11733 matches found
genai-4-dps-helper (0.2.31), news-scraper-pdf (1.1.6) +6 more potentially affected by CVE-2026-71870 via pypdf (5.3.0)
pypdf PYPI version 5.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - genai-4-dps-helper 0.2.31 - news-scraper-pdf 1.1.6 - polytext =0.1.0, =0.1.0, =0.1.10 - python-pdf-toolkit 0.1.1 - synforge 0.1.0 - ta-using-llms 0.0....
CVE-2026-71851 crypto-js: Insufficient Entropy in Cryptographic Secret Generation via Vulnerable CryptoJS Dependency Chain
crypto-js is a JavaScript library of crypto standards. Versions of crypto-js prior to 4.0.0 generate randomness in CryptoJS.lib.WordArray.random using a custom variation of the Multiply-With-Carry pseudorandom number generator, seeded from Math.random, instead of a cryptographically secure source...
PT-2026-69037
Name of the Vulnerable Software and Affected Versions postgrex versions 0.19.3 through 0.22.3 Description An SQL Injection issue exists in the postgrex library used by elixir-ecto. The flaw occurs when the :comment option is used within the Postgrex.stream/4 function or the Ecto.Repo.stream/2...
CVE-2026-66838: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in elixir-ecto postgrex allows SQL Injection via the :comment option of Postgrex.stream/4. An attacker who can influence that value can close the comment delimiter with / and extend the streamed...
TencentOS Server 4: pytest (TSSA-2026:0783)
The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0783 advisory. Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:...
CVE-2026-66885: Cross-Site Request Forgery (CSRF)
Cross-Site Request Forgery CSRF vulnerability in livebook-dev livebook allows an attacker to authenticate a victim's browser session under the attacker's own Livebook Teams identity. When Livebook is configured to use Livebook Teams for identity, Livebook.ZTA.LivebookTeams.handlerequest/4 in...
PT-2026-68319
Name of the Vulnerable Software and Affected Versions livebook versions 0.15.0 through 0.18.6 livebook versions 0.19.0 through 0.19.8 Description A Cross-Site Request Forgery CSRF issue exists when Livebook is configured to use Livebook Teams for identity. The handle request/4 function in...
CLSA-2026-1785380888 TuxCare security update for axios (1 CVE)
TuxCare rebuilt axios to address 1 CVE. Fixed in 0.18.1-tuxcare.4...
CLSA-2026-1785380880 TuxCare security update for axios (1 CVE)
TuxCare rebuilt axios to address 1 CVE. Fixed in 0.19.2-tuxcare.4...
CLSA-2026-1785291686 TuxCare security update for axios (1 CVE)
TuxCare rebuilt axios to address 1 CVE. Fixed in 0.27.2-tuxcare.4...
CLSA-2026-1785291685 TuxCare security update for axios (1 CVE)
TuxCare rebuilt axios to address 1 CVE. Fixed in 0.26.1-tuxcare.4...
CLSA-2026-1784943142 TuxCare security update for 5 packages (1 CVE)
TuxCare rebuilt 5 packages to address 1 CVE. Fixed in 1.9.2-tuxcare.4...
CLSA-2026-1784943304 TuxCare security update for dompurify (1 CVE)
TuxCare rebuilt dompurify to address 1 CVE. Fixed in 2.4.0-tuxcare.4...
CLSA-2026-1784943302 TuxCare security update for axios (1 CVE)
TuxCare rebuilt axios to address 1 CVE. Fixed in 1.7.5-tuxcare.4...
CLSA-2026-1785204341 TuxCare security update for tmp (1 CVE)
TuxCare rebuilt tmp to address 1 CVE. Fixed in 0.2.1-tuxcare.4...
CLSA-2026-1784769607 TuxCare security update for dompurify (1 CVE)
TuxCare rebuilt dompurify to address 1 CVE. Fixed in 3.0.3-tuxcare.4...
CLSA-2026-1784683088 TuxCare security update for 105 packages (1 CVE)
TuxCare rebuilt 105 packages to address 1 CVE. Fixed in 7.21.0-tuxcare.4...
CLSA-2026-1784769536 TuxCare security update for 2 packages (2 CVEs)
TuxCare rebuilt 2 packages to address 2 CVEs. Fixed in 3.2.0-tuxcare.4...