corradin-opioid-project (0.1.0), pricetool (0.1.0) potentially affected by CVE-2026-67338 via jupyterlab (0.31.1)

jupyterlab PYPI version 0.31.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - corradin-opioid-project 0.1.0 - pricetool 0.1.0 Source cves: CVE-2026-67338 Source advisory: OSV:GHSA-VMHF-C436-HXJ4...

CVE-2026-53915

In JetBrains GoLand before 2026.1.3 remote code execution was possible via untrusted project configuration...

CVE-2026-53915

In JetBrains GoLand before 2026.1.3 remote code execution was possible via untrusted project configuration...

CVE-2026-53915

In JetBrains GoLand before 2026.1.3 remote code execution was possible via untrusted project configuration...

CVE-2026-53915

In JetBrains GoLand before 2026.1.3 remote code execution was possible via untrusted project configuration...

EUVD-2026-38005

In JetBrains GoLand before 2026.1.3 remote code execution was possible via untrusted project configuration...

CVE-2026-47267

creationtimestamp| type| source ---|---|--- 2026-06-19 02:22:31+00:00| published-proof-of-concept| https://github.com/gogs/gogs/security/advisories/GHSA-c4v7-xg93-qf8g...

CVE-2026-52802

creationtimestamp| type| source ---|---|--- 2026-06-19 02:21:21+00:00| published-proof-of-concept| https://github.com/gogs/gogs/security/advisories/GHSA-xxhq-69mf-w8cr...

CVE-2026-52810

creationtimestamp| type| source ---|---|--- 2026-06-19 02:18:21+00:00| published-proof-of-concept| https://github.com/gogs/gogs/security/advisories/GHSA-wmfg-5p4h-5fw3 2026-06-24 22:21:41+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mp2xafiefx25 2026-09-04 05:00:04+00:00| seen|...

CVE-2017-20280: Improper Neutralization of Special Elements used in an SQL Command

Joomla Component Myportfolio 3.0.2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the pid parameter. Attackers can send GET requests to index.php with malicious pid values in the task=project&view=grid...

PT-2026-50874

Name of the Vulnerable Software and Affected Versions JetBrains GoLand versions prior to 2026.1.3 Description Remote code execution is possible through the use of untrusted project configuration. Recommendations Update JetBrains GoLand to version 2026.1.3 or later...

PT-2026-50961

Name of the Vulnerable Software and Affected Versions Joomla Component Myportfolio version 3.0.2 Description An SQL injection allows unauthenticated attackers to manipulate database queries by injecting SQL code. This is achieved by sending GET requests to the 'index.php' endpoint using the...

CVE-2026-53915: External Control of File Name or Path

In JetBrains GoLand before 2026.1.3 remote code execution was possible via untrusted project configuration...

MAL-2026-6121 Malicious code in @gbrlxvi/ts-project-lint (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 09e070ea98f9c48e77b964b3dacd4d3e7cbd82cf896fc6140ec4c390438debc8 The package's main module index.js also loaded indirectly by bin/cli.js reads a hidden binary file lib/.perf.dat, AES-256-CBC-decrypts it with a...

CVE-2026-10687

This CVE Record has been rejected by the Zephyr Project CNA. Subsequent analysis, confirmed with the fix author, determined that the addressed defect does not apply to any released version of Zephyr: the affected code path exists only in unreleased development code, and no released branch is...

GHSA-2FJJ-QQG8-FG7X praisonai-platform: Authorization Bypass Through User-Controlled Key

Summary The issue create and update endpoints in praisonai-platform accept a projectid in the request body and persist it without validating that the project belongs to the URL workspace. A user who is a member of workspace WB and has no access to workspace WA can create issues that reference a...

praisonai-platform: Authorization Bypass Through User-Controlled Key

Summary The issue create and update endpoints in praisonai-platform accept a projectid in the request body and persist it without validating that the project belongs to the URL workspace. A user who is a member of workspace WB and has no access to workspace WA can create issues that reference a...

Authorization Bypass Through User-Controlled Key

Overview praisonai-platform is a Platform layer for PraisonAI — workspace, auth, issues, projects Affected versions of this package are vulnerable to Authorization Bypass Through User-Controlled Key via the createissue and update processes. An attacker can manipulate project statistics of another...

CVE-2026-55748

A flaw was found in OpenStack Horizon. This vulnerability allows a highly privileged remote attacker, with user interaction, to craft a project name containing shell metacharacters. When scripts for OpenStack RC file downloading are produced, these metacharacters may be processed, potentially...

PT-2026-51181

CVE ID :CVE-2026-12475 Published : June 18, 2026, 4:29 p.m. | 1 hour, 40 minutes ago Description :None Severity: 0.0 | NA Visit the link for more details, such as CVSS details, affected products, timeline, and more...