Vulnerabilities for pipecat-ai

First version without a known vulnerability: 0.0.9

Details

• GHSA-j8cv-x86q-rj852026-06-18

  Pipecat: Telephony WebSocket `/ws` Unauthenticated Call-Control Abuse via Attacker-Supplied Call SID

  Fixed in: 1.4.0

• GHSA-3363-2ph6-35wh2026-05-15

  Pipecat: Path Traversal in Pipecat Runner `/files` Endpoint — Arbitrary File Read via `%2F`-Encoded Separator

  Fixed in: 1.2.0

• GHSA-c2jg-5cp7-6wc72026-04-23

  Pipecat: Remote Code Execution by Pickle Deserialization Through LivekitFrameSerializer

  Fixed in: 0.0.94