https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T13:50:37.344577+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-14542 CVE-2025-14542 — Command execution in python-utcp allows attackers to achieve remote code execution when fetching a remote Manual from a… 2026-10-02T13:50:37.383938+00:00

Affected: utcp

The vulnerability arises when a client fetches a tools’ JSON specification, known as a Manual, from a remote Manual Endpoint. While a provider may initially serve a benign manual (e.g., one defining an HTTP tool call), earning the clients’ trust, a malicious provider can later change the manual to exploit the client.

 https://cve.radiocsirt.org/vuln/ghsa-75mj-4g74-9rg2 GHSA-75mj-4g74-9rg2 — Universal Tool Calling Protocol (UTCP) client library for Python vulnerable to Trust Boundary Violation through Manual… 2026-10-02T13:50:37.384002+00:00

Affected: PyPI: utcp

The vulnerability arises when a client fetches a tools’ JSON specification, known as a Manual, from a remote Manual Endpoint. While a provider may initially serve a benign manual (e.g., one defining an HTTP tool call), earning the clients’ trust, a malicious provider can later change the manual to exploit the client.