Vulnerabilities
LMCache: Remote code execution via unsafe deserialization in multiprocess mode transport (Critical severity, CVE-2026-105192)
A critical-severity advisory for the pip package lmcache is fixed in version 0.5.6.
pip
Everything Threat Times has reported about pip: 3 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
claude-agent-sdk Fixes Critical-Severity Bug CVE-2026-96620
A critical-severity advisory for the pip package claude-agent-sdk is fixed in version 0.2.121.
Vulnerabilities
Tornado: StaticFileHandler follows symlinks outside static root (path traversal) (High severity, GHSA-c2m8-h5v5-343r)
A high-severity advisory for the pip package tornado is fixed in version 6.5.9.