Vulnerabilities

TI-2026-29825 CVE-2026-41206 · GHSA-vp22-38m5-r39r

PySpector has a Plugin Code Execution Bypass via Incomplete Static Analysis in PluginSecurity.validate_plugin_code

HIGH 66

PySpector is a static analysis security testing (SAST) Framework engineered for modern Python development workflows.

CVSS 4.0MEDIUM 6.9 Local Low privileges User interaction EPSS 0.00185 Published 2026-04-23 Fixed in 0.1.8 CWE-184

TI-2026-25570 CVE-2026-33140 · GHSA-2gmv-2r3v-jxj2

MEDIUM 63

PySpector is a static analysis security testing (SAST) Framework engineered for modern Python development workflows.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00231 Published 2026-03-20 Fixed in 0.1.7 CWE-79

TI-2026-25569 CVE-2026-33139 · GHSA-v3xv-8vc3-h2m6

HIGH 71

PySpector is a static analysis security testing (SAST) Framework engineered for modern Python development workflows.

CVSS 4.0HIGH 8.3 Local No auth User interaction EPSS 0.00175 Published 2026-03-20 Fixed in 0.1.7 CWE-184