PyPI/reachy-mini CVE-2026-55419: medium 5.3, EPSS 0.48%
reachy_mini Allows Unrestricted Upload of File with Dangerous Type
Action: Upgrade reachy-mini to 1.8.2 or later.
pip install reachy-mini==1.8.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.8.2 | - |
Fixed versions
| 1.8.2 |
Sources
- osv: GHSA-m2pc-3q4q-w6jr
- https://github.com/pollen-robotics/reachy_mini/security/advisories/GHSA-m2pc-3q4q-w6jr
- https://github.com/pollen-robotics/reachy_mini/commit/984c7723b3ec5da63f4e0a2bcf9f120ceb563e04
- https://github.com/pollen-robotics/reachy_mini
CVE-2026-55419 · published · modified · JSON