Skip to content
Tools / agent-zero / Security

Security Deep Dive

agent-zero

Security posture and CVE patch evidence from tracked releases.

Back to Tool

1 actively-exploited dependency CVE affects v1.19.

KEV-listed CVEs are confirmed exploited in the wild — patch urgently.

Versions by Severity

CVEs are attributed to tracked releases published before the patch release.

20 versions tracked
Version Published C H M L KEV Notes
v1.19 2026-06-02 — — — — —
Latest
v1.18 2026-05-26 — — — — —
—
v1.17 2026-05-23 — — — — —
—
v1.16 2026-05-22 — — — — —
—
v1.15 2026-05-15 — — — — —
—
v1.14 2026-05-12 — — — — —
Patches CVE-2023-4863
v1.13 2026-05-05 — 1 — — KEV 1
—
v1.12 2026-05-03 — 1 — — KEV 1
—
v1.11 2026-05-02 — 1 — — KEV 1
—
v1.10 2026-04-28 — 1 — — KEV 1
—
v1.9 2026-04-13 — 1 — — KEV 1
—
v1.8 2026-04-08 — 1 — — KEV 1
—
v1.7 2026-04-03 — 1 — — KEV 1
—
v1.6 2026-03-31 — 1 — — KEV 1
—
v1.5 2026-03-30 — 1 — — KEV 1
—
v1.4 2026-03-30 — 1 — — KEV 1
—
v1.3 2026-03-27 — 1 — — KEV 1
—
v1.2 2026-03-26 — 1 — — KEV 1
—
v1.1 2026-03-26 — 1 — — KEV 1
—
v0.9.8.3 2026-03-24 — 1 — — KEV 1
—
— Signed — SLSA — SBOM ✗ Security policy Weekly cadence · 4d median Active maintainer

Trust Signals — 2 of 9 Present

Evidence already collected from releases and repository metadata.

2/9 Present
Signed releases Unknown
Latest release artifact signature Latest release
—
SLSA provenance Unknown
Attestation predicate level Latest release
—
SBOM published Unknown
GitHub SBOM API Latest release
—
SECURITY.md Absent
GitHub repository metadata Repository policy
Checked: 21d ago
Release cadence: weekly Present
4d median over recent releases Release history
Latest release: 1d ago
Maintainer active Present
Recent commit activity Repository
Last commit: 1d ago
Checksums (SHA256SUMS) Not active yet
SHA256SUMS or equivalent Release asset
Latest release: 1d ago
GitHub Actions attestation Not active yet
actions/attest-build-provenance Workflow file
Latest release: 1d ago
Signing assets Not active yet
.sig, .crt, cosign.pub, or similar Release asset
Latest release: 1d ago
0.5/10 Security Score
Dependency Exposure 180 transitive dependency CVEs found in the latest SBOM. 17 critical.

Security Score

A composite score aggregating Scorecard performance, CVE patch history, OpenSSF badge tier, and dependency vulnerability exposure. Score ≥ 7.0 is healthy; < 4.0 warrants attention.

epss

0.00 / 0.5

Max EPSS 0.933

freshness

1.00 / 1.0

Up to date

scorecard

2.00 / 4.0

⚠ Estimated — not yet collected

cve health

0.00 / 2.5

⚠ No direct scan — 17c/85h transitive CVEs

patch speed

0.50 / 0.5

⚠ Estimated — no CVE patch history

kev exposure

-1.50 / 1.5

KEV exposure detected

supply chain risk

-1.50 / 10.0

Risk 100.0/100

Score breakdown

schema v2

Vulnerability posture

vulnerability posture

0.0

25%

direct cves: clear cve scan: estimated

Release responsiveness

release responsiveness

10.0

5%

patch speed days: no_history

Dependency exposure

dependency exposure

0.0

10%

supply chain risk: 100.0 transitive cves: 17c/85h

Provenance trust

provenance trust

5.0

40%

scorecard score: estimated openssf badge: none

Maintainer health

maintainer health

10.0

10%

activity freshness: 0d

Operational risk

operational risk

0.0

10%

kev exposure: detected epss max: 0.933
How is this calculated?

