ROOT-APP-PYPI-CVE-2026-41066 CVE-2026-41066 in lxml - Patched by Root

Root has patched CVE-2026-41066 in the lxml package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2025-6176 CVE-2025-6176 in Brotli - Patched by Root

Root has patched CVE-2025-6176 in the Brotli package for Root:PyPI. Multiple fixed versions available...

pyattck

Bienvenido a la documentación de pyattck . ... | \ \ \ / / / \ | | | / || |/ / | | | \ / / / ^ \ ---| |-------| |----| ,----'| ' / | / \ / / /\ \ | | | | | | | La versión actual es 7.1.1 pyattck es un framework ligero para los marcos MITRE ATT&CK. Este paquete extrae detalles de los marcos...

manticore

⚠️ Project is archived ⚠️ Este proyecto ya no se desarrolla ni mantiene internamente. Manticore Manticore es una herramienta de ejecución simbólica para el análisis de contratos inteligentes y binarios. Características Exploración de programas : Manticore puede ejecutar un programa con entradas...

ROOT-OS-DEBIAN-12-CVE-2026-11940 CVE-2026-11940 in python3.11 - Patched by Root

Root has patched CVE-2026-11940 in the python3.11 package for Root:Debian:12. Multiple fixed versions available...

atomic-operator

license atomic-operator Este paquete de Python se utiliza para ejecutar pruebas de Atomic Red Team Atómicas en múltiples entornos de sistemas operativos. ¿Qué hay de nuevo? ¿Por qué? atomic-operator permite a los profesionales de seguridad probar sus capacidades de detección y defensa contra las...

ROOT-APP-PYPI-CVE-2025-53365 CVE-2025-53365 in mcp - Patched by Root

Root has patched CVE-2025-53365 in the mcp package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-28684 CVE-2026-28684 in python-dotenv - Patched by Root

Root has patched CVE-2026-28684 in the python-dotenv package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-CVE-2026-45134 CVE-2026-45134 in langsmith - Patched by Root

Root has patched CVE-2026-45134 in the langsmith package for Root:PyPI. Multiple fixed versions available...

[SECURITY] Fedora 45 Update: uv-0.12.19-1.fc45

An extremely fast Python package and project manager, written in Rust. Highlights: =E2=80=A2 A single tool to replace pip, pip-tools, pipx, poetry, pyenv, twi ne, virtualenv, and more. =E2=80=A2 10-100x faster than pip. =E2=80=A2 Provides comprehensive project management, with a universal lockf...

CVE-2026-104843

uv is a Python package and project manager written in Rust. From 0.12.7 until 0.12.18, uv wheel extraction on Windows can process a malicious wheel in a way that writes a file outside the installation prefix, including an executable in a directory already present on the user's PATH. Non-Windows...

ablator (0.0.1b3), apollo-sdk (>=0.2.0, <=0.2.11) +29 more potentially affected by CVE-2026-102937 via virtualenv (20.21.0)

virtualenv PYPI version 20.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - ablator 0.0.1b3 - apollo-sdk =0.2.0, =0.8.3b20231012, =0.8.3b20231012, =0.6.1, =1.2.1, =0.1.3, =0.7.2, =0.2.8, =0.0.1, =1.7.16, =0.4.0rc6,...

[SECURITY] Fedora 44 Update: uv-0.12.19-1.fc44

An extremely fast Python package and project manager, written in Rust. Highlights: =E2=80=A2 A single tool to replace pip, pip-tools, pipx, poetry, pyenv, twi ne, virtualenv, and more. =E2=80=A2 10-100x faster than pip. =E2=80=A2 Provides comprehensive project management, with a universal lockf...

CLEANSTART-2026-SC86417 setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages

CVE-2025-47273 affects multiple packages. setuptools is a package that allows users to download, build, install, upgrade, and uninstall Python packages. See references for individual vulnerability details...

ROOT-APP-PYPI-CVE-2024-5569 CVE-2024-5569 in zipp - Patched by Root

Root has patched CVE-2024-5569 in the zipp package for Root:PyPI. Multiple fixed versions available...

CVE-2026-96455 Reachy Mini daemon allows unauthenticated remote code execution through the app installation endpoint

The Reachy Mini daemon exposes an HTTP API for managing the robot. Its app installation endpoint, POST /apps/install in src/reachymini/daemon/app/routers/apps.py, has no authentication. The handler's only dependency is Dependsgetappmanager, which just hands back the manager object from applicatio...

ROOT-APP-PYPI-GHSA-956X-8GVW-WG5V GHSA-956x-8gvw-wg5v in GitPython - Patched by Root

Root has patched GHSA-956x-8gvw-wg5v in the GitPython package for Root:PyPI. Multiple fixed versions available...

ROOT-APP-PYPI-GHSA-WVPP-8HX9-P66J GHSA-wvpp-8hx9-p66j in GitPython - Patched by Root

Root has patched GHSA-wvpp-8hx9-p66j in the GitPython package for Root:PyPI. Multiple fixed versions available...

PT-2026-104828

Conda is a system-level binary package and environment manager that runs on major operating systems and platforms. Prior to 26.5.2, parse entry point def in conda/common/path/python.py accepted an unvalidated entry-point command from a noarch:python package's info/link.json metadata...

SUSE CVE-2026-62949

AsyncSSH is a Python package which provides an asynchronous client and server implementation of the SSHv2 protocol on top of the Python asyncio framework. Prior to 2.24.0, processchannelopen and processchannelopenconfirmation in asyncssh/connection.py accept a peer-supplied sendpktsize value of...