Malicious code in picnic-work-app-terms-of-use-de (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in manage-subscription-app (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7317 Malicious code in manage-subscription-app (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in liportal-web-app (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7313 Malicious code in liportal-web-app (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2026-41434

A flaw was found in OP-TEE Open Portable Trusted Execution Environment, a secure environment for Arm Cortex-A cores. This vulnerability allows a local attacker with low privileges to trigger an unbounded recursion within the PKCS11 Trusted Application TA. Successful exploitation could lead to a...

MAL-2026-7219 Malicious code in bitu-app (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in bitu-app (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @jesusvizcaino2021/app-push-base (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7078 Malicious code in @jesusvizcaino2021/app-push-base (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @app-tray-ui/stencil-component (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7036 Malicious code in @app-tray-ui/stencil-component (npm)

--- -= Per source details. Do not edit below this line.=-...

cradle-app (>=0.1.0, <=0.1.1) potentially affected by CVE-2024-4325 via gradio (1.7.7)

gradio PYPI version 1.7.7 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - cradle-app =0.1.0, =0.1.1 Source cves: CVE-2024-4325 Source advisory: OSV:PYSEC-2026-1413...

cradle-app (>=0.1.0, <=0.1.1) potentially affected by CVE-2024-1727 via gradio (1.7.7)

gradio PYPI version 1.7.7 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - cradle-app =0.1.0, =0.1.1 Source cves: CVE-2024-1727 Source advisory: OSV:PYSEC-2026-1409...

cradle-app (>=0.1.0, <=0.1.1) potentially affected by CVE-2024-34511 via gradio (1.7.7)

gradio PYPI version 1.7.7 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - cradle-app =0.1.0, =0.1.1 Source cves: CVE-2024-34511 Source advisory: OSV:PYSEC-2026-1407...

django-auth0-user (>=0.15.0, <=0.16.5), edx-auth-backends (>=3.0.0, <=3.0.2) +4 more potentially affected by CVE-2024-32879 via social-auth-app-django (3.4.0)

social-auth-app-django PYPI version 3.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-app-django and may be impacted: - django-auth0-user =0.15.0, =3.0.0, =0.1.0, =4.4.0a1, =0.2.0, =2.0.0, =5.0.1 Source cves: CVE-2024-32879 Source...

rest-social-auth (>=1.3.0, <=1.4.0), saltdash (>=0.9.1, <=0.9.5) +1 more potentially affected by CVE-2024-32879 via social-auth-app-django (2.1.0)

social-auth-app-django PYPI version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-app-django and may be impacted: - rest-social-auth =1.3.0, =0.9.1, =1.0.0rc1, =1.0.0rc8 Source cves: CVE-2024-32879 Source advisory: OSV:PYSEC-2026-19...

umap-project (0.8.3) potentially affected by CVE-2024-32879 via social-auth-app-django (1.1.0)

social-auth-app-django PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-app-django and may be impacted: - umap-project 0.8.3 Source cves: CVE-2024-32879 Source advisory: OSV:PYSEC-2026-1931...

umap-project (>=0.8.0, <=0.8.2) potentially affected by CVE-2024-32879 via social-auth-app-django (1.0.1)

social-auth-app-django PYPI version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-app-django and may be impacted: - umap-project =0.8.0, =0.8.2 Source cves: CVE-2024-32879 Source advisory: OSV:PYSEC-2026-1931...

django-globus-portal-framework (>=0.3.23, <=0.4.2), django-user-app (0.0.6) +14 more potentially affected by CVE-2024-32879 via social-auth-app-django (4.0.0)

social-auth-app-django PYPI version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on social-auth-app-django and may be impacted: - django-globus-portal-framework =0.3.23, =2.28.1, =1.3.0, =1.0.0b3, =1.6.0, =0.9.2.dev0, =0.9.0, =0.1.0, =6.0.0,...