PYSEC-2026-164

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 4.0.0 to 4.5.6, the allow-list of extensions that can be installed from PyPI Extension Manager allowedextensionsuris is not correctly enforced by JupyterLab. The Py...

DEBIAN-CVE-2026-42266

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 4.0.0 to 4.5.6, the allow-list of extensions that can be installed from PyPI Extension Manager allowedextensionsuris is not correctly enforced by JupyterLab. The Py...

UBUNTU-CVE-2026-42266

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 4.0.0 to 4.5.6, the allow-list of extensions that can be installed from PyPI Extension Manager allowedextensionsuris is not correctly enforced by JupyterLab. The Py...

CVE-2026-42266

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 4.0.0 to 4.5.6, the allow-list of extensions that can be installed from PyPI Extension Manager allowedextensionsuris is not correctly enforced by JupyterLab. The Py...

ROOT-APP-PYPI-CVE-2023-47248 CVE-2023-47248 in rootio-pyarrow - Patched by Root

Root has patched CVE-2023-47248 in the rootio-pyarrow package for Root:PyPI. Multiple fixed versions available...

CVE-2026-42266: Improper Neutralization of Argument Delimiters in a Command

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 4.0.0 to 4.5.6, the allow-list of extensions that can be installed from PyPI Extension Manager allowedextensionsuris is not correctly enforced by JupyterLab. The Py...

aait (>=1.0.4, <=1.0.5), adess (1.0.0) +226 more potentially affected by CVE-2026-31235 via imgaug (>=0.2.5, <=0.4.0)

imgaug PYPI version =0.2.5, =1.0.4, =0.1.0, =0.10.0, =0.1.0, =1.3.0, =0.5.0, =0.3.2, =0.7.0.dev134, =0.1.4, =0.1.0, =0.5.2, =2.0.4, =2.0.7 and more Source cves: CVE-2026-31235 Source advisory: SNYK:PYTHON-IMGAUG-17675164...

athina (1.1.0), atlas-mcp (0.1.0) +78 more potentially affected by CVE-2026-45758 via guardrails-ai (>=0.3.3, <=0.11.0)

guardrails-ai PYPI version =0.3.3, =0.1.39, =0.1.0, =0.1.0, =0.3.1, =0.0.2, =0.1.0, =0.1.0, =0.1.6, =0.0.6, =0.1.1a1 - guardrails-ai-detect-prompt-injection 0.2.1a1 and more Source cves: CVE-2026-45758 Source advisory: SNYK:PYTHON-GUARDRAILSAI-16641086...

a13n-harness (>=0.0.4, <=0.0.39), a2a-server (>=0.1.5, <=0.6.1) +616 more potentially affected by CVE-2026-45758 via mistralai (>=0.0.8, <=3.0.0)

mistralai PYPI version =0.0.8, =0.0.4, =0.1.5, =0.1.0, =0.1.0, =0.1.0, =1.0.0b251120, =0.1.0, =0.1.0, =1.0.0a260604, =1.0.0b260918 - agentaicommunity-agent-context-compression 0.1.0 and more Source cves: CVE-2026-45758 Source advisory: SNYK:PYTHON-MISTRALAI-16641237...

aigco (0.0.3), airoboros (>=2.1.6, <=2.2.1) +82 more potentially affected by CVE-2026-31253 via flash-attn (>=0.2.8, <=2.8.3.post1)

flash-attn PYPI version =0.2.8, =2.1.6, =1.1.2, =0.0.0.dev0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.1.0, =0.0.1, =0.0.1, =0.0.3 and more Source cves: CVE-2026-31253 Source advisory: SNYK:PYTHON-FLASHATTN-17670564...

PT-2026-42529

Impact oxidize-pdf defines Color as a pub enum with public tuple-struct variants Rgbf64, f64, f64, Grayf64, and Cmykf64, f64, f64, f64. The constructors Color::rgb, Color::gray, and Color::cmyk clamp incoming components to 0.0, 1.0, but because the variants are pub, callers can construct values...

MAL-2026-3411 Malicious code in web3-py-checksum (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4b2052172f5c854b2e91f6bdc9336a97469cd161372621a1880d9cd1e3ad426a The code silently exfiltrates the private key of a crypto account. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Quasar Linux RAT Steals Developer Credentials for Software Supply Chain Compromise

A previously undocumented Linux implant codenamed Quasar Linux RAT QLNX is targeting developers' systems to establish a silent foothold as well as facilitate a broad range of post-compromise functionality, such as credential harvesting, keylogging, file manipulation, clipboard monitoring, and...

MAL-2026-3384 Malicious code in web3-connect (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1395358346670699250fafa1cb824e59ce1d8265d21b6c80c5033f572349265f Code pretends to be a crypto utility but exfiltrates given private key / seed --- Category: MALICIOUS - The campaign has clearly malicious intent, like...

mailman-web (>=0.0.5, <=0.0.9) potentially affected by CVE-2026-44742 via postorius (>=1.3.10, <=1.3.13)

postorius PYPI version =1.3.10, =0.0.5, =0.0.9 Source cves: CVE-2026-44742 Source advisory: SNYK:PYTHON-POSTORIUS-16635974...

PT-2026-41219

Summary Between 2026-02 and 2026-04-24 a total of 22 public PyPI sdists of ogham-mcp contained development credentials embedded in source files. All credentials have since been rotated on the respective providers. No known exploitation. Upgrade to v0.11.1 to get a clean release. What was leaked |...

mindsdb-server (>=0.9.1, <=1.2.2) potentially affected by CVE-2026-7712 via mindsdb (26.1.0)

mindsdb PYPI version 26.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on mindsdb and may be impacted: - mindsdb-server =0.9.1, =1.2.2 Source cves: CVE-2026-7712 Source advisory: SNYK:PYTHON-MINDSDB-16635942...

aana (>=0.2.1, <=0.2.2.2), admet-ai (>=2.0.0, <=2.0.1) +1098 more potentially affected by CVE-2026-44484 via lightning (>=1.8.6, <=2.6.6)

lightning PYPI version =1.8.6, =0.2.1, =2.0.0, =1.3.0, =0.2.0, =0.1.0, =1.0.1, =0.1.0, =2025.4.0, =0.0.0, =0.1.11, =1.8.15, =1.8.17, =0.1.1, =0.3.2 and more Source cves: CVE-2026-44484 Source advisory: SNYK:PYTHON-LIGHTNING-16323121...

MAL-2026-3148 Malicious code in amazon-boto (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 649bb559f3078565515a9fee16dbe78e0d1b5575943cbaf020135f8e70e2f17d When using the package, the given AWS credentials are silently exfiltrated to a hardcoded location. This incarnation of the long-running campaign was first...

MAL-2026-3142 Malicious code in timemcp-client (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 8e125c901115c73a3467acea1300ccc14f718459dbf54ad11a8baf7c39cc03d9 During import, the package automatically downloads and executes code that first acts as an infostealer and then starts code acting as a RAT. It connects with a...