PyPI/atomic-agents-stack CVE-2026-91987: high, EPSS 0.48%

atomic-agents-stack: Parallel helper/delegate batch reserves $0 for models absent from the pricing table, bypassing the cost-cap fan-out guard

Action: Upgrade atomic-agents-stack to 1.1.0 or later.

pip install atomic-agents-stack==1.1.0

Affected

Fixed versions

Sources

• osv: GHSA-j659-8xh6-5pq5
• https://github.com/dep0we/atomic-agents-stack/security/advisories/GHSA-j659-8xh6-5pq5
• https://github.com/dep0we/atomic-agents-stack
• https://github.com/dep0we/atomic-agents-stack/releases#release-v1.1.0

CVE-2026-91987 · published 2026-08-17T21:50:01Z · modified 2026-09-16T03:56:06.072717965Z · JSON