{"data":{"ecosystem":"pypi","name":"pipecat-ai","url":"https://aisecwatch.com/packages/pypi/pipecat-ai","latestVersion":"1.12.0","firstReleaseAt":"2024-05-13T05:38:21.625Z","repository":"https://github.com/pipecat-ai/pipecat","llm":{"exposure":"direct","depth":0,"integratedAt":"2024-05-13T05:38:21.625Z","integratedVersion":"0.0.9","sdks":["anthropic","google-genai","groq","huggingface","langchain","mcp","mistralai","openai","strands"],"path":[]},"authority":{"profile":["filesystem","http","mcp_tools"],"fromDependencies":["pypi:aiofiles","pypi:aiohttp","pypi:httpx","pypi:mcp","pypi:requests"]},"dependencies":[{"ecosystem":"pypi","name":"accelerate","versionSpec":"<2,>=1.10.0","scope":"extra:moondream"},{"ecosystem":"pypi","name":"anthropic","versionSpec":"<2,>=0.49.0","scope":"extra:anthropic"},{"ecosystem":"pypi","name":"faster-whisper","versionSpec":"~=1.2.1","scope":"extra:whisper"},{"ecosystem":"pypi","name":"funasr","versionSpec":">=1.1.0","scope":"extra:funasr"},{"ecosystem":"pypi","name":"google-genai","versionSpec":"<3,>=2.19.0","scope":"extra:google"},{"ecosystem":"pypi","name":"groq","versionSpec":"<2,>=0.23.0","scope":"extra:groq"},{"ecosystem":"pypi","name":"langchain","versionSpec":"<2,>=1.2.13","scope":"extra:langchain"},{"ecosystem":"pypi","name":"langchain-community","versionSpec":"<1,>=0.4.1","scope":"extra:langchain"},{"ecosystem":"pypi","name":"langchain-openai","versionSpec":"<2,>=1.1.12","scope":"extra:langchain"},{"ecosystem":"pypi","name":"mcp","versionSpec":"<3,>=2.1.1","scope":"extra:mcp"},{"ecosystem":"pypi","name":"mem0ai","versionSpec":"<3,>=2","scope":"extra:mem0"},{"ecosystem":"pypi","name":"mistralai","versionSpec":"<3,>=2.0.0","scope":"extra:mistral"},{"ecosystem":"pypi","name":"openai","versionSpec":"<4,>=1.74.0","scope":"runtime"},{"ecosystem":"pypi","name":"sentry-sdk","versionSpec":"<3,>=2.28.0","scope":"extra:sentry"},{"ecosystem":"pypi","name":"strands-agents","versionSpec":"<2,>=1.9.1","scope":"extra:strands"},{"ecosystem":"pypi","name":"timm","versionSpec":"<2,>=1.0.13","scope":"extra:moondream"},{"ecosystem":"pypi","name":"transformers","versionSpec":"<6,>=5.10.0","scope":"extra:local-smart-turn"},{"ecosystem":"pypi","name":"aic-sdk","versionSpec":"~=3.1.0","scope":"extra:aic"},{"ecosystem":"pypi","name":"aiobotocore","versionSpec":"<4,>=3","scope":"extra:aws"},{"ecosystem":"pypi","name":"aiofiles","versionSpec":"<27,>=24.1.0","scope":"runtime"},{"ecosystem":"pypi","name":"aiohttp","versionSpec":"<4,>=3.11.12","scope":"runtime"},{"ecosystem":"pypi","name":"aiortc","versionSpec":"<2,>=1.14.0","scope":"extra:webrtc"},{"ecosystem":"pypi","name":"asyncpg","versionSpec":">=0.30.0","scope":"extra:pgmq"},{"ecosystem":"pypi","name":"audioop-lts","versionSpec":"~=0.2.1","scope":"runtime"},{"ecosystem":"pypi","name":"av","versionSpec":"<17.1.0","scope":"extra:rnnoise"},{"ecosystem":"pypi","name":"aws-sdk-bedrock-runtime","versionSpec":"<0.10,>=0.6.0","scope":"extra:aws-nova-sonic"},{"ecosystem":"pypi","name":"aws-sdk-sagemaker-runtime-http2","versionSpec":"<0.10,>=0.6.0","scope":"extra:sagemaker"},{"ecosystem":"pypi","name":"azure-cognitiveservices-speech","versionSpec":"<2,>=1.47.0","scope":"extra:azure"},{"ecosystem":"pypi","name":"camb-sdk","versionSpec":"<2,>=1.5.4","scope":"extra:camb"},{"ecosystem":"pypi","name":"coremltools","versionSpec":">=8.0","scope":"extra:local-smart-turn"},{"ecosystem":"pypi","name":"cryptography","versionSpec":">=45.0.0","scope":"extra:moq"},{"ecosystem":"pypi","name":"daily-python","versionSpec":"<1,>=0.29.0","scope":"extra:daily"},{"ecosystem":"pypi","name":"deepgram-sdk","versionSpec":"<8,>=6.1.1","scope":"extra:deepgram"},{"