PT-2026-40861

Name of the Vulnerable Software and Affected Versions GitLab CE/EE versions 17.6 through 18.9.6 GitLab CE/EE versions 18.10 through 18.10.5 GitLab CE/EE versions 18.11 through 18.11.2 Description Improper authorization checks allow an authenticated user with developer-role permissions to bypass...

MAL-2026-3698 Malicious code in trickery (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 3ad5df28c8d5f5afa377d6b54a7eac1d3110610783c7e62fbd084a0bd49baac5 Package contains code to install a backdoor - and additionally to a user-controlled backdoor, it also installs the second, with own C2 server. It's not...

PYSEC-2026-164

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 4.0.0 to 4.5.6, the allow-list of extensions that can be installed from PyPI Extension Manager allowedextensionsuris is not correctly enforced by JupyterLab. The Py...

DEBIAN-CVE-2026-42266

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 4.0.0 to 4.5.6, the allow-list of extensions that can be installed from PyPI Extension Manager allowedextensionsuris is not correctly enforced by JupyterLab. The Py...

UBUNTU-CVE-2026-42266

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 4.0.0 to 4.5.6, the allow-list of extensions that can be installed from PyPI Extension Manager allowedextensionsuris is not correctly enforced by JupyterLab. The Py...

ROOT-APP-PYPI-CVE-2023-47248 CVE-2023-47248 in rootio-pyarrow - Patched by Root

Root has patched CVE-2023-47248 in the rootio-pyarrow package for Root:PyPI. Multiple fixed versions available...

CVE-2026-42266: Improper Neutralization of Argument Delimiters in a Command

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 4.0.0 to 4.5.6, the allow-list of extensions that can be installed from PyPI Extension Manager allowedextensionsuris is not correctly enforced by JupyterLab. The Py...

cognee-agensgraph (0.2.0), cognee-community-graph-adapter-arcadedb (0.2.0) +43 more potentially affected by CVE-2026-31231 via cognee (>=0.1.44, <=1.5.4)

cognee PYPI version =0.1.44, =0.0.2, =1.0.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.1.5 and more Source cves: CVE-2026-31231 Source advisory: SNYK:PYTHON-COGNEE-17675444...

aait (>=1.0.4, <=1.0.5), adess (1.0.0) +236 more potentially affected by CVE-2026-31235 via imgaug (>=0.2.5, <=0.4.0)

imgaug PYPI version =0.2.5, =1.0.4, =0.1.0, =0.10.0, =0.1.0, =1.3.0, =0.5.0, =0.2.3, =0.3.2, =0.7.0.dev134, =0.1.4, =0.1.0, =0.2.1 and more Source cves: CVE-2026-31235 Source advisory: SNYK:PYTHON-IMGAUG-17675164...

ag-llm (>=0.1.0a0, <=0.1.0a1), ai-yardstick (0.0.1) +406 more potentially affected by CVE-2026-31236 via llm (>=0.4.1, <=0.34.0)

llm PYPI version =0.4.1, =0.1.0a0, =0.1.0, =0.0.0, =0.1.0, =0.1.0, =0.8.0, =0.1.10, =0.0.1, =1.4.0, =1.0.0, =0.0.3, =0.0.4 and more Source cves: CVE-2026-31236 Source advisory: SNYK:PYTHON-LLM-17675137...

athina (1.1.0), atlas-mcp (0.1.0) +78 more potentially affected by CVE-2026-45758 via guardrails-ai (>=0.3.3, <=0.11.0)

guardrails-ai PYPI version =0.3.3, =0.1.39, =0.1.0, =0.1.0, =0.3.1, =0.0.2, =0.1.0, =0.1.0, =0.1.6, =0.0.6, =0.1.1a1 - guardrails-ai-detect-prompt-injection 0.2.1a1 and more Source cves: CVE-2026-45758 Source advisory: SNYK:PYTHON-GUARDRAILSAI-16641086...

a2a-server (>=0.1.5, <=0.6.1), academic-research-mentor (>=0.1.0, <=0.2.0) +588 more potentially affected by CVE-2026-45758 via mistralai (>=0.0.8, <=2.9.4)

mistralai PYPI version =0.0.8, =0.1.5, =0.1.0, =0.1.0, =0.1.0, =1.0.0a260604, =0.1.0, =0.1.0, =0.10.0, =0.0.16, =0.0.1, =0.0.9 and more Source cves: CVE-2026-45758 Source advisory: SNYK:PYTHON-MISTRALAI-16641237...

aigco (0.0.3), airoboros (>=2.1.6, <=2.2.1) +83 more potentially affected by CVE-2026-31253 via flash-attn (>=0.2.8, <=2.8.3.post1)

flash-attn PYPI version =0.2.8, =2.1.6, =1.1.2, =0.0.0.dev0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.1.0, =0.0.1, =0.0.8 and more Source cves: CVE-2026-31253 Source advisory: SNYK:PYTHON-FLASHATTN-17670564...

MAL-2026-3411 Malicious code in web3-py-checksum (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 4b2052172f5c854b2e91f6bdc9336a97469cd161372621a1880d9cd1e3ad426a The code silently exfiltrates the private key of a crypto account. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers...

Quasar Linux RAT Steals Developer Credentials for Software Supply Chain Compromise

A previously undocumented Linux implant codenamed Quasar Linux RAT QLNX is targeting developers' systems to establish a silent foothold as well as facilitate a broad range of post-compromise functionality, such as credential harvesting, keylogging, file manipulation, clipboard monitoring, and...

MAL-2026-3384 Malicious code in web3-connect (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 1395358346670699250fafa1cb824e59ce1d8265d21b6c80c5033f572349265f Code pretends to be a crypto utility but exfiltrates given private key / seed --- Category: MALICIOUS - The campaign has clearly malicious intent, like...

mailman-web (>=0.0.5, <=0.0.9) potentially affected by CVE-2026-44742 via postorius (>=1.3.10, <=1.3.13)

postorius PYPI version =1.3.10, =0.0.5, =0.0.9 Source cves: CVE-2026-44742 Source advisory: SNYK:PYTHON-POSTORIUS-16635974...

mindsdb-server (>=0.9.1, <=1.2.2) potentially affected by CVE-2026-7712 via mindsdb (26.1.0)

mindsdb PYPI version 26.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on mindsdb and may be impacted: - mindsdb-server =0.9.1, =1.2.2 Source cves: CVE-2026-7712 Source advisory: SNYK:PYTHON-MINDSDB-16635942...

dzbanek-langflow-base (>=0.6.0, <=0.6.1), jf-langflow (>=1.10.0, <=1.10.0.post7) +31 more potentially affected by CVE-2026-7687 via lfx (>=0.1.13, <=1.13.0.dev5)

lfx PYPI version =0.1.13, =0.6.0, =1.10.0, =1.8.0rc0, =0.7.0, =0.1.0, =0.1.0, =0.1.1rc0, =1.0.0, =0.1.0, =0.1.0, =0.1.0, =0.1.1rc0, =0.1.5 and more Source cves: CVE-2026-7687 Source advisory: SNYK:PYTHON-LFX-16479355...

MAL-2026-3148 Malicious code in amazon-boto (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: kam193 649bb559f3078565515a9fee16dbe78e0d1b5575943cbaf020135f8e70e2f17d When using the package, the given AWS credentials are silently exfiltrated to a hardcoded location. This incarnation of the long-running campaign was first...