Malicious code in eth-account-wallet (PyPI)

Source: kam193 4e0a297fd6a2bfc0e15f9aac09c92768a4725458ad282594e97ec15bb3fa8c5f During installation, the package exfiltrates sensitive env variables, browser data, crypto wallets files, ssh keys and other configuration files. --- Category: MALICIOUS - The campaign has clearly malicious intent, li...

Malicious code in mnemonic-py (PyPI)

Source: kam193 6599d6208d71e0e809661e86bf5641e6e7b871cd6f01a54abf22215b8a88ef11 During installation, the package exfiltrates sensitive env variables, browser data, crypto wallets files, ssh keys and other configuration files. --- Category: MALICIOUS - The campaign has clearly malicious intent, li...

Malicious code in defi-sdk-py (PyPI)

Source: kam193 b292686db581afeaaa7d53e2281a90d7d470fc71ab9e7d6156c49e2e99a44a30 During installation, the package exfiltrates sensitive env variables, browser data, crypto wallets files, ssh keys and other configuration files. --- Category: MALICIOUS - The campaign has clearly malicious intent, li...

ROOT-APP-PYPI-CVE-2026-68770 CVE-2026-68770 in sentence-transformers - Patched by Root

Root has patched CVE-2026-68770 in the sentence-transformers package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2023-46136 CVE-2023-46136 in Werkzeug - Patched by Root

Root has patched CVE-2023-46136 in the Werkzeug package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2024-34069 CVE-2024-34069 in Werkzeug - Patched by Root

Root has patched CVE-2024-34069 in the Werkzeug package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2024-22195 CVE-2024-22195 in Jinja2 - Patched by Root

Root has patched CVE-2024-22195 in the Jinja2 package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2024-56326 CVE-2024-56326 in Jinja2 - Patched by Root

Root has patched CVE-2024-56326 in the Jinja2 package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-GHSA-V396-V7Q4-X2QJ GHSA-v396-v7q4-x2qj in GitPython - Patched by Root

Root has patched GHSA-v396-v7q4-x2qj in the GitPython package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-55255 CVE-2026-55255 in langflow - Patched by Root

Root has patched CVE-2026-55255 in the langflow package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-GHSA-RR7J-V2Q5-CHGV GHSA-rr7j-v2q5-chgv in langsmith - Patched by Root

Root has patched GHSA-rr7j-v2q5-chgv in the langsmith package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-33230 CVE-2026-33230 in nltk - Patched by Root

Root has patched CVE-2026-33230 in the nltk package for Root:PyPI. Multiple fixed versions available...

openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-70491 via open-webui (0.6.0)

open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-70491 Source advisory: GHSA-3R7G-Q6CG-Q2VX...

openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-70491 via open-webui (0.6.0)

open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-70491 Source advisory: SNYK:PYTHON-OPENWEBUI-18600527...

openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-70491 via open-webui (0.6.0)

open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-70491 Source advisory: MEND:CVE-2026-70491...

openwebui-token-tracking (0.1.7) potentially affected by CVE-2026-54020 via open-webui (0.6.0)

open-webui PYPI version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - openwebui-token-tracking 0.1.7 Source cves: CVE-2026-54020 Source advisory: GHSA-H6X2-583H-X99R...

doppler-pdm (>=0.1.0, <=1.0.2), liteyukibot-plugin-nonebot (>=0.1.0, <=0.1.3) +9 more potentially affected by CVE-2026-47781 via pdm (>=1.15.5, <=2.26.2)

pdm PYPI version =1.15.5, =0.1.0, =0.1.0, =0.1.5, =0.4.0, =0.6.0, =0.2.0, =0.8.0, =0.8.0b1, =0.8.0b2 Source cves: CVE-2026-47781 Source advisory: MEND:CVE-2026-47781...

aimmo (>=1.4.6b782, <=1.4.11), cfl-common (>=5.33.4, <=5.43.0) +7 more potentially affected by CVE-2026-15830 via django (2.2.27)

django PYPI version 2.2.27 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - aimmo =1.4.6b782, =5.33.4, =5.33.5, =3.15.0, =1.1.0, =1.0.0, =2.0.2, =3.7.2, =3.8.9 - taccsite-cms 3.6.0a0 Source cves: CVE-2026-15830 Source...

docker-compose-control-center (>=2.4.0, <=3.0.0) potentially affected by CVE-2026-15830 via django (2.1.8)

django PYPI version 2.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - docker-compose-control-center =2.4.0, =3.0.0 Source cves: CVE-2026-15830 Source advisory: OSV:GHSA-Q238-5CXM-5C9H...

arches (>=6.2.5, <=7.4.2), botbuilder-applicationinsights (>=0.0.1, <=4.14.8) +3 more potentially affected by CVE-2026-15307 via django (3.2.21)

django PYPI version 3.2.21 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - arches =6.2.5, =0.0.1, =0.0.1, =2024.5.0, =2024.6.0 - nemo 4.6.4 Source cves: CVE-2026-15307 Source advisory: OSV:GHSA-WVQV-FJ8W-QMHM...