2025-11-120.1.76not analyzed2025-11-120.1.75not analyzed2025-11-120.1.74not analyzed2025-11-120.1.73not analyzed2025-11-110.1.72not analyzed2025-11-110.1.71not analyzed2025-11-110.1.70not analyzed2025-11-100.1.69not analyzed2025-11-100.1.68not analyzed2025-11-100.1.67not analyzed2025-11-100.1.66not analyzed2025-11-060.1.65not analyzed2025-11-050.1.64not analyzed2025-11-050.1.63not analyzed2025-11-050.1.62not analyzed2025-11-050.1.61not analyzed2025-11-050.1.60not analyzed2025-11-050.1.59not analyzed2025-11-050.1.58not analyzed2025-11-040.1.57not analyzed2025-11-040.1.56not analyzed2025-11-040.1.55not analyzed2025-11-040.1.54not analyzed2025-11-030.1.53not analyzed2025-11-030.1.52not analyzed2025-11-030.1.51not analyzed2025-10-310.1.50not analyzed2025-10-310.1.49not analyzed2025-10-310.1.48not analyzed2025-10-300.1.47not analyzed2025-10-300.1.46not analyzed2025-10-240.1.45not analyzed2025-10-220.1.44not analyzed2025-10-220.1.43not analyzed2025-10-200.1.42not analyzed2025-10-170.1.41not analyzed2025-10-170.1.40not analyzed2025-10-160.1.39not analyzed2025-10-150.1.38not analyzed2025-10-100.1.37not analyzed2025-10-100.1.36not analyzed2025-10-090.1.35not analyzed2025-10-090.1.34not analyzed2025-10-090.1.33not analyzed2025-09-260.1.32not analyzed2025-09-250.1.31not analyzed2025-09-240.1.30not analyzed2025-09-220.1.29not analyzed2025-09-190.1.28not analyzed2025-09-190.1.27not analyzed2025-09-190.1.26not analyzed2025-09-180.1.25not analyzed2025-09-180.1.24not analyzed2025-09-180.1.23not analyzed2025-09-180.1.22not analyzed2025-09-180.1.21not analyzed2025-09-170.1.20not analyzed2025-09-170.1.19not analyzed2025-09-170.1.18not analyzed2025-09-170.1.17not analyzed2025-09-170.1.16not analyzed2025-09-170.1.15not analyzed2025-09-170.1.14not analyzed2025-09-170.1.13not analyzed2025-09-170.1.12not analyzed2025-08-270.1.11not analyzed2025-08-270.1.10not analyzed2025-08-270.1.9not analyzed2025-08-270.1.8not analyzed2025-08-270.1.7not analyzed2025-08-260.1.6not analyzed2025-08-260.1.5not analyzed2025-08-220.1.4not analyzed2025-08-130.1.2not analyzed2025-08-130.1.1not analyzed2025-08-130.1.0not analyzed2025-08-13
2 of 2 jobs captured: build-import success, build-import success · Generated 2026-11-06 · run 37680aec-d88b-4668-92db-2bfb2d9e3cbd
analysis 0.1.0 · 2026-11-06 · 4346b99 · graph v2