91 matches found
amplify-quantum (>=1.1.1, <=1.3.1), aqmlator (>=0.1.1, <=0.1.2) +106 more potentially affected by CVE-2026-19795 via qiskit (>=2.1.0, <=2.5.0)
qiskit PYPI version =2.1.0, =1.1.1, =0.1.1, =0.3.3, =3.2.0, =0.4.2, =0.1.1, =1.0.5, =26.1.2, =2.59.0, =0.2.0, =0.3.0 and more Source cves: CVE-2026-19795 Source advisory: MEND:CVE-2026-19795...
argus-server (>=1.0.0, <=1.1.1), ariadne-extended (>=0.1.0, <=0.1.12) +117 more potentially affected by CVE-2026-15830 via django (3.0.14)
django PYPI version 3.0.14 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - argus-server =1.0.0, =0.1.0, =0.18.0, =2.8.0, =0.4.0, =3.0.1, =0.7.1, =0.2.0, =2.0.3, =3.0.1 and more Source cves: CVE-2026-15830 Source advisory:...
Graphql Ariadne Detect
Detects Graphql Ariadne Detect. !/usr/bin/env python3 -- coding: utf-8 -- """Detects Graphql Ariadne Detect.""" from kittysploit import from lib.protocols.http.httpclient import Httpclient class ModuleScanner, Httpclient: info = 'name': 'Graphql Ariadne Detect', 'description': 'Detects Graphql...
Malicious code in ariadne-federation (PyPI)
Source: kam193 3eb5492b220fedd5fedb29045328e749d659aea6e38ed743f7aace2d623d07d2 During import, package decrypts and runs a malicious executable. The executable is hidden in an encoded and xored form in the JSON resource file. This is a follow up of the campaign 2026-03-fastapi-middleware-cors ---...
ariadne-sensemaking (>=0.1.0, <=0.1.2), atlan-mcp-server (0.3.1) +5 more potentially affected by CVE-2025-64340 via fastmcp (2.13.2)
fastmcp PYPI version 2.13.2 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - ariadne-sensemaking =0.1.0, =1.0.35, =0.5.33, =0.5.34 Source cves: CVE-2025-64340 Source advisory: OSV:PYSEC-2026-2475...
ariadne-ai (>=0.1.8, <=0.1.12), athina (0.1.0) +4 more potentially affected by CVE-2026-55443 via langchain (0.0.309)
langchain PYPI version 0.0.309 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - ariadne-ai =0.1.8, =0.0.1, =0.0.1, =1.0.34a0, =0.1.0, =0.1.2 Source cves: CVE-2026-55443 Source advisory: OSV:PYSEC-2026-2192...
ariadne (>=0.15.0.dev4, <=0.15.0.dev5), ariadne-graphql-modules (>=0.2.0.dev1, <=0.2.0.dev2) +8 more potentially affected by CVE-2026-54282 via starlette (0.18.0)
starlette PYPI version 0.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on starlette and may be impacted: - ariadne =0.15.0.dev4, =0.2.0.dev1, =0.1.1, =1.0.0rc4, =1.4.1, =1.4.2 Source cves: CVE-2026-54282 Source advisory: OSV:PYSEC-2026-248...
ariadne-ai (>=0.1.8, <=0.1.12), athina (0.1.0) +4 more potentially affected by CVE-2026-55443 via langchain (0.0.309)
langchain PYPI version 0.0.309 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - ariadne-ai =0.1.8, =0.0.1, =0.0.1, =1.0.34a0, =0.1.0, =0.1.2 Source cves: CVE-2026-55443 Source advisory: OSV:GHSA-GR75-JV2W-4656...
360solutions-bc-mcp (>=0.5.3, <=0.5.6), agent-pbx (>=2.1.0, <=2.2.0) +68 more potentially affected by CVE-2026-54282 via starlette (>=1.0.0rc1, <=1.2.1)
starlette PYPI version =1.0.0rc1, =0.5.3, =2.1.0, =1.1.0, =1.3.3, =0.17.0b2, =0.1.0, =7.2.0, =0.21.0, =1.1.0, =1.5.0, =1.9.13, =0.1.3a0, =1.0.0, =1.0.1 - eopf 2.8.1 and more Source cves: CVE-2026-54282 Source advisory: OSV:GHSA-JP82-JPQV-5VV3...
ariadne-sensemaking (>=0.1.0, <=0.1.2), atlan-mcp-server (0.3.1) +5 more potentially affected by CVE-2026-32871 via fastmcp (2.13.2)
fastmcp PYPI version 2.13.2 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - ariadne-sensemaking =0.1.0, =1.0.35, =0.5.33, =0.5.34 Source cves: CVE-2026-32871 Source advisory: OSV:GHSA-VV7Q-7JX5-F767...
ariadne-sensemaking (>=0.1.0, <=0.1.2), atlan-mcp-server (0.3.1) +5 more potentially affected by CVE-2025-64340 via fastmcp (2.13.2)
fastmcp PYPI version 2.13.2 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - ariadne-sensemaking =0.1.0, =1.0.35, =0.5.33, =0.5.34 Source cves: CVE-2025-64340 Source advisory: OSV:GHSA-M8X7-R2RG-VH5G...
MAL-2026-1482 Malicious code in chacha-lite-encrypt (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 705b86da323a21b157504bf4833b60c8aa90a57d6db5111716afe31c114b6c1d During import, package decrypts and runs a malicious executable. The executable is hidden in an encoded and xored form in the JSON resource file. This is a...
Malicious code in kvstore-pb2-grpc (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 7208dedf651be9d1e330692ef042b89e5bcae7e8aeee7f2ab400d49e7a574de8 During import, package decrypts and runs a malicious executable. The executable is hidden in an encoded and xored form in the JSON resource file. This is a...
MAL-2026-1432 Malicious code in dgl-cu117 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 4f9fcfe9f469df3c132eca5b08bac4a30c146c7b1305f506fd900b1e78581b0d During import, package decrypts and runs a malicious executable. The executable is hidden in an encoded and xored form in the JSON resource file. This is a...
Malicious code in dgl-cu117 (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 4f9fcfe9f469df3c132eca5b08bac4a30c146c7b1305f506fd900b1e78581b0d During import, package decrypts and runs a malicious executable. The executable is hidden in an encoded and xored form in the JSON resource file. This is a...
MAL-2026-1435 Malicious code in python-anchor (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 914b16cbc506c57a77eeed5ae14955bcf3b58fa49da92c2686b56a1d531c5268 During import, package decrypts and runs a malicious executable. The executable is hidden in an encoded and xored form in the JSON resource file. This is a...
Malicious code in python-anchor (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 914b16cbc506c57a77eeed5ae14955bcf3b58fa49da92c2686b56a1d531c5268 During import, package decrypts and runs a malicious executable. The executable is hidden in an encoded and xored form in the JSON resource file. This is a...
MAL-2026-1431 Malicious code in ariadne-federation (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 3eb5492b220fedd5fedb29045328e749d659aea6e38ed743f7aace2d623d07d2 During import, package decrypts and runs a malicious executable. The executable is hidden in an encoded and xored form in the JSON resource file. This is a...
Malicious code in ariadne-federation (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 3eb5492b220fedd5fedb29045328e749d659aea6e38ed743f7aace2d623d07d2 During import, package decrypts and runs a malicious executable. The executable is hidden in an encoded and xored form in the JSON resource file. This is a...
