Is agentos-taskweaver affected by GHSA-gpx9-96j6-pp87?

PyPI agentos-taskweaver is affected in <=0.1.0.

Is GHSA-gpx9-96j6-pp87 being exploited?

Not on the CISA KEV list. EPSS exploit probability is not available.

medium

GHSA-gpx9-96j6-pp87

Q: Is GHSA-gpx9-96j6-pp87 being exploited?

Not on the CISA KEV list. EPSS exploit probability is not available.

PyPI · agentos-taskweaver

Summary

TaskWeaver has Protection Mechanism Failure and Server-Side Request Forgery (SSRF)

Severity: medium
Published: 2026-01-28

References

https://github.com/microsoft/TaskWeaver/security/advisories/GHSA-gpx9-96j6-pp87
https://github.com/microsoft/TaskWeaver/commit/d635599f03488c857e1919fcc8303cc5a09e9a0a
https://github.com/microsoft/TaskWeaver

Is your project exposed to this? Stateward checks every dependency on every pull request and flags it only if your code actually reaches it.

Check my repo

Summarize with AI

ChatGPT Claude Perplexity

Sources: CISA KEV (public domain), OSV.dev & GitHub Advisory Database (CC-BY-4.0), FIRST EPSS, NVD/CWE (public domain). Served live from the Stateward advisory database.