notebooktoall (>=0.1.7, <=0.2.0), python-dev-tools (>=2019.2.25, <=2019.3.1) potentially affected by CVE-2026-3219 via pip (19.0.2)

pip PYPI version 19.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - notebooktoall =0.1.7, =2019.2.25, =2019.3.1 Source cves: CVE-2026-3219 Source advisory: OSV:PYSEC-2026-2875...

python-dev-tools (>=2019.4.24, <=2019.5.3) potentially affected by CVE-2026-3219 via pip (19.1.0)

pip PYPI version 19.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - python-dev-tools =2019.4.24, =2019.5.3 Source cves: CVE-2026-3219 Source advisory: OSV:PYSEC-2026-2875...

bblib (>=0.1.1, <=3.1.0), beambusters (>=1.1.0, <=3.1.0) +3 more potentially affected by CVE-2026-41140 via poetry (1.8.0)

poetry PYPI version 1.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on poetry and may be impacted: - bblib =0.1.1, =1.1.0, =0.15.0, =0.3.2, =0.3.5 - unified-config 0.1.2 Source cves: CVE-2026-41140 Source advisory: OSV:PYSEC-2026-2890...

Prototype Pollution

apidevtools json-schema-ref-parser is vulnerable to Prototype Pollution. The vulnerability is due to improper validation of property names in the Refs.set and Pointer.set functions, where attacker-controlled input can modify object prototype attributes, allowing attackers to manipulate applicatio...

CVE-2026-57815: Improper Limitation of a Pathname to a Restricted Directory

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in WPMU DEV - Your All-in-One WordPress Platform Forminator forminator allows Path Traversal.This issue affects Forminator: from n/a through = 1.55.0.2...

CVE-2026-57814: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WPMU DEV - Your All-in-One WordPress Platform Forminator forminator allows DOM-Based XSS.This issue affects Forminator: from n/a through = 1.55.0.1...

Malicious Package

Overview po-ops-local-dev is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

CVE-2026-15326

A vulnerability was identified in halo-dev halo up to 2.24.2. This affects the function ThemeUtils.unzipThemeTo of the file ThemeUtils.java of the component Theme Installation. Such manipulation of the argument metadata.name leads to path traversal. The attack may be launched remotely. The exploi...

CVE-2026-15326: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability was identified in halo-dev halo up to 2.24.2. This affects the function ThemeUtils.unzipThemeTo of the file ThemeUtils.java of the component Theme Installation. Such manipulation of the argument metadata.name leads to path traversal. The attack may be launched remotely. The exploi...

simba-uw-tf-dev (>=1.83.1, <=1.84.4) potentially affected by CVE-2019-5064 via opencv-python (3.4.16.59)

opencv-python PYPI version 3.4.16.59 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-python and may be impacted: - simba-uw-tf-dev =1.83.1, =1.84.4 Source cves: CVE-2019-5064 Source advisory: OSV:PYSEC-2026-2828...

simba-uw-tf-dev (>=1.83.1, <=1.84.4) potentially affected by CVE-2019-9423 via opencv-python (3.4.16.59)

opencv-python PYPI version 3.4.16.59 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-python and may be impacted: - simba-uw-tf-dev =1.83.1, =1.84.4 Source cves: CVE-2019-9423 Source advisory: OSV:PYSEC-2026-2811...

simba-uw-tf-dev (>=1.83.1, <=1.84.4) potentially affected by CVE-2019-5063 via opencv-python (3.4.16.59)

opencv-python PYPI version 3.4.16.59 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-python and may be impacted: - simba-uw-tf-dev =1.83.1, =1.84.4 Source cves: CVE-2019-5063 Source advisory: OSV:PYSEC-2026-2826...

simba-uw-tf-dev (>=1.83.1, <=1.84.4) potentially affected by CVE-2019-19624 via opencv-python (3.4.16.59)

opencv-python PYPI version 3.4.16.59 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-python and may be impacted: - simba-uw-tf-dev =1.83.1, =1.84.4 Source cves: CVE-2019-19624 Source advisory: OSV:PYSEC-2026-2824...

simba-uw-tf-dev (>=1.83.1, <=1.84.4) potentially affected by CVE-2019-16249 via opencv-python (3.4.16.59)

opencv-python PYPI version 3.4.16.59 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-python and may be impacted: - simba-uw-tf-dev =1.83.1, =1.84.4 Source cves: CVE-2019-16249 Source advisory: OSV:PYSEC-2026-2833...

simba-uw-tf-dev (>=1.83.1, <=1.84.4) potentially affected by CVE-2019-14493 via opencv-python (3.4.16.59)

opencv-python PYPI version 3.4.16.59 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-python and may be impacted: - simba-uw-tf-dev =1.83.1, =1.84.4 Source cves: CVE-2019-14493 Source advisory: OSV:PYSEC-2026-2806...

simba-uw-tf-dev (>=1.83.1, <=1.84.4) potentially affected by CVE-2019-15939 via opencv-python (3.4.16.59)

opencv-python PYPI version 3.4.16.59 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-python and may be impacted: - simba-uw-tf-dev =1.83.1, =1.84.4 Source cves: CVE-2019-15939 Source advisory: OSV:PYSEC-2026-2822...

CVE-2026-15185

Removed by vendor...

nxviz (>=0.2.0, <=0.2.7), reahl-component (>=4.0.0, <=4.0.1) +6 more potentially affected by CVE-2026-59890 via setuptools (32.3.1)

setuptools PYPI version 32.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - nxviz =0.2.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.1 Source cves: CVE-2026-59890 Source advisory: OSV:PYSEC-2026-34...

Important: Red Hat Security Advisory: Red Hat OpenShift Dev Spaces 3.29.0 Release.

Red Hat OpenShift Dev Spaces 3.29.0 has been released. Red Hat OpenShift Dev Spaces provides a cloud developer workspace server and a browser-based IDE built for teams and organizations. Dev Spaces runs in OpenShift and is well-suited for container-based development. The 3.29 release is based on...

GO-2026-5761 Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc

Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc...