Early access. The directory is still filling out, and every rating here comes from a researcher's reported experience.

Security releases

Skyvern-AI

CVE-2026-123783: Skyvern through 1.0.56 contains a sandbox bypass vulnerability that allows authenticated users to execute code by reconstructing functions from raw bytecode wit

CVE-2026-123783 Nov 6, 2026 Source: Vendor

Skyvern through 1.0.56 contains a sandbox bypass vulnerability that allows authenticated users to execute code by reconstructing functions from raw bytecode with types.CodeType. Attackers can deploy scripts that evade the is_safe_script_code AST denylist and import blocked modules such as subprocess or socket to run code in the Skyvern server process.

Source of record The credited names below are quoted verbatim from the vendor's own advisory: https://nvd.nist.gov/vuln/detail/CVE-2026-123783
Are you credited here? Sign in to claim your line. It is yours immediately, with no review queue. The name the vendor printed stays next to your handle for anyone to check against the advisory above, and any member who thinks a claim is wrong can refute it.

Credited

1 line
Showing 1–1 of 1 matching , clear filters
CVE-2026-123783 BR2026-0000-042989 unclaimed
Credited as George Chen