ecosystem":"pypi","name":"docstring-parser","versionSpec":"<1,>=0.16","scope":"runtime"},{"ecosystem":"pypi","name":"einops","versionSpec":"<1,>=0.8.0","scope":"extra:moondream"},{"ecosystem":"pypi","name":"fastapi","versionSpec":"<1,>=0.115.6","scope":"extra:runner"},{"ecosystem":"pypi","name":"google-cloud-speech","versionSpec":"<3,>=2.33.0","scope":"extra:google"},{"ecosystem":"pypi","name":"google-cloud-texttospeech","versionSpec":"<3,>=2.31.0","scope":"extra:google"},{"ecosystem":"pypi","name":"httpx","versionSpec":"<1,>=0.27","scope":"extra:jev"},{"ecosystem":"pypi","name":"hume","versionSpec":"<1,>=0.11.2","scope":"extra:hume"},{"ecosystem":"pypi","name":"jinja2","versionSpec":"<4,>=3.1.0","scope":"extra:cli"},{"ecosystem":"pypi","name":"kokoro-onnx","versionSpec":"<1,>=0.5.0","scope":"extra:kokoro"},{"ecosystem":"pypi","name":"livekit","versionSpec":"<2,>=1.0.13","scope":"extra:heygen"},{"ecosystem":"pypi","name":"livekit-api","versionSpec":"<2,>=1.0.5","scope":"extra:livekit"},{"ecosystem":"pypi","name":"loguru","versionSpec":"~=0.7.3","scope":"runtime"},{"ecosystem":"pypi","name":"loudness","versionSpec":"<1,>=0.2.0","scope":"runtime"},{"ecosystem":"pypi","name":"markdown","versionSpec":"<4,>=3.7","scope":"runtime"},{"ecosystem":"pypi","name":"mlx-whisper","versionSpec":"~=0.4.2","scope":"extra:mlx-whisper"},{"ecosystem":"pypi","name":"moonshine-voice","versionSpec":">=0.1.5","scope":"extra:moonshine"},{"ecosystem":"pypi","name":"moq-rs","versionSpec":"~=0.4.6","scope":"extra:moq"},{"ecosystem":"pypi","name":"num2words","versionSpec":">=0.5.14","scope":"runtime"},{"ecosystem":"pypi","name":"numba","versionSpec":"<1,>=0.61.2","scope":"runtime"},{"ecosystem":"pypi","name":"numpy","versionSpec":"<3,>=1.26.4","scope":"runtime"},{"ecosystem":"pypi","name":"nvidia-riva-client","versionSpec":"<3,>=2.25.1","scope":"extra:nvidia"},{"ecosystem":"pypi","name":"onnxruntime","versionSpec":"~=1.24.3","scope":"runtime"},{"ecosystem":"pypi","name":"opencv-python-headless","versionSpec":"<5,>=4.11.0.86","scope":"extra:webrtc"},{"ecosystem":"pypi","name":"opentelemetry-api","versionSpec":"<2,>=1.33.0","scope":"extra:tracing"},{"ecosystem":"pypi","name":"opentelemetry-instrumentation","versionSpec":"<1,>=0.54b0","scope":"extra:tracing"},{"ecosystem":"pypi","name":"opentelemetry-sdk","versionSpec":"<2,>=1.33.0","scope":"extra:tracing"},{"ecosystem":"pypi","name":"ormsgpack","versionSpec":"<2,>=1.7.0","scope":"extra:fish"},{"ecosystem":"pypi","name":"pgmq","versionSpec":"<1.1,>=1.0.6","scope":"extra:pgmq"},{"ecosystem":"pypi","name":"pillow","versionSpec":"<13,>=11.1.0","scope":"runtime"},{"ecosystem":"pypi","name":"pipecat-ai-context-hub","versionSpec":"<1,>=0.7.0","scope":"extra:cli"},{"ecosystem":"pypi","name":"pipecat-ai-prebuilt","versionSpec":">=1.2.2","scope":"extra:runner"},{"ecosystem":"pypi","name":"piper-tts","versionSpec":"<2,>=1.3.0","scope":"extra:piper"},{"ecosystem":"pypi","name":"pocket-tts","versionSpec":"<3,>=2.1.0","scope":"extra:pocket-tts"},{"ecosystem":"pypi","name":"protobuf","versionSpec":"<7,>=5.29.6","scope":"runtime"},{"ecosystem":"pypi","name":"pvkoala","versionSpec":"~=2.0.3","scope":"extra:koala"},{"ecosystem":"pypi","name":"pyaudio","versionSpec":"~=0.2.14","scope":"extra:local"},{"ecosystem":"pypi","name":"pydantic","versionSpec":"<3,>=2.10.6","scope":"runtime"},{"ecosystem":"pypi","name":"pygobject","versionSpec":"~=3.50.0","scope":"extra:gstreamer"},{"ecosystem":"pypi","name":"pyjwt","versionSpec":"<3,>=2.12.0","scope":"extra:livekit"},{"ecosystem":"pypi","name":"pyrnnoise","versionSpec":"~=0.4.3","scope":"extra:rnnoise"},{"ecosystem":"pypi","name":"python-dotenv","