PyPI/ouroboros-ai CVE-2026-66065: high 8.4, EPSS 0.24%
ouroboros-ai: Incomplete fix of CVE-2026-47211: untrusted project .env can still reach RCE via omitted execution-routing keys
Action: Upgrade ouroboros-ai to 0.42.1 or later.
pip install ouroboros-ai==0.42.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.42.1 | - |
Fixed versions
| 0.42.1 |
Sources
- osv: GHSA-jv2h-4p9v-wf5w
- nvd: CVE-2026-66065
- https://github.com/Q00/ouroboros/security/advisories/GHSA-jv2h-4p9v-wf5w
- https://github.com/Q00/ouroboros
CVE-2026-66065 · published · modified · JSON