ROOT-APP-PYPI-CVE-2026-48710 CVE-2026-48710 in starlette - Patched by Root

Root has patched CVE-2026-48710 in the starlette package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-23949 CVE-2026-23949 in jaraco.context - Patched by Root

Root has patched CVE-2026-23949 in the jaraco.context package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-GHSA-539M-9XH6-Q6RR GHSA-539m-9xh6-q6rr in GitPython - Patched by Root

Root has patched GHSA-539m-9xh6-q6rr in the GitPython package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-42561 CVE-2026-42561 in python-multipart - Patched by Root

Root has patched CVE-2026-42561 in the python-multipart package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-54284 CVE-2026-54284 in sqlparse - Patched by Root

Root has patched CVE-2026-54284 in the sqlparse package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-41313 CVE-2026-41313 in pypdf - Patched by Root

Root has patched CVE-2026-41313 in the pypdf package for Root:PyPI. Multiple fixed versions available...

MAL-2025-191906 Malicious code in tonetext (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 c46725ad6c88079cce4f7fa4a29175fec7f78ea83344da99d0f02ac4f020fcf3 When imported, the code embedded into the exception class downloads a remote file, and runs it by importing, and attempts to cover tracks by overwriting itself...

MAL-2024-11742 Malicious code in uus (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 30ca4330f972788b6c86dd1f758c674796e53ffc99cf686ac2ed551110ba3830 A campaign of probably pentest packages flooding PYPI. Installing the package or importing the module triggers reporting basic info like hostname, path and the...

stashpy (>=0.2.0, <=0.2.1) potentially affected by CVE-2024-58384 via tornado (4.3.0b2)

tornado PYPI version 4.3.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on tornado and may be impacted: - stashpy =0.2.0, =0.2.1 Source cves: CVE-2024-58384 Source advisory: OSV:GHSA-W235-7P84-XX57...