362491 matches found
yival (>=0.1.0a5, <=0.1.0a10) potentially affected by CVE-2026-12771 via litellm (0.1.607)
litellm PYPI version 0.1.607 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - yival =0.1.0a5, =0.1.0a10 Source cves: CVE-2026-12771 Source advisory: OSV:PYSEC-2026-4075...
a2a-acl (0.0.14), a2a-agentspeak (0.0.14) +572 more potentially affected by CVE-2026-12772 via litellm (>=1.0.0, <=1.82.2)
litellm PYPI version =1.0.0, =0.3.5, =0.1.0, =0.4.0, =0.1.0, =0.1.39, =0.2.1, =0.1.0, =0.51.4, =0.4.1, =0.5.3 and more Source cves: CVE-2026-12772 Source advisory: OSV:PYSEC-2026-4073...
PickleScan has multiple stdlib modules with direct RCE not in blocklist
Summarypicklescan v1.0.3 latest does not block at least 7 Python standard library modules that provide direct arbitrary command execution or code evaluation. A malicious pickle file importing these modules is reported as having 0 issues CLEAN scan. This enables remote code execution that bypasses...
promptulate (1.9.0) potentially affected by CVE-2026-12772 via litellm (0.12.12)
litellm PYPI version 0.12.12 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - promptulate 1.9.0 Source cves: CVE-2026-12772 Source advisory: OSV:PYSEC-2026-4073...
PYSEC-2026-4134 PickleScan has multiple stdlib modules with direct RCE not in blocklist
Summary picklescan v1.0.3 latest does not block at least 7 Python standard library modules that provide direct arbitrary command execution or code evaluation. A malicious pickle file importing these modules is reported as having 0 issues CLEAN scan. This enables remote code execution that bypasse...
promptulate (1.9.0) potentially affected by CVE-2026-12770 via litellm (0.12.12)
litellm PYPI version 0.12.12 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - promptulate 1.9.0 Source cves: CVE-2026-12770 Source advisory: OSV:PYSEC-2026-4068...
CVE-2026-85228
A flaw was found in Deep Java Library. Due to an integer overflow during tensor buffer validation, a remote, unauthenticated attacker can send a crafted tensor payload to trigger out-of-bounds memory access. Successful exploitation can allow an attacker to obtain sensitive data from adjacent...
02strich-markdown (>=1.0.0, <=1.0.2), 0xsodium (>=0.2.0, <=0.14.0) +739 more potentially affected by CVE-2026-103921 via @graphql-tools/executor-legacy-ws (>=0.0.1-alpha-20221108142800-3beb5fe2, <=1.1.35-rc-20260908112455-501eab0b35c6e76223e7ed3d60d6e26c72127f1a)
@graphql-tools/executor-legacy-ws NPM version =0.0.1-alpha-20221108142800-3beb5fe2, =1.0.0, =0.2.0, =0.0.1-b, =0.2.0, =0.2.0, =0.5.2, =5.0.2, =2.2.0, =1.1.4, =1.3.1, =1.0.0, =0.0.2-alpha-20220914223128-d706aab, =0.0.2-alpha-20220915073207-1bb0680, =0.0.2-alpha-20221101100428-eb8da76 and more Sour...
CLSA-2026-1790872344 TuxCare security update for drupal/core (2 CVEs)
TuxCare rebuilt drupal/core to address 2 CVEs. Fixed in 10.5.12-p1+tuxcare...
CLSA-2026-1790872226 TuxCare security update for zendframework/zendframework (1 CVE)
TuxCare rebuilt zendframework/zendframework to address 1 CVE. Fixed in 2.4.13-p2+tuxcare...
CLSA-2026-1790870726 TuxCare security update for deepmerge-ts (1 CVE)
TuxCare rebuilt deepmerge-ts to address 1 CVE. Fixed in 7.1.5-tuxcare.1...
CLSA-2026-1790870256 TuxCare security update for brace-expansion (1 CVE)
TuxCare rebuilt brace-expansion to address 1 CVE. Fixed in 1.1.14-tuxcare.2...
CLSA-2026-1790870000 TuxCare security update for fast-uri (1 CVE)
TuxCare rebuilt fast-uri to address 1 CVE. Fixed in 3.1.3-tuxcare.3...
CLSA-2026-1790869902 TuxCare security update for adm-zip (1 CVE)
TuxCare rebuilt adm-zip to address 1 CVE. Fixed in 0.5.17-tuxcare.4...
CLSA-2026-1790869753 TuxCare security update for fast-uri (1 CVE)
TuxCare rebuilt fast-uri to address 1 CVE. Fixed in 2.4.0-tuxcare.4...
CLSA-2026-1790869488 TuxCare security update for brace-expansion (1 CVE)
TuxCare rebuilt brace-expansion to address 1 CVE. Fixed in 1.1.15-tuxcare.2...
CLSA-2026-1790869390 TuxCare security update for @react-native-community (1 CVE)
TuxCare rebuilt 5 @react-native-community packages to address 1 CVE. Fixed in 5.0.1-tuxcare.1...
@dataform/cli (>=3.0.59-alpha.1, <=3.0.71), @n8n-plus/n8n-plus (>=2.32.7, <=2.37.9) +17 more potentially affected by CVE-2026-92952 via vm2 (>=3.11.4, <=3.11.6)
vm2 NPM version =3.11.4, =3.0.59-alpha.1, =2.32.7, =2.32.0, =1.8.2, =1.1.15, =1.27.8, =2.32.0, =2.32.0, =1.73.0, =1.73.0, =1.73.0, =1.73.0, =1.73.0, =1.73.0, =1.74.12 and more Source cves: CVE-2026-92952 Source advisory: GHSA-JF8Q-945G-9Q4C...
@accordproject/cicero-cli (>=0.3.4, <=0.24.1-20231019080841), @accordproject/cicero-core (>=0.12.5-20190619040852, <=0.24.1-20230627140514) +287 more potentially affected by CVE-2026-92951 via vm2 (>=3.0.0, <=3.11.6)
vm2 NPM version =3.0.0, =0.3.4, =0.12.5-20190619040852, =0.3.12-20180525105709, =0.3.4, =0.11.2-20190326183124, =0.22.2-20210714131804, =0.0.51-20180524154814, =0.0.51-20180524154814, =0.7.4-20190326150718, =2.0.0-rc.8.0.29, =0.1.0, =2.1.1, =0.1.1, =1.0.0, =1.4.0 and more Source cves:...