HIGH7.1PyPI
PYSEC-2026-2481· CVE-2026-55787, GHSA-794r-5rp2-fpg8flyto-core has SSRF guard bypass via IPv6 transition addresses (IPv4-mapped / 6to4 / NAT64) in validate_url_ssrf
Modified: 7/13/2026
package
PyPI/flyto-core
pkg:pypi/flyto-core
HIGH8.4PyPI
PYSEC-2026-2482· CVE-2026-55786, GHSA-h9f9-h6gm-wc85flyto-core has Unauthenticated Command Execution via HTTP MCP `execute_module`
Modified: 7/13/2026
CRITICAL10.0PyPI
PYSEC-2026-3568· CVE-2026-67429, GHSA-2956-977x-2w3rFlyto2 Core: Arbitrary file write via image.download (and other file-writing modules)
Modified: 8/4/2026
HIGH8.5PyPI
PYSEC-2026-3569· CVE-2026-67424, GHSA-c9hr-64h3-gxpcFlyto2 Core: Guarded HTTP modules follow redirects into internal space without per-hop SSRF revalidation
Modified: 8/4/2026
HIGH8.6PyPI
PYSEC-2026-3570· CVE-2026-67427, GHSA-hr7p-wg7r-hg9mFlyto2 Core: ${env.VAR} interpolation reads any env secret despite env.get being denylisted
Modified: 8/4/2026
CRITICAL9.3PyPI
PYSEC-2026-3571· CVE-2026-67426, GHSA-jx74-cqjv-2c67Flyto2 Core: Unauthenticated flyto-verification /run: callback_url SSRF and internal runner-secret exfiltration
Modified: 8/4/2026
HIGH8.5PyPI
PYSEC-2026-3572· CVE-2026-67428, GHSA-pgwh-4jj4-qm8vFlyto2 Core: Multiple HTTP-family modules fetch client-controlled URLs without the SSRF guard their siblings apply (SSRF to internal/metadata)
Modified: 8/4/2026
HIGH8.6PyPI
PYSEC-2026-3573· CVE-2026-67425, GHSA-qq9q-xgm3-xv9gFlyto2 Core: LLM/API keys leak to an attacker-controlled base_url
Modified: 8/4/2026
CRITICAL10.0PyPI
GHSA-2956-977x-2w3r· CVE-2026-67429, PYSEC-2026-3568Flyto2 Core: Arbitrary file write via image.download (and other file-writing modules)
Modified: 8/4/2026
HIGH7.1PyPI
GHSA-794r-5rp2-fpg8· CVE-2026-55787, PYSEC-2026-2481flyto-core has SSRF guard bypass via IPv6 transition addresses (IPv4-mapped / 6to4 / NAT64) in validate_url_ssrf
Modified: 7/13/2026
HIGH8.5PyPI
GHSA-c9hr-64h3-gxpc· CVE-2026-67424, PYSEC-2026-3569Flyto2 Core: Guarded HTTP modules follow redirects into internal space without per-hop SSRF revalidation
Modified: 8/4/2026
HIGH8.4PyPI
GHSA-h9f9-h6gm-wc85· CVE-2026-55786, PYSEC-2026-2482flyto-core has Unauthenticated Command Execution via HTTP MCP `execute_module`
Modified: 7/13/2026
HIGH8.6PyPI
GHSA-hr7p-wg7r-hg9m· CVE-2026-67427, PYSEC-2026-3570Flyto2 Core: ${env.VAR} interpolation reads any env secret despite env.get being denylisted
Modified: 8/4/2026
CRITICAL9.3PyPI
GHSA-jx74-cqjv-2c67· CVE-2026-67426, PYSEC-2026-3571Flyto2 Core: Unauthenticated flyto-verification /run: callback_url SSRF and internal runner-secret exfiltration
Modified: 8/10/2026
HIGH8.5PyPI
GHSA-pgwh-4jj4-qm8v· CVE-2026-67428, PYSEC-2026-3572Flyto2 Core: Multiple HTTP-family modules fetch client-controlled URLs without the SSRF guard their siblings apply (SSRF to internal/metadata)
Modified: 8/4/2026
HIGH8.6PyPI
GHSA-qq9q-xgm3-xv9g· CVE-2026-67425, PYSEC-2026-3573Flyto2 Core: LLM/API keys leak to an attacker-controlled base_url
Modified: 8/4/2026