72471 matches found
Use of Hard-coded Credentials
Overview openssl-encrypt is an A package for secure file encryption and decryption based on modern ciphers using heavy-compute-load chaining of hashing and KDF to generate strong encryption password based on users provided password to ensure secure encryption of files Affected versions of this...
Use of Hard-coded Credentials
Overview openssl-encrypt is an A package for secure file encryption and decryption based on modern ciphers using heavy-compute-load chaining of hashing and KDF to generate strong encryption password based on users provided password to ensure secure encryption of files Affected versions of this...
acdc-aws-etl-pipeline (>=0.1.7, <=0.5.9), acryl-datahub-gx-plugin (>=0.14.0.3rc1, <=0.15.0rc15) +687 more potentially affected by CVE-2026-59893 via sqlparse (>=0.1.14, <=0.5.5)
sqlparse PYPI version =0.1.14, =0.1.7, =0.14.0.3rc1, =2.0.0, =0.2.0, =0.0.1, =1.0.6, =0.1.0, =2.0.0, =0.8.0, =0.0.1a0, =0.1.0, =0.2.0 and more Source cves: CVE-2026-59893 Source advisory: OSV:GHSA-PRG7-HCFM-MFCR...
croparray (0.1.1) potentially affected by CVE-2026-68520 via glances (3.2.7)
glances PYPI version 3.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on glances and may be impacted: - croparray 0.1.1 Source cves: CVE-2026-68520 Source advisory: OSV:GHSA-4H34-V6R8-MMJC...
croparray (0.1.1) potentially affected by CVE-2026-46608 +1 more via glances (3.2.7)
glances PYPI version 3.2.7 is affected by a known vulnerability. The following packages have a transitive dependency on glances and may be impacted: - croparray 0.1.1 Source cves: CVE-2026-46608, CVE-2026-68517 Source advisory: OSV:GHSA-FP27-88FP-2PHG...
ROOT-APP-PYPI-CVE-2026-53537 CVE-2026-53537 in python-multipart - Patched by Root
Root has patched CVE-2026-53537 in the python-multipart package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-48155 CVE-2026-48155 in pypdf - Patched by Root
Root has patched CVE-2026-48155 in the pypdf package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-49461 CVE-2026-49461 in pypdf - Patched by Root
Root has patched CVE-2026-49461 in the pypdf package for Root:PyPI. Multiple fixed versions available...
Malicious code in kb-ai (PyPI)
Source: kam193 edd64785c168e513c50673e9b031048ba592c1460a9a952f9430feb83bf5042d The main purpose of the package is to demonstrate a dependency confusion attack. The rest of the functionality is just a stub. --- Category: PROBABLYPENTEST - Packages looking like typical pentest packages, but also...
Malicious Package
Overview kb-ai is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
Malicious code in kb-ai (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d69143a6cdc0a652f91210034751420f7ada3db2a13d81d9e635e3a63333dc5 On import kbai, the package's init.py triggers kbai.utils.callback, which starts a background thread that collects installer host identifiers hostnam...
MAL-2026-14069 Malicious code in kb-ai (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3d69143a6cdc0a652f91210034751420f7ada3db2a13d81d9e635e3a63333dc5 On import kbai, the package's init.py triggers kbai.utils.callback, which starts a background thread that collects installer host identifiers hostnam...
cforge (>=1.0.0b1, <=1.0.0b6) potentially affected by CVE-2026-53708 via mcp-contextforge-gateway (1.0.0b2)
mcp-contextforge-gateway PYPI version 1.0.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on mcp-contextforge-gateway and may be impacted: - cforge =1.0.0b1, =1.0.0b6 Source cves: CVE-2026-53708 Source advisory: GHSA-9HGC-G3W5-67CM...
cforge (>=1.0.0b1, <=1.0.0b6) potentially affected by CVE-2026-53708 via mcp-contextforge-gateway (1.0.0b2)
mcp-contextforge-gateway PYPI version 1.0.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on mcp-contextforge-gateway and may be impacted: - cforge =1.0.0b1, =1.0.0b6 Source cves: CVE-2026-53708 Source advisory: OSV:GHSA-9HGC-G3W5-67CM...
ROOT-APP-PYPI-GHSA-X284-J5P8-9C5P GHSA-x284-j5p8-9c5p in pypdf - Patched by Root
Root has patched GHSA-x284-j5p8-9c5p in the pypdf package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-41313 CVE-2026-41313 in pypdf - Patched by Root
Root has patched CVE-2026-41313 in the pypdf package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-41312 CVE-2026-41312 in pypdf - Patched by Root
Root has patched CVE-2026-41312 in the pypdf package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-GHSA-7GW9-CF7V-778F GHSA-7gw9-cf7v-778f in pypdf - Patched by Root
Root has patched GHSA-7gw9-cf7v-778f in the pypdf package for Root:PyPI. Multiple fixed versions available...