Vulnerabilities
Summary — last 7 days
New vulnerabilities4,625▼ 755 vs. last week
Critical / high1,827▼ 1,239 vs. last week
New active exploitation (KEV)8▼ 1 vs. last week
Unscored (no CVSS)867▲ 773 vs. last week
More filters
1 results, sorted by published date (most recent first)
| CVE | Status | Severity | EPSS | Active exploitation | Affected technologies | Published ▼ | Modified | Description |
|---|---|---|---|---|---|---|---|---|
| Awaiting Analysis | Medium (5.9) | 0.29% | — | Cohere Python SDKAI | 10/10/2026 | 10/16/2026 | Cohere Python SDK 5.11.0 through 7.2.0 contains a path traversal (tar slip) vulnerability in _s3_models_dir_to_tarfile that allows arbitrary file write via unvalidated tarfile.extractall calls. Attackers who can write model archives to the victim's S3 prefix can include absolute paths or ../ members to overwrite files… |