10206 matches found
gordo-components (>=0.44.0, <=0.46.0) potentially affected by CVE-2024-8859 via mlflow (1.4.0)
mlflow PYPI version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - gordo-components =0.44.0, =0.46.0 Source cves: CVE-2024-8859 Source advisory: OSV:PYSEC-2026-1638...
PYSEC-2026-1523 Langflow vulnerable to remote code execution
langflow =1.0.18 is vulnerable to Remote Code Execution RCE as any component provided the code functionality and the components run on the local machine rather than in a sandbox...
Insecure Jinja2 templates rendered in Haystack Components can lead to RCE
ImpactHaystack clients that let their users create and run Pipelines from scratch are vulnerable to remote code executions.Certain Components in Haystack use Jinja2 templates, if anyone can create and render that template on the client machine they run any code. PatchesThe problem has been fixed...
PYSEC-2026-2068 Improper line feed handling in zenml
A denial of service DoS vulnerability exists in zenml-io/zenml version 0.56.3 due to improper handling of line feed \n characters in component names. When a low-privileged user adds a component through the API endpoint api/v1/workspaces/default/components with a name containing a \n character, it...
Malicious code in paypal-legal-components (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7337 Malicious code in paypal-legal-components (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @trp-ii-ii-component-library/ii-components (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7098 Malicious code in @trp-ii-ii-component-library/ii-components (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @gutierre0x80/ads.components.button (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7074 Malicious code in @gutierre0x80/ads.components.button (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7049 Malicious code in @athena-ui-components/utils (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @athena-ui-components/utils (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7047 Malicious code in @athena-ui-components/pubsub-bridge (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @athena-ui-components/user-activity (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7048 Malicious code in @athena-ui-components/user-activity (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @athena-ui-components/pubsub-bridge (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2026-7046 Malicious code in @athena-ui-components/layout (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in @athena-ui-components/lang (npm)
--- -= Per source details. Do not edit below this line.=-...