bandersnatch (>=3.0.0, <=3.0.1) potentially affected by CVE-2026-112909 via filelock (3.0.9)

filelock PYPI version 3.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on filelock and may be impacted: - bandersnatch =3.0.0, =3.0.1 Source cves: CVE-2026-112909 Source advisory: OSV:GHSA-69HJ-F68J-2879...

bandersnatch (>=3.0.0, <=3.0.1), bert-multitask-client (>=0.1.0, <=0.1.1) +1 more potentially affected by CVE-2026-59890 via setuptools (40.5.0)

setuptools PYPI version 40.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - bandersnatch =3.0.0, =0.1.0, =0.1.1 - pygrest 1.0.1 Source cves: CVE-2026-59890 Source advisory: OSV:GHSA-H35F-9H28-MQ5C...

bandersnatch (>=3.0.0, <=3.0.1), bert-multitask-client (>=0.1.0, <=0.1.1) +1 more potentially affected by CVE-2026-59890 via setuptools (40.5.0)

setuptools PYPI version 40.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - bandersnatch =3.0.0, =0.1.0, =0.1.1 - pygrest 1.0.1 Source cves: CVE-2026-59890 Source advisory: OSV:PYSEC-2026-3447...

arkindex-client (>=0.1.0, <=0.1.1), arlo (>=1.2.49, <=1.2.64) +18 more potentially affected by CVE-2025-50181 via urllib3 (1.24.0)

urllib3 PYPI version 1.24.0 is affected by a known vulnerability. The following packages have a transitive dependency on urllib3 and may be impacted: - arkindex-client =0.1.0, =1.2.49, =3.0.0, =0.6.2, =1.0.3, =0.1.2.15, =3.1.3, =0.3.9, =1.5.6, =0.10.0, =1.2.0, =1.2.4 and more Source cves:...

bandersnatch (>=3.0.0, <=3.0.1), bert-multitask-client (>=0.1.0, <=0.1.1) +1 more potentially affected by CVE-2024-6345 via setuptools (40.5.0)

setuptools PYPI version 40.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - bandersnatch =3.0.0, =0.1.0, =0.1.1 - pygrest 1.0.1 Source cves: CVE-2024-6345 Source advisory: OSV:PYSEC-2026-1918...

EUVD-2007-5971

Malware in sbrugna...

EUVD-2007-3894

Malware in sbrugna...

EUVD-2007-3893

Malware in sbrugna...

bandersnatch (>=3.0.0, <=3.0.1) potentially affected by CVE-2025-48945 via pycares (2.3.0)

pycares PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pycares and may be impacted: - bandersnatch =3.0.0, =3.0.1 Source cves: CVE-2025-48945 Source advisory: OSV:GHSA-5QPG-RH4J-QP35...

bandersnatch (>=3.0.0, <=3.0.1), bert-multitask-client (>=0.1.0, <=0.1.1) +1 more potentially affected by CVE-2025-47273 via setuptools (40.5.0)

setuptools PYPI version 40.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - bandersnatch =3.0.0, =0.1.0, =0.1.1 - pygrest 1.0.1 Source cves: CVE-2025-47273 Source advisory: OSV:GHSA-5RJG-FVGR-3XXF...

bandersnatch (>=3.0.0, <=3.0.1), bert-multitask-client (>=0.1.0, <=0.1.1) +1 more potentially affected by CVE-2025-47273 via setuptools (40.5.0)

setuptools PYPI version 40.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - bandersnatch =3.0.0, =0.1.0, =0.1.1 - pygrest 1.0.1 Source cves: CVE-2025-47273 Source advisory: OSV:PYSEC-2025-49...

bandersnatch (>=3.0.0, <=3.0.1), bert-multitask-client (>=0.1.0, <=0.1.1) +1 more potentially affected by CVE-2024-6345 via setuptools (40.5.0)

setuptools PYPI version 40.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - bandersnatch =3.0.0, =0.1.0, =0.1.1 - pygrest 1.0.1 Source cves: CVE-2024-6345 Source advisory: OSV:GHSA-CX63-2MW6-8HW5...

bandersnatch (>=3.0.0, <=3.0.1), bert-multitask-client (>=0.1.0, <=0.1.1) +1 more potentially affected by CVE-2022-40897 via setuptools (40.5.0)

setuptools PYPI version 40.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - bandersnatch =3.0.0, =0.1.0, =0.1.1 - pygrest 1.0.1 Source cves: CVE-2022-40897 Source advisory: OSV:PYSEC-2022-43012...

bandersnatch (>=3.0.0, <=3.0.1) potentially affected by CVE-2021-3672 via pycares (2.3.0)

pycares PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pycares and may be impacted: - bandersnatch =3.0.0, =3.0.1 Source cves: CVE-2021-3672 Source advisory: OSV:GHSA-C58J-88F5-H53F...

Hackers Can Tell What Netflix 'Bandersnatch' Choices You Make

Researchers have shown that even though Netflix encrypts its traffic, hackers can figure out your interactive movie choices...

Researchers go hunting for Netflix’s Bandersnatch

A new research paper from the Indian Institute of Technology Madras explains how popular Netflix interactive show Bandersnatch could fall victim to a side-channel attack. In 2016, Netflix began adding TLS Transport Layer Security to their video content to ensure strangers couldn’t eavesdrop on...

Bandersnatch 0.4 Index.PHP Multiple Cross-Site Scripting Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/26553/info Bandersnatch is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the...

Bandersnatch 0.4 - Multiple Input Validation Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/25094/info Bandersnatch is prone to multiple input-validation vulnerabilities because the application fails to sanitize user-supplied input. These issues include multiple SQL-injections vulnerabilities and an HTML-injecti...

Bandersnatch 0.4 - index.php Multiple Cross-Site Scripting Vulnerabilities

Bandersnatch 0.4 - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/26553/info Bandersnatch is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues t...

Bandersnatch 0.4 - 'index.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/26553/info Bandersnatch is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in t...