10734 matches found
Malicious code in decapod-common (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e0de84c80d520754e010d02b90fd4dc728d90fa9efe8c1e8cc6ddd7eb05e0da4 setup.py overrides the install command to collect the installer's hostname and resolved IP address via socket.gethostname/gethostbyname and POST them...
ROOT-APP-PYPI-CVE-2026-68770 CVE-2026-68770 in sentence-transformers - Patched by Root
Root has patched CVE-2026-68770 in the sentence-transformers package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2023-46136 CVE-2023-46136 in Werkzeug - Patched by Root
Root has patched CVE-2023-46136 in the Werkzeug package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2024-34069 CVE-2024-34069 in Werkzeug - Patched by Root
Root has patched CVE-2024-34069 in the Werkzeug package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2024-22195 CVE-2024-22195 in Jinja2 - Patched by Root
Root has patched CVE-2024-22195 in the Jinja2 package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2024-56326 CVE-2024-56326 in Jinja2 - Patched by Root
Root has patched CVE-2024-56326 in the Jinja2 package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-GHSA-V396-V7Q4-X2QJ GHSA-v396-v7q4-x2qj in GitPython - Patched by Root
Root has patched GHSA-v396-v7q4-x2qj in the GitPython package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-55255 CVE-2026-55255 in langflow - Patched by Root
Root has patched CVE-2026-55255 in the langflow package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-GHSA-RR7J-V2Q5-CHGV GHSA-rr7j-v2q5-chgv in langsmith - Patched by Root
Root has patched GHSA-rr7j-v2q5-chgv in the langsmith package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-33230 CVE-2026-33230 in nltk - Patched by Root
Root has patched CVE-2026-33230 in the nltk package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-21226 CVE-2026-21226 in azure-core - Patched by Root
Root has patched CVE-2026-21226 in the azure-core package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-32597 CVE-2026-32597 in PyJWT - Patched by Root
Root has patched CVE-2026-32597 in the PyJWT package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-48524 CVE-2026-48524 in PyJWT - Patched by Root
Root has patched CVE-2026-48524 in the PyJWT package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-48526 CVE-2026-48526 in pyjwt - Patched by Root
Root has patched CVE-2026-48526 in the pyjwt package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-48522 CVE-2026-48522 in PyJWT - Patched by Root
Root has patched CVE-2026-48522 in the PyJWT package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-48525 CVE-2026-48525 in PyJWT - Patched by Root
Root has patched CVE-2026-48525 in the PyJWT package for Root:PyPI. Multiple fixed versions available...
AWS Bedrock AgentCore: Improper neutralization of argument delimiters in the Python SDK install_packages()
SummaryThe AWS Bedrock AgentCore Python SDK bedrock-agentcore provides tools for building AI agents, including a Code Interpreter client that installs Python packages into a managed sandbox. An issue exists where, under certain circumstances, improper neutralization of argument delimiters in the...
ROOT-APP-PYPI-CVE-2026-41479 CVE-2026-41479 in Authlib - Patched by Root
Root has patched CVE-2026-41479 in the Authlib package for Root:PyPI. Multiple fixed versions available...