The six dimensions group the legacy score signals into weighted categories: direct vulnerability status, patch responsiveness, dependency exposure, provenance checks, maintainer activity, and exploitability risk. The flat component values above remain available for compatibility.

Supply Chain Risk

Risk 100.0/100
17 Transitive critical CVEs
1 KEV-transitive CVEs
57% Dependency freshness

OpenSSF Badge

OpenSSF none

Badge indicates adherence to open-source best practices.

CVE Patch History

Tracks CVEs that were addressed in tagged releases. Shorter gap between disclosure and patch = faster response. EPSS = predicted probability of exploitation in next 30 days (FIRST.org); colored at ≥90%ile and ≥50%ile.

CVEs Patched by Year

Critical High Medium Low
2026
1
CVE Severity EPSS Disclosed Fixed in Days to fix vs Ecosystem Median KEV
CVE-2023-4863 HIGH 99%ile — v1.14 — — KEV

KEV = CISA Known Exploited Vulnerabilities catalog — actively exploited in the wild.

Dependency Vulnerabilities

275 dependencies scanned View full dependency list →

Scanning the SBOM (Software Bill of Materials) of the latest release for known vulnerabilities in transitive dependencies.

Critical

17

High

85

Medium

62

Low

12

Unknown

4

1 dependency vulnerabilities are in KEV.

CISA confirmed these vulnerabilities are actively exploited. Treat as critical priority.

