Pipecat’s development runner exposes unauthenticated /start and /daily endpoints. When exposed to an untrusted network, anyone can create bot sessions and drain third-party AI API quotas. CVSS 5.6 Medium, fixed in 1.6.0.
CVE-2026-80205 fixed Text.findall(). The same vulnerability class remained in NLTK’s tgrep module. User-supplied regex patterns compiled against tree node labels with no timeout. CVSS 8.2 High, fixed in 3.10.3.
NLTK’s Text.findall() passes user-supplied patterns to Python’s re engine with no timeout and no complexity check. One request freezes the process indefinitely. CVSS 7.5 High, fixed in 3.10.0.
OpenAI released an LLM-only application security agent. We studied the codebase. Here’s what we found and why Kira chose a different architecture.
Flowise built a comprehensive SSRF protection module and used it throughout its codebase. The NemoGuardrails node calls bare fetch() instead. An authenticated user can reach internal services and cloud instance metadata. Affected <= 3.1.3, fix merged.
Ghost maintained a hardened, DNS-rebinding-resistant HTTP library and used it everywhere except webhook delivery, the one place where an admin directly controls the target URL.
One unauthenticated HTTP request. No login, no token, no credentials. Four independent weaknesses spread across the codebase, none dangerous alone, catastrophic together.
No marketing. Just security findings, attack breakdowns, and research from the Offgrid team when we publish.
No spam. Unsubscribe anytime.