PyPI/tiny-scientist CVE-2025-55149: medium 6.7, EPSS 0.72%

TinyScientist has Path Traversal Vulnerability in PDF Review Function (CWE-22)

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: PYSEC-2026-1967
• nvd: CVE-2025-55149
• https://github.com/ulab-uiuc/tiny-scientist/security/advisories/GHSA-rrgf-hcr9-jq6h
• https://github.com/ulab-uiuc/tiny-scientist/commit/7fd42873603012acb8c55a4fc3eaac9ab18e6559
• https://github.com/ulab-uiuc/tiny-scientist
• https://pypi.org/project/tiny-scientist
• https://github.com/advisories/GHSA-rrgf-hcr9-jq6h

CVE-2025-55149 · published 2026-07-07T16:03:00.787606Z · modified 2026-07-07T17:48:05.321893729Z · JSON