374 matches found
Malicious code in pycalculate (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-5596 Malicious code in py-cofrd (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-5445 Malicious code in packagemernado (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-5434 Malicious code in okinalek (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-5183 Malicious code in glovo-data-platform-importer-brain (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in ef323refefeffe (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in discordpy-v3 (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-4909 Malicious code in colarify (PyPI)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in adv2099m3 (PyPI)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-1547 Malicious code in requestn (PyPI)
This package is considered malicious because it extracts OS files of the localhost and sends the contents to an unknown Telegram channel...
CVE-2024-26151 Potentially untrusted input is rendered as HTML in final output
The mjml PyPI package, found at the FelixSchwarz/mjml-python GitHub repo, is an unofficial Python port of MJML, a markup language created by Mailjet. All users of FelixSchwarz/mjml-python who insert untrusted data into mjml templates unless that data is checked in a very strict manner. User input...
CVE-2024-23342
A flaw was found in the ecdsa PyPI package, a pure Python implementation of ECC Elliptic Curve Cryptography with support for ECDSA Elliptic Curve Digital Signature Algorithm, EdDSA Edwards-curve Digital Signature Algorithm and ECDH Elliptic Curve Diffie-Hellman. Versions 0.18.0 and prior may be...
CVE-2024-23342
The ecdsa PyPI package is a pure Python implementation of ECC Elliptic Curve Cryptography with support for ECDSA Elliptic Curve Digital Signature Algorithm, EdDSA Edwards-curve Digital Signature Algorithm and ECDH Elliptic Curve Diffie-Hellman. Versions 0.18.0 and prior are vulnerable to the...
CVE-2024-23342 python-ecdsa vulnerable to Minerva attack on P-256
The ecdsa PyPI package is a pure Python implementation of ECC Elliptic Curve Cryptography with support for ECDSA Elliptic Curve Digital Signature Algorithm, EdDSA Edwards-curve Digital Signature Algorithm and ECDH Elliptic Curve Diffie-Hellman. Versions 0.18.0 and prior are vulnerable to the...
Iac-Scan-Runner - Service That Scans Your Infrastructure As Code For Common Vulnerabilities
Service that scans your Infrastructure as Code for common vulnerabilities. Aspect | Information ---|--- Tool name | IaC Scan Runner Docker image | xscanner/runner PyPI package | iac-scan-runner Documentation | docs Contact us | [email protected] Purpose and description The IaC Scan Runner is...
Improper Input Validation
pdm is vulnerable to Improper Input Validation. The vulnerability exists in the readlockfile function at repositories.py due to lack of input validations which allows an attacker to trick a user into installing a malicious open source PyPi package...
SUSE CVE-2023-31543
A dependency confusion in pipreqs v0.3.0 to v0.4.11 allows attackers to execute arbitrary code via uploading a crafted PyPI package to the chosen repository server...
pipreqs vulnerable to Dependency Confusion
A dependency confusion in pipreqs v0.3.0 to v0.4.11 allows attackers to execute arbitrary code via uploading a crafted PyPI package to the chosen repository server...
