CVE-2026-54277 vulnerabilities

Vulnerabilities for packages: text-generation-inference, airflow-core, apache-beam-python-3.11-sdk, airflow, awx, tritonserver-backend-vllm-cuda-12.9, open-webui, metaflow-service-fips, request-1276, apache-beam-python-3.13-sdk, py3-vllm-cuda-13.0, py3.13-scanner-test-libraries-aiohttp,...

CVE-2026-54279 vulnerabilities

Vulnerabilities for packages: text-generation-inference, airflow-core, apache-beam-python-3.11-sdk, airflow, awx, tritonserver-backend-vllm-cuda-12.9, open-webui, metaflow-service-fips, request-1276, apache-beam-python-3.13-sdk, py3-vllm-cuda-13.0, py3.13-scanner-test-libraries-aiohttp,...

CVE-2026-54280 vulnerabilities

Vulnerabilities for packages: text-generation-inference, airflow-core, apache-beam-python-3.11-sdk, airflow, awx, tritonserver-backend-vllm-cuda-12.9, open-webui, metaflow-service-fips, request-1276, apache-beam-python-3.13-sdk, py3-vllm-cuda-13.0, py3.13-scanner-test-libraries-aiohttp,...

GHSA-63HW-FMQ6-XXG2 vulnerabilities

Vulnerabilities for packages: text-generation-inference, airflow-core, apache-beam-python-3.11-sdk, airflow, awx, tritonserver-backend-vllm-cuda-12.9, open-webui, metaflow-service-fips, request-1276, apache-beam-python-3.13-sdk, py3-vllm-cuda-13.0, py3.13-scanner-test-libraries-aiohttp,...

GHSA-G3CQ-J2XW-WF74 vulnerabilities

Vulnerabilities for packages: text-generation-inference, airflow-core, apache-beam-python-3.11-sdk, airflow, awx, tritonserver-backend-vllm-cuda-12.9, open-webui, metaflow-service-fips, request-1276, apache-beam-python-3.13-sdk, py3-vllm-cuda-13.0, py3.13-scanner-test-libraries-aiohttp,...

GHSA-HPJ7-WQ8M-9HGP vulnerabilities

Vulnerabilities for packages: text-generation-inference, airflow-core, apache-beam-python-3.11-sdk, airflow, awx, tritonserver-backend-vllm-cuda-12.9, open-webui, metaflow-service-fips, request-1276, apache-beam-python-3.13-sdk, py3-vllm-cuda-13.0, py3.13-scanner-test-libraries-aiohttp,...

GHSA-XCGM-R5H9-7989 vulnerabilities

Vulnerabilities for packages: text-generation-inference, airflow-core, apache-beam-python-3.11-sdk, airflow, awx, tritonserver-backend-vllm-cuda-12.9, open-webui, metaflow-service-fips, request-1276, apache-beam-python-3.13-sdk, py3-vllm-cuda-13.0, py3.13-scanner-test-libraries-aiohttp,...

CVE-2026-54274 vulnerabilities

Vulnerabilities for packages: text-generation-inference, airflow-core, apache-beam-python-3.11-sdk, airflow, awx, tritonserver-backend-vllm-cuda-12.9, open-webui, metaflow-service-fips, request-1276, apache-beam-python-3.13-sdk, py3-vllm-cuda-13.0, py3.13-scanner-test-libraries-aiohttp,...

CVE-2026-54276 vulnerabilities

Vulnerabilities for packages: text-generation-inference, airflow-core, apache-beam-python-3.11-sdk, airflow, awx, tritonserver-backend-vllm-cuda-12.9, open-webui, metaflow-service-fips, request-1276, apache-beam-python-3.13-sdk, py3-vllm-cuda-13.0, py3.13-scanner-test-libraries-aiohttp,...