versionSpec":"<2.0.0,>=1.0.0","scope":"runtime"},{"ecosystem":"pypi","name":"pyvips","versionSpec":"<4,>=3.0.0","scope":"extra:moondream"},{"ecosystem":"pypi","name":"pyyaml","versionSpec":"<7,>=6","scope":"runtime"},{"ecosystem":"pypi","name":"questionary","versionSpec":"<3,>=2.0.0","scope":"extra:cli"},{"ecosystem":"pypi","name":"redis","versionSpec":">=5.0.0","scope":"extra:redis"},{"ecosystem":"pypi","name":"requests","versionSpec":"<3,>=2.32.5","scope":"extra:kokoro"},{"ecosystem":"pypi","name":"resampy","versionSpec":"~=0.4.3","scope":"runtime"},{"ecosystem":"pypi","name":"rich","versionSpec":"<14,>=13.0.0","scope":"extra:cli"},{"ecosystem":"pypi","name":"ruff","versionSpec":"<1,>=0.12.1","scope":"extra:cli"},{"ecosystem":"pypi","name":"sarvamai","versionSpec":"==0.1.28","scope":"extra:sarvam"},{"ecosystem":"pypi","name":"sentencex","versionSpec":"==1.0.31","scope":"runtime"},{"ecosystem":"pypi","name":"simli-ai","versionSpec":"~=2.0.1","scope":"extra:simli"},{"ecosystem":"pypi","name":"soundfile","versionSpec":"~=0.13.1","scope":"runtime"},{"ecosystem":"pypi","name":"soxr","versionSpec":"~=1.0.0","scope":"runtime"},{"ecosystem":"pypi","name":"speechmatics-agent-stt","versionSpec":"~=0.1.0","scope":"extra:speechmatics"},{"ecosystem":"pypi","name":"tenacity","versionSpec":"<10.0.0,>=8.2.3","scope":"extra:livekit"},{"ecosystem":"pypi","name":"torch","versionSpec":"<3,>=2.5.0","scope":"extra:local-smart-turn"},{"ecosystem":"pypi","name":"torchaudio","versionSpec":"<3,>=2.5.0","scope":"extra:local-smart-turn"},{"ecosystem":"pypi","name":"typer","versionSpec":"<1,>=0.20.0","scope":"extra:cli"},{"ecosystem":"pypi","name":"typing-extensions","versionSpec":">=4.9","scope":"runtime"},{"ecosystem":"pypi","name":"uvicorn","versionSpec":"<1.0.0,>=0.32.0","scope":"extra:runner"},{"ecosystem":"pypi","name":"vonage-video-connector","versionSpec":"~=1.0.2","scope":"extra:vonage-video-connector"},{"ecosystem":"pypi","name":"wait-for2","versionSpec":"<1,>=0.4.1","scope":"runtime"},{"ecosystem":"pypi","name":"websockets","versionSpec":">=13.1","scope":"runtime"}],"advisories":[{"id":"37f3e7aa-b0cb-4868-8035-71e6ebe59abb","url":"https://aisecwatch.com/issues/37f3e7aa-b0cb-4868-8035-71e6ebe59abb","cveId":"CVE-2026-54695","title":"GHSA-j8cv-x86q-rj85: Pipecat: Telephony WebSocket `/ws` Unauthenticated Call-Control Abuse via Attacker-Supplied Call SID","headline":null,"severity":"high","publishedAt":"2026-06-18T15:05:17.000Z","affected":["pipecat-ai@>= 0.0.77, < 1.4.0 (fixed: 1.4.0)"],"epssScore":0.00564,"matchedBy":"ecosystem"},{"id":"03cb8eb7-3fb5-44e7-afdf-55b61b1106ab","url":"https://aisecwatch.com/issues/03cb8eb7-3fb5-44e7-afdf-55b61b1106ab","cveId":"CVE-2026-44716","title":"GHSA-3363-2ph6-35wh: Pipecat: Path Traversal in Pipecat Runner `/files` Endpoint — Arbitrary File Read via `%2F`-Encoded Separator","headline":null,"severity":"high","publishedAt":"2026-05-15T16:55:04.000Z","affected":["pipecat-ai@>= 0.0.90, < 1.2.0 (fixed: 1.2.0)"],"epssScore":0.00555,"matchedBy":"ecosystem"},{"id":"8214eaa5-3c8d-4a15-bbb7-2614a5e75f3d","url":"https://aisecwatch.com/issues/8214eaa5-3c8d-4a15-bbb7-2614a5e75f3d","cveId":"CVE-2025-62373","title":"GHSA-c2jg-5cp7-6wc7: Pipecat: Remote Code Execution by Pickle Deserialization Through LivekitFrameSerializer","headline":null,"severity":"critical","publishedAt":"2026-04-23T21:15:42.000Z","affected":["pipecat-ai@>= 0.0.41, < 0.0.94 (fixed: 0.0.94)"],"epssScore":0.00701,"matchedBy":"ecosystem"}],"checkedAt":"2026-10-10T00:05:28.406Z"},"meta":{"advisoryMatching":"by package name and ecosystem; an advisory with no ecosystem recorded for the package is matched by name alone"}}