HIGH7.5PyPI
PYSEC-2026-2877· CVE-2026-44716, GHSA-3363-2ph6-35whPipecat: Path Traversal in Pipecat Runner `/files` Endpoint — Arbitrary File Read via `%2F`-Encoded Separator
Modified: 7/13/2026
package
PyPI/pipecat-ai
pkg:pypi/pipecat-ai
HIGH7.5PyPI
PYSEC-2026-2878· CVE-2026-54695, GHSA-j8cv-x86q-rj85Pipecat: Telephony WebSocket `/ws` Unauthenticated Call-Control Abuse via Attacker-Supplied Call SID
Modified: 7/13/2026
CRITICAL9.8PyPI
PYSEC-2026-458· CVE-2025-62373, GHSA-c2jg-5cp7-6wc7Pipecat: Remote Code Execution by Pickle Deserialization Through LivekitFrameSerializer
Modified: 7/1/2026
HIGH7.5PyPI
GHSA-3363-2ph6-35wh· CVE-2026-44716, PYSEC-2026-2877Pipecat: Path Traversal in Pipecat Runner `/files` Endpoint — Arbitrary File Read via `%2F`-Encoded Separator
Modified: 7/13/2026
CRITICAL9.8PyPI
GHSA-c2jg-5cp7-6wc7· CVE-2025-62373, PYSEC-2026-458Pipecat: Remote Code Execution by Pickle Deserialization Through LivekitFrameSerializer
Modified: 6/29/2026
HIGH7.5PyPI
GHSA-j8cv-x86q-rj85· CVE-2026-54695, PYSEC-2026-2878Pipecat: Telephony WebSocket `/ws` Unauthenticated Call-Control Abuse via Attacker-Supplied Call SID
Modified: 7/13/2026