MEDIUM5.3PyPI
GHSA-h336-2wxm-pr6q· CVE-2026-22680, PYSEC-2026-2855OpenViking contains a missing authorization vulnerability in the task polling endpoints
Modified: 9/10/2026
package
PyPI/openviking
pkg:pypi/openviking
CRITICAL9.1PyPI
GHSA-jgq2-vq69-gr6h· CVE-2026-40525, PYSEC-2026-438OpenViking: Unauthenticated remote bot control via OpenAPI HTTP routes
Modified: 9/10/2026
HIGH7.8PyPI
GHSA-rpqr-j937-6qr9· CVE-2026-28518, PYSEC-2026-2856OpenViking contains a Path Traversal vulnerability
Modified: 9/10/2026
MEDIUM5.3PyPI
PYSEC-2026-2855· CVE-2026-22680, GHSA-h336-2wxm-pr6qOpenViking contains a missing authorization vulnerability in the task polling endpoints
Modified: 7/13/2026
HIGH7.8PyPI
PYSEC-2026-2856· CVE-2026-28518, GHSA-rpqr-j937-6qr9OpenViking contains a Path Traversal vulnerability
Modified: 7/13/2026
CRITICAL9.1PyPI
PYSEC-2026-438· CVE-2026-40525, GHSA-jgq2-vq69-gr6hOpenViking: Unauthenticated remote bot control via OpenAPI HTTP routes
Modified: 7/1/2026