MEDIUM5.3PyPI
GHSA-3c3g-7hwg-9qmr· CVE-2026-10566, PYSEC-2026-2637FoundationAgents MetaGPT: Deserialization through flawed argument mapping via Message.check_instruct_content()
Modified: 7/13/2026
package
PyPI/metagpt
pkg:pypi/metagpt
HIGH7.3PyPI
GHSA-3ghp-8r47-4gj4· CVE-2026-5971, PYSEC-2026-2638FoundationAgents MetaGPT vulnerable to eval injection
Modified: 7/13/2026
HIGH7.3PyPI
GHSA-fcc8-4q7h-wvwc· CVE-2026-5974, PYSEC-2026-2639FoundationAgents MetaGPT vulnerable to OS Command Injection in metagpt/tools/libs/terminal.py
Modified: 7/13/2026
HIGH8.8PyPI
GHSA-g7ph-8423-pf4j· CVE-2024-23750, PYSEC-2024-9Code execution in metagpt
Modified: 2/16/2024
HIGH7.3PyPI
GHSA-g977-h85w-h2xj· CVE-2026-5970, PYSEC-2026-2640MetaGPT has an Injection issue
Modified: 7/13/2026
HIGH7.3PyPI
GHSA-qw5f-qpq5-ppfg· CVE-2026-5973, PYSEC-2026-2641FoundationAgents MetaGPT vulnerable to OS Command Injection in metagpt/utils/common.py
Modified: 7/13/2026
MEDIUM6.3PyPI
GHSA-r5v8-c28h-f8r8· CVE-2026-6111, PYSEC-2026-2642MetaGPT affected by server-side request forgery in metagpt/utils/common.py
Modified: 7/13/2026
MEDIUM4.3PyPI
GHSA-w287-wwhf-95vv· CVE-2026-6109, PYSEC-2026-2643MetaGPT has an eval injection via a cross-site request forgery attack
Modified: 7/13/2026
HIGH7.3PyPI
GHSA-wp29-qmvj-frvp· CVE-2026-5972, PYSEC-2026-2644FoundationAgents MetaGPT vulnerable to os command injection via the Terminal.run_command
Modified: 7/13/2026
HIGH7.3PyPI
GHSA-xr7v-m9px-q4qj· CVE-2026-6110, PYSEC-2026-2645MetaGPT has an eval injection in metagpt/strategy/tot.py
Modified: 7/13/2026
—PyPI
PYSEC-2024-9· CVE-2024-23750, GHSA-g7ph-8423-pf4jModified: 6/10/2026
MEDIUM5.3PyPI
PYSEC-2026-2637· CVE-2026-10566, GHSA-3c3g-7hwg-9qmrFoundationAgents MetaGPT: Deserialization through flawed argument mapping via Message.check_instruct_content()
Modified: 7/13/2026
HIGH7.3PyPI
PYSEC-2026-2638· CVE-2026-5971, GHSA-3ghp-8r47-4gj4FoundationAgents MetaGPT vulnerable to eval injection
Modified: 7/13/2026
HIGH7.3PyPI
PYSEC-2026-2639· CVE-2026-5974, GHSA-fcc8-4q7h-wvwcFoundationAgents MetaGPT vulnerable to OS Command Injection in metagpt/tools/libs/terminal.py
Modified: 7/13/2026
HIGH7.3PyPI
PYSEC-2026-2640· CVE-2026-5970, GHSA-g977-h85w-h2xjMetaGPT has an Injection issue
Modified: 7/13/2026
HIGH7.3PyPI
PYSEC-2026-2641· CVE-2026-5973, GHSA-qw5f-qpq5-ppfgFoundationAgents MetaGPT vulnerable to OS Command Injection in metagpt/utils/common.py
Modified: 7/13/2026
MEDIUM6.3PyPI
PYSEC-2026-2642· CVE-2026-6111, GHSA-r5v8-c28h-f8r8MetaGPT affected by server-side request forgery in metagpt/utils/common.py
Modified: 7/13/2026
MEDIUM4.3PyPI
PYSEC-2026-2643· CVE-2026-6109, GHSA-w287-wwhf-95vvMetaGPT has an eval injection via a cross-site request forgery attack
Modified: 7/13/2026
HIGH7.3PyPI
PYSEC-2026-2644· CVE-2026-5972, GHSA-wp29-qmvj-frvpFoundationAgents MetaGPT vulnerable to os command injection via the Terminal.run_command
Modified: 7/13/2026
HIGH7.3PyPI
PYSEC-2026-2645· CVE-2026-6110, GHSA-xr7v-m9px-q4qjMetaGPT has an eval injection in metagpt/strategy/tot.py
Modified: 7/13/2026