Loading
Build UIs in Python
Does not declare an LLM SDK itself, but depends on a package that does, 3 steps away.
Advisories that name mesop as affected. Advisory records do not state an ecosystem, so packages with the same name in other ecosystems also match. For a version-exact check of your own dependencies, use Stack Check.
| Advisory | Severity | Affected | Fixed in | Published |
|---|---|---|---|---|
| CVE-2026-34824GHSA-3jr7-6hqp-x679: Mesop: Unbounded Thread Creation in WebSocket Handler Leads to Denial of Service | High | >= 1.2.3, < 1.2.5 | 1.2.5 | 2026-04-03 |
| CVE-2026-33057GHSA-gjgx-rvqr-6w6v: Mesop Affected by Unauthenticated Remote Code Execution via Test Suite Route /exec-py | Critical | <= 1.2.2 | 1.2.3 | 2026-03-18 |
| CVE-2026-33054GHSA-8qvf-mr4w-9x2c: Mesop has a Path Traversal utilizing `FileStateSessionBackend` leads to Application Denial of Service and File Write/Deletion | Critical | <= 1.2.2 | 1.2.3 | 2026-03-18 |
Shortest path through the runtime dependencies of each latest release.
As declared in PyPI metadata for version 1.3.7. Optional extras are listed with their extra name.