bernn (>=0.1.0, <=0.3.2), jupyterlab-disable-download (0.1.7) +1 more potentially affected by CVE-2026-73415 via jupyterlab (3.6.6)

jupyterlab PYPI version 3.6.6 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - bernn =0.1.0, =0.3.4, =0.8.0 Source cves: CVE-2026-73415 Source advisory: OSV:GHSA-GX64-GJ6P-PC4C...

bernn (>=0.1.0, <=0.3.2), jupyterlab-disable-download (0.1.7) +1 more potentially affected by CVE-2026-73626 via jupyterlab (3.6.6)

jupyterlab PYPI version 3.6.6 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - bernn =0.1.0, =0.3.4, =0.8.0 Source cves: CVE-2026-73626 Source advisory: OSV:GHSA-WHVH-WF3X-G77J...

bernn (>=0.1.0, <=0.3.2), jupyterlab-disable-download (0.1.7) +1 more potentially affected by CVE-2025-59842 via jupyterlab (3.6.6)

jupyterlab PYPI version 3.6.6 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - bernn =0.1.0, =0.3.4, =0.8.0 Source cves: CVE-2025-59842 Source advisory: OSV:PYSEC-2026-1482...

bernn (>=0.1.0, <=0.3.2), jupyterlab-disable-download (0.1.7) +1 more potentially affected by CVE-2026-67338 via jupyterlab (3.6.6)

jupyterlab PYPI version 3.6.6 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - bernn =0.1.0, =0.3.4, =0.8.0 Source cves: CVE-2026-67338 Source advisory: OSV:GHSA-VMHF-C436-HXJ4...

bernn (>=0.1.0, <=0.3.2), jupyterlab-disable-download (0.1.7) +1 more potentially affected by CVE-2026-40171 via jupyterlab (3.6.6)

jupyterlab PYPI version 3.6.6 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - bernn =0.1.0, =0.3.4, =0.8.0 Source cves: CVE-2026-40171 Source advisory: OSV:GHSA-RCH3-82JR-F9W9...

CVE-2026-4401

CVE-2026-4401 affects the WordPress plugin Download Monitor up to version 5.1.10. The vulnerability is a CSRF in the actions_handler() and bulk_actions_handler() in class-dlm-downloads-path.php caused by missing nonce verification. This allows unauthenticated attackers to delete, disable, or enab...

WordPress Download Monitor plugin <= 5.1.10 - Cross-Site Request Forgery to Download Path Deletion and Disabling vulnerability

Cross-Site Request Forgery to Download Path Deletion and Disabling vulnerability discovered by Kirasec in WordPress Plugin Download Monitor versions = 5.1.10...

bernn (>=0.1.0, <=0.3.2), jupyterlab-disable-download (0.1.7) +1 more potentially affected by CVE-2025-59842 via jupyterlab (3.6.6)

jupyterlab PYPI version 3.6.6 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - bernn =0.1.0, =0.3.4, =0.8.0 Source cves: CVE-2025-59842 Source advisory: OSV:GHSA-VVFJ-2JQX-52JM...

PT-2024-20792 · Idurar · Idurar

Name of the Vulnerable Software and Affected Versions: iDURAR version 2.0.0 Description: A Path Traversal vulnerability exists, allowing unauthenticated attackers to expose sensitive files via the download functionality. The issue can be exploited using backslashes. For example, an attacker can u...

PT-2023-4159 · Webmin +1 · Webmin +1

Name of the Vulnerable Software and Affected Versions: Webmin version 2.021 Description: An issue was discovered in the download functionality, allowing an attacker to exploit a Cross-Site Scripting XSS vulnerability. By providing a crafted download path containing a malicious payload, an attacke...