HIGHPyPI
GHSA-j659-8xh6-5pq5· CVE-2026-91987atomic-agents-stack: Parallel helper/delegate batch reserves $0 for models absent from the pricing table, bypassing the cost-cap fan-out guard
Modified: 9/16/2026
package
PyPI/atomic-agents-stack
pkg:pypi/atomic-agents-stack
HIGHPyPI
GHSA-rm43-82j9-r4mj· CVE-2026-91989atomic-agents-stack: Dashboard HTTP server path traversal allows arbitrary file read
Modified: 9/16/2026
HIGHPyPI
GHSA-xhcr-cqfr-m3hv· CVE-2026-91988atomic-agents-stack: HTTP MCP catalog accepts cleartext http and spawns catalog-supplied commands (MITM to RCE)
Modified: 9/16/2026