{"action":"Upgrade atomic-agents-stack to 1.1.0 or later.","affected":[{"fixed":"1.1.0","introduced":"0"}],"component":"atomic-agents-stack","cve_ids":["CVE-2026-91989"],"ecosystem":"PyPI","epss":0.01332,"exploited":false,"fixed_versions":["1.1.0"],"ghsa_id":"GHSA-rm43-82j9-r4mj","id":"tcs_01M5KFY8K247M35RWFJDBY08CZ","modified_at":"2026-09-16T03:56:03.982056126Z","published_at":"2026-08-13T14:17:13Z","references":["https://osv.dev/vulnerability/GHSA-rm43-82j9-r4mj","https://github.com/dep0we/atomic-agents-stack/security/advisories/GHSA-rm43-82j9-r4mj","https://github.com/dep0we/atomic-agents-stack/commit/ec474f458122c5c0ca718d0df3078c8080338b2c","https://github.com/dep0we/atomic-agents-stack"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-rm43-82j9-r4mj","url":"https://osv.dev/vulnerability/GHSA-rm43-82j9-r4mj"}],"summary":"atomic-agents-stack: Dashboard HTTP server path traversal allows arbitrary file read"}