CVE-2026-39821 affecting package kube-vip-cloud-provider for versions less than 0.0.10-6

CVE-2026-39821 affecting package kube-vip-cloud-provider for versions less than 0.0.10-6. A patched version of the package is available...

CVE-2026-25680 affecting package kube-vip-cloud-provider for versions less than 0.0.10-6

CVE-2026-25680 affecting package kube-vip-cloud-provider for versions less than 0.0.10-6. A patched version of the package is available...

CVE-2026-25681 affecting package kube-vip-cloud-provider for versions less than 0.0.10-6

CVE-2026-25681 affecting package kube-vip-cloud-provider for versions less than 0.0.10-6. A patched version of the package is available...

CVE-2026-42506 affecting package kube-vip-cloud-provider for versions less than 0.0.10-6

CVE-2026-42506 affecting package kube-vip-cloud-provider for versions less than 0.0.10-6. A patched version of the package is available...

a-data-processing (=0.0.1), a-mailx (=0.1.0) +1492 more potentially affected by CVE-2026-45134 via langsmith (>=0.0.10 <=0.7.38)

langsmith PYPI version =0.0.10, =0.1.0, =0.1.3, =0.1.0b0, =4.8.2, =0.1.3, =0.1.0, =0.1.0, =0.1.1, =2.1.7, =2.1.8 - agent-builder =0.0.1 and more Source cves: CVE-2026-45134 Source advisory: OSV:GHSA-3644-Q5CJ-C5C7...

10xscale-agentflow-cli (=0.1.5), admin-api-lib (>=3.2.0 <=4.2.0) +477 more potentially affected by CVE-2026-42561 via python-multipart (>=0.0.10 <=0.0.26)

python-multipart PYPI version =0.0.10, =3.2.0, =0.8.2.4, =0.1.0, =1.0.202504142220, =0.1.0, =0.4.0, =0.1.0, =0.4.0, =0.1.0, =0.4.0, =1.6.21, =0.1.1, =0.1.5 and more Source cves: CVE-2026-42561 Source advisory: SNYK:PYTHON-PYTHONMULTIPART-16438952...

CVE-2025-58190 affecting package kube-vip-cloud-provider for versions less than 0.0.10-5

CVE-2025-58190 affecting package kube-vip-cloud-provider for versions less than 0.0.10-5. A patched version of the package is available...

CVE-2025-47911 affecting package kube-vip-cloud-provider for versions less than 0.0.10-5

CVE-2025-47911 affecting package kube-vip-cloud-provider for versions less than 0.0.10-5. A patched version of the package is available...

EUVD-2025-2810

Malicious code in bioql PyPI...

@orca-fe/datav-cli (>=2.8.3 <=2.9.4), @shuji-components/sjv-cli (=0.0.3) +4 more potentially affected by CVE-2025-57348 via node-cube (>=0.0.10 <=5.0.0-beta.28)

node-cube NPM version =0.0.10, =2.8.3, =0.0.1, =1.0.2, =1.0.0, =0.0.1, =1.0.9 Source cves: CVE-2025-57348 Source advisory: SNYK:JS-NODECUBE-13109830...

better-config-loader (>=0.1.4 <=0.2.4), brainwires-skills (>=0.2.0 <=0.6.0) +62 more potentially affected by unknown CVE via serde_yml (>=0.0.10 <=0.0.12)

serdeyml CARGO version =0.0.10, =0.1.4, =0.2.0, =0.33.0, =0.3.0, =0.1.5, =0.9.0, =0.3.0, =0.10.0, =0.3.2, =0.1.0, =1.2.0, =1.2.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-HHW4-XG65-FP2X...

Brains (>=0.1.0 <=0.2.0), Route16 (=0.0.1) +970 more potentially affected by CVE-2025-53605 via protobuf (>=0.0.10 <=3.7.1)

protobuf CARGO version =0.0.10, =0.1.0, =0.4.0, =0.1.0, =0.1.0, =0.13.0, =0.11.0, =0.11.0, =1.1.0, =0.4.3, =0.1.0, =0.1.0, =0.1.0, =0.17.0 and more Source cves: CVE-2025-53605 Source advisory: OSV:GHSA-2GH3-RMM4-6RQ5...

WordPress Caching Compatible Cookie Opt-In plugin <= 0.0.10 - Stored Cross Site Scripting (XSS) vulnerability

Stored Cross Site Scripting XSS vulnerability discovered by SOPROBRO in WordPress Plugin Caching Compatible Cookie Opt-In and JavaScript versions = 0.0.10...

Brains (>=0.1.0 <=0.2.0), Route16 (=0.0.1) +970 more potentially affected by CVE-2025-53605 via protobuf (>=0.0.10 <=3.7.1)

protobuf CARGO version =0.0.10, =0.1.0, =0.4.0, =0.1.0, =0.1.0, =0.13.0, =0.11.0, =0.11.0, =1.1.0, =0.4.3, =0.1.0, =0.1.0, =0.1.0, =0.17.0 and more Source cves: CVE-2025-53605 Source advisory: OSV:RUSTSEC-2024-0437...

bunkoer (=0.0.3), chatmysql (=0.1.14) +13 more potentially affected by CVE-2024-27444 via langchain-experimental (>=0.0.10 <=0.0.50)

langchain-experimental PYPI version =0.0.10, =0.1.0, =0.1.4, =0.1.21, =0.3.0, =0.0.14, =2.0.160, =0.0.3, =1.3.2, =0.2.3, =0.3.1 Source cves: CVE-2024-27444 Source advisory: OSV:GHSA-V8VJ-CV27-HJV8...

AZL-34892 CVE-2023-39325 affecting package kube-vip-cloud-provider for versions less than 0.0.10-1

A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a ne...

[SECURITY] Fedora 38 Update: rust-ybaas-0.0.10-7.fc38

Don't you love when you accidentally tap your Yubikey when you have your IRC client in focus and you send 987947 into Libera? Want to be able to have that experience without having to reach all the way over to your laptop's USB port? Don't want the complexity of installing and using the yubibomb...

@bifot/adapter-knex (=12.0.2), @blitzjs/cli (>=0.25.0 <=0.45.2-danger.c8bb361b5.1) +85 more potentially affected by CVE-2021-21414 via @prisma/sdk (>=0.0.10 <=2.19.0)

@prisma/sdk NPM version =0.0.10, =0.25.0, =0.35.0, =0.0.1, =0.0.1, =0.0.4, =0.0.6, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.1 - @keystonejs-contrib/fields-editorjs =0.1.1 and more Source cves: CVE-2021-21414 Source advisory: OSV:GHSA-PXCC-HJ8W-FMM7...

@any4/model (>=0.0.1 <=1.2.4), @boundstate/hapi-typeorm (=0.0.1) +33 more potentially affected by unknown CVE via typeorm (>=0.0.10 <=0.1.14)

typeorm NPM version =0.0.10, =0.0.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =0.6.2, =0.1.2, =0.1.19, =0.1.0, =0.1.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-W7Q7-VJP8-7JV4...

Miniwebsvr 0.0.10 Directory Traversal

miniwebsvr v0.0.10 Directory Traversal/Listing Exploits Found By: DrIDE Date: May 12, 2010 Download: http://sourceforge.net/projects/miniwebsvr/ Tested on: Windows 7 - Description - miniwebsvr v0.0.10 is a Windows based HTTP server. This is the latest version of the application available...