CVE-2026-54278 vulnerabilities

Vulnerabilities for packages: text-generation-inference, airflow-core, apache-beam-python-3.11-sdk, airflow, awx, tritonserver-backend-vllm-cuda-12.9, open-webui, metaflow-service-fips, request-1276, apache-beam-python-3.13-sdk, py3-vllm-cuda-13.0, py3.13-scanner-test-libraries-aiohttp,...

GHSA-2FQR-MR3J-6WP8 vulnerabilities

Vulnerabilities for packages: text-generation-inference, airflow-core, apache-beam-python-3.11-sdk, airflow, awx, tritonserver-backend-vllm-cuda-12.9, open-webui, metaflow-service-fips, request-1276, apache-beam-python-3.13-sdk, py3-vllm-cuda-13.0, py3.13-scanner-test-libraries-aiohttp,...

GHSA-4M7W-QMGQ-4WJ5 vulnerabilities

Vulnerabilities for packages: text-generation-inference, airflow-core, apache-beam-python-3.11-sdk, airflow, awx, tritonserver-backend-vllm-cuda-12.9, open-webui, metaflow-service-fips, request-1276, apache-beam-python-3.13-sdk, py3-vllm-cuda-13.0, py3.13-scanner-test-libraries-aiohttp,...

GHSA-9X8Q-7H8H-WCW9 vulnerabilities

Vulnerabilities for packages: text-generation-inference, airflow-core, apache-beam-python-3.11-sdk, airflow, awx, tritonserver-backend-vllm-cuda-12.9, open-webui, metaflow-service-fips, request-1276, apache-beam-python-3.13-sdk, py3-vllm-cuda-13.0, py3.13-scanner-test-libraries-aiohttp,...

GHSA-537C-GMF6-5CCF vulnerabilities

Vulnerabilities for packages: jupyter-base-notebook, mycli, openstack-horizon-2025.2, openstack-tempest-2025.1, vllm-openai-cuda-12.9, airflow-core, apache-beam-python-3.11-sdk, label-studio, airflow, py3-cassandra-medusa, vast-csi, gitlab-cng, ansible-operator-fips, openstack-kolla-toolbox-2025....

Authentication Bypass Using an Alternate Path or Channel

Overview Affected versions of this package are vulnerable to Authentication Bypass Using an Alternate Path or Channel in the SNICheck process. An attacker can gain unauthorized access to protected backends by completing a TLS handshake using a permissive SNI and then sending an HTTP Host header...

airosentris (>=0.1.8, <=0.1.31), mafiagg (1.0.4) +1 more potentially affected by CVE-2026-55443 via langchain (0.3.8)

langchain PYPI version 0.3.8 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - airosentris =0.1.8, =0.1.31 - mafiagg 1.0.4 - otto-m8-backend 0.0.3 Source cves: CVE-2026-55443 Source advisory: OSV:GHSA-GR75-JV2W-4656...

adhoc-api (>=2.1.0, <=2.6.1), archytas (>=1.3.14, <=1.4.5) +6 more potentially affected by CVE-2026-55443 via langchain-anthropic (0.3.12)

langchain-anthropic PYPI version 0.3.12 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-anthropic and may be impacted: - adhoc-api =2.1.0, =1.3.14, =1.8.0, =0.10.0, =0.4.7, =1.2.0, =1.4.10 Source cves: CVE-2026-55443 Source advisory:...

objdump-dlx-calc-poc

objdump dlx calc poc Small repro for an objdump -g crash-to...

Alibaba Cloud Linux 3 : 0159: poppler (ALINUX3-SA-2026:0159)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0159 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2026-10118: A flaw was found in Poppler's Splas...

CVE-2026-48777: Improper Limitation of a Pathname to a Restricted Directory

FileBrowser Quantum is a free, self-hosted, web-based file manager. Versions prior to 1.3.2-stable, 1.4.0-beta and 1.4.1-beta are vulnerable to Path Traversal through the publicPatchHandler in backend/http/public.go which joins user-controlled fromPath and toPath body fields with the trusted...