123174 matches found
agave (>=0.0.1.dev0, <=0.0.2.dev0), mexcalli (>=0.0.0.1.dev0, <=0.0.0.2.dev0) +5 more potentially affected by CVE-2023-28117 via sentry-sdk (0.16.5)
sentry-sdk PYPI version 0.16.5 is affected by a known vulnerability. The following packages have a transitive dependency on sentry-sdk and may be impacted: - agave =0.0.1.dev0, =0.0.0.1.dev0, =0.5.0a6, =0.1.1, =1.2.0, =1.4.0 - tg-odesli-bot 0.2.8 Source cves: CVE-2023-28117 Source advisory:...
c8-source-c8collection (>=0.0.2, <=0.0.10), macrometa-source-collection (>=0.0.11, <=1.0.6a2) potentially affected by CVE-2022-33684 via pulsar-client (2.10.1)
pulsar-client PYPI version 2.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on pulsar-client and may be impacted: - c8-source-c8collection =0.0.2, =0.0.11, =1.0.6a2 Source cves: CVE-2022-33684 Source advisory: OSV:PYSEC-2026-901...
PYSEC-2026-2083
Before apache-airflow 3.3.0, a user authorized to read one Dag could disclose the source of other Dags co-located in the same source file. GET /api/v2/dagSources/dagid — and the equivalent Dag-source view in the UI — returned the entire source file without redacting Dags the caller was not...
PYSEC-0000-CVE-2026-49296
Before apache-airflow 3.3.0, a user authorized to read one Dag could disclose the source of other Dags co-located in the same source file. GET /api/v2/dagSources/dagid — and the equivalent Dag-source view in the UI — returned the entire source file without redacting Dags the caller was not...
CVE-2025-68064
creationtimestamp| type| source ---|---|--- 2026-07-07 10:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mq2eqxrjpq2h...
CVE-2021-20159
creationtimestamp| type| source ---|---|--- 2026-07-07 09:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mq2cl6uq6a2b...
CVE-2026-49296 Apache Airflow: Per-DAG read bypass discloses co-located DAGs' source via GET /api/v2/dagSources/{dag_id}
Before apache-airflow 3.3.0, a user authorized to read one Dag could disclose the source of other Dags co-located in the same source file. GET /api/v2/dagSources/dagid — and the equivalent Dag-source view in the UI — returned the entire source file without redacting Dags the caller was not...
CVE-2025-68075
creationtimestamp| type| source ---|---|--- 2026-07-07 09:16:07+00:00| seen| https://bsky.app/profile/atomicedge.bsky.social/post/3mq2bfo4jtg2n...
CVE-2026-57868
creationtimestamp| type| source ---|---|--- 2026-07-07 08:39:01+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq27ddn7ny2u...
CVE-2026-57869
creationtimestamp| type| source ---|---|--- 2026-07-07 08:34:02+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq272f5jnd2y...
CVE-2026-8309
creationtimestamp| type| source ---|---|--- 2026-07-07 08:24:00+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq26ii7rnj2b...
CVE-2026-7380
creationtimestamp| type| source ---|---|--- 2026-07-07 08:09:42+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq25ovshbb23...
CVE-2026-57870
creationtimestamp| type| source ---|---|--- 2026-07-07 08:05:57+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq25i6svjz2b...
CVE-2026-57871
creationtimestamp| type| source ---|---|--- 2026-07-07 08:02:38+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq25c7qnkf2a...
CVE-2026-5730
creationtimestamp| type| source ---|---|--- 2026-07-07 07:59:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq254tqfsn2a...
CVE-2026-5799
creationtimestamp| type| source ---|---|--- 2026-07-07 07:56:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq24xxd3v22a...
CVE-2026-57867
creationtimestamp| type| source ---|---|--- 2026-07-07 07:26:52+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mq23cby4z22b...
MAL-2026-6910 Malicious code in zluri-ad-connector (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b7a807f066f0255f7480ebd7d445043282260b464b0ef54a32a2d022c93bbf7 The package declares a preinstall hook node index.js that runs automatically on npm install. index.js requires os, dns, https, querystring, and the...