Still affecting latest (10) All (180)
Critical 17 High 85 Medium 62 Low 12 Unknown 4
CVE Severity KEV Dependency Affected version Cleared in release
CVE-2014-3007 critical — pillow — v1.14
CVE-2016-4009 critical — pillow — v1.14
CVE-2018-20060 critical — urllib3 — v1.14
CVE-2020-11538 critical — pillow — v1.14
CVE-2020-5310 critical — pillow — v1.14
CVE-2020-5311 critical — pillow — v1.14
CVE-2020-5312 critical — pillow — v1.14
CVE-2021-25289 critical — pillow — v1.14
CVE-2021-34552 critical — pillow — v1.14
CVE-2022-22817 critical — pillow — v1.14
CVE-2023-50447 critical — pillow — v1.14
CVE-2025-14009 critical — nltk — v1.14
CVE-2025-43859 critical — h11 — v1.14
CVE-2025-64712 critical — unstructured 0.16.23 v1.14
CVE-2025-68664 critical — langchain-core 0.3.49 v1.14
CVE-2026-35030 critical — litellm 1.79.3 v1.14
CVE-2026-41242 critical — protobufjs 7.5.4 v1.14
CVE-2014-1932 high — pillow — v1.14
CVE-2014-3589 high — pillow — v1.14
CVE-2014-3598 high — pillow — v1.14
CVE-2014-9601 high — pillow — v1.14
CVE-2016-0775 high — pillow — v1.14
CVE-2016-2533 high — pillow — v1.14
CVE-2016-3076 high — pillow — v1.14
CVE-2016-9190 high — pillow — v1.14
CVE-2016-9243 high — cryptography — v1.14
CVE-2018-10903 high — cryptography — v1.14
CVE-2019-11324 high — urllib3 — v1.14
CVE-2019-14322 high — werkzeug — v1.14
CVE-2019-14751 high — nltk — v1.14
CVE-2019-14806 high — werkzeug — v1.14
CVE-2019-16865 high — pillow — v1.14
CVE-2019-18874 high — psutil — v1.14
CVE-2019-19911 high — pillow — v1.14
CVE-2020-10177 high — pillow — v1.14
CVE-2020-10378 high — pillow — v1.14
CVE-2020-10379 high — pillow — v1.14
CVE-2020-10994 high — pillow — v1.14
CVE-2020-25659 high — cryptography — v1.14
CVE-2020-35653 high — pillow — v1.14
CVE-2020-35654 high — pillow — v1.14
CVE-2020-36242 high — cryptography — v1.14
CVE-2020-5313 high — pillow — v1.14
CVE-2020-7212 high — urllib3 — v1.14
CVE-2020-7694 high — uvicorn — v1.14
CVE-2020-7695 high — uvicorn — v1.14
CVE-2021-23437 high — pillow — v1.14
CVE-2021-25287 high — pillow — v1.14
CVE-2021-25288 high — pillow — v1.14
CVE-2021-25290 high — pillow — v1.14
CVE-2021-25291 high — pillow — v1.14
CVE-2021-25293 high — pillow — v1.14
CVE-2021-27921 high — pillow — v1.14
CVE-2021-27922 high — pillow — v1.14
CVE-2021-27923 high — pillow — v1.14
CVE-2021-28675 high — pillow — v1.14
CVE-2021-28676 high — pillow — v1.14
CVE-2021-28677 high — pillow — v1.14
CVE-2021-33503 high — urllib3 — v1.14
CVE-2021-3828 high — nltk — v1.14
CVE-2021-3842 high — nltk — v1.14
CVE-2021-43854 high — nltk — v1.14
CVE-2022-24303 high — pillow — v1.14
CVE-2022-30595 high — pillow — v1.14
CVE-2022-45198 high — pillow — v1.14
CVE-2022-45199 high — pillow — v1.14
CVE-2023-0286 high — cryptography — v1.14
CVE-2023-25577 high — werkzeug — v1.14
CVE-2023-38325 high — cryptography — v1.14
CVE-2023-43804 high — urllib3 — v1.14
CVE-2023-44271 high — pillow — v1.14
CVE-2023-4863 high KEV pillow — v1.15
CVE-2023-50782 high — cryptography — v1.14
CVE-2024-26130 high — cryptography — v1.14
CVE-2024-28219 high — pillow — v1.14
CVE-2024-34069 high — werkzeug — v1.14
CVE-2024-39705 high — nltk — v1.14
CVE-2024-52595 high — lxml-html-clean — v1.14
CVE-2025-48379 high — pillow — v1.14
CVE-2025-65106 high — langchain-core 0.3.49 v1.14
CVE-2025-66418 high — urllib3 — v1.14
CVE-2025-66471 high — urllib3 — v1.14
CVE-2025-6984 high — langchain-community 0.3.19 v1.14
CVE-2026-0846 high — nltk — v1.14
CVE-2026-0847 high — nltk — v1.14
CVE-2026-21441 high — urllib3 — v1.14
CVE-2026-25990 high — pillow — v1.14
CVE-2026-26007 high — cryptography — v1.14
CVE-2026-32640 high — simpleeval 1.0.3 v1.14
CVE-2026-33231 high — nltk — v1.14
CVE-2026-33236 high — nltk — v1.14
CVE-2026-34070 high — langchain-core 0.3.49 v1.14
CVE-2026-35029 high — litellm 1.79.3 v1.14
CVE-2026-40192 high — pillow — v1.14
CVE-2026-42215 high — gitpython 3.1.43 v1.14
CVE-2026-42271 high — litellm 1.79.3 v1.14
CVE-2026-42284 high — gitpython 3.1.43 v1.14
CVE-2026-42311 high — pillow — v1.14
CVE-2026-44243 high — gitpython 3.1.43 v1.14
CVE-2026-44244 high — gitpython 3.1.43 v1.14
CVE-2026-4867 high — path-to-regexp 0.1.12 v1.14
GHSA-69x8-hrgq-fjj8 high — litellm 1.79.3 v1.14
CVE-2014-1933 medium — pillow — v1.14
CVE-2016-0740 medium — pillow — v1.14
CVE-2016-10516 medium — werkzeug — v1.14
CVE-2016-9015 medium — urllib3 — v1.14
CVE-2016-9189 medium — pillow — v1.14
CVE-2018-25091 medium — urllib3 — v1.14
CVE-2019-11236 medium — urllib3 — v1.14
CVE-2020-26137 medium — urllib3 — v1.14
CVE-2020-28724 medium — werkzeug — v1.14
CVE-2020-35655 medium — pillow — v1.14
CVE-2021-25292 medium — pillow — v1.14
CVE-2021-28363 medium — urllib3 — v1.14
CVE-2021-28678 medium — pillow — v1.14
CVE-2022-22815 medium — pillow — v1.14
CVE-2022-22816 medium — pillow — v1.14
CVE-2023-23931 medium — cryptography — v1.14
CVE-2023-45803 medium — urllib3 — v1.14
CVE-2023-46136 medium — werkzeug — v1.14
CVE-2023-49083 medium — cryptography — v1.14
CVE-2024-0727 medium — cryptography — v1.14
CVE-2024-37891 medium — urllib3 — v1.14
CVE-2024-49766 medium — werkzeug — v1.14
CVE-2024-49767 medium — werkzeug — v1.14
CVE-2025-50181 medium — urllib3 — v1.14
CVE-2025-50182 medium — urllib3 — v1.14
CVE-2025-61765 medium — python-socketio — v1.14
CVE-2025-62707 medium — pypdf 6.0.0 v1.14
CVE-2025-62708 medium — pypdf 6.0.0 v1.14
CVE-2025-66019 medium — pypdf 6.0.0 v1.14
CVE-2025-66221 medium — werkzeug — v1.14
CVE-2025-69534 medium — markdown 3.7 v1.14
CVE-2025-71176 medium — pytest — v1.14
CVE-2026-21860 medium — werkzeug — v1.14
CVE-2026-24688 medium — pypdf 6.0.0 v1.14
CVE-2026-27024 medium — pypdf 6.0.0 v1.14
CVE-2026-27025 medium — pypdf 6.0.0 v1.14
CVE-2026-27026 medium — pypdf 6.0.0 v1.14
CVE-2026-27199 medium — werkzeug — v1.14
CVE-2026-27888 medium — pypdf 6.0.0 v1.14
CVE-2026-28348 medium — lxml-html-clean — v1.14
CVE-2026-28350 medium — lxml-html-clean — v1.14
CVE-2026-28351 medium — pypdf 6.0.0 v1.14
CVE-2026-28684 medium — python-dotenv 1.1.0 v1.14
CVE-2026-28804 medium — pypdf 6.0.0 v1.14
CVE-2026-31826 medium — pypdf 6.0.0 v1.14
CVE-2026-33123 medium — pypdf 6.0.0 v1.14
CVE-2026-33230 medium — nltk — v1.14
CVE-2026-33699 medium — pypdf 6.0.0 v1.14
CVE-2026-39892 medium — cryptography — v1.14
CVE-2026-40087 medium — langchain-core 0.3.49 v1.14
CVE-2026-40260 medium — pypdf 6.0.0 v1.14
CVE-2026-41168 medium — pypdf 6.0.0 v1.14
CVE-2026-41312 medium — pypdf 6.0.0 v1.14
CVE-2026-41313 medium — pypdf 6.0.0 v1.14
CVE-2026-41314 medium — pypdf 6.0.0 v1.14
CVE-2026-42308 medium — pillow — v1.14
CVE-2026-42309 medium — pillow — v1.14
CVE-2026-42310 medium — pillow — v1.14
GHSA-39hc-v87j-747x medium — cryptography — v1.14
GHSA-h4gh-qq45-vh27 medium — cryptography — v1.14
GHSA-jgpv-4h4c-xhw3 medium — pillow — v1.14
GHSA-rf74-v2fm-23pw medium — nltk — v1.14
CVE-2023-23934 low — werkzeug — v1.14
CVE-2024-12797 low — cryptography — v1.14
CVE-2026-22690 low — pypdf 6.0.0 v1.14
CVE-2026-22691 low — pypdf 6.0.0 v1.14
CVE-2026-26013 low — langchain-core 0.3.49 v1.14
CVE-2026-27205 low — flask 3.0.3 v1.14
CVE-2026-27628 low — pypdf 6.0.0 v1.14
CVE-2026-34073 low — cryptography — v1.14
GHSA-4fx9-vc88-q2xc low — pillow — v1.14
GHSA-5cpq-8wj7-hf2v low — cryptography — v1.14
GHSA-jm77-qphf-c4w8 low — cryptography — v1.14
GHSA-v8gr-m533-ghj9 low — cryptography — v1.14
CVE-2022-29361 unknown — werkzeug — v1.14
OSV-2022-1074 unknown — pillow — v1.14
OSV-2022-715 unknown — pillow — v1.14
PYSEC-2023-175 unknown — pillow — v1.14

Showing 180 of 180

Beta — feedback welcome: [email protected]