13506 matches found
ROOT-APP-PYPI-GHSA-GR75-JV2W-4656 GHSA-gr75-jv2w-4656 in langchain - Patched by Root
Root has patched GHSA-gr75-jv2w-4656 in the langchain package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2026-35523 CVE-2026-35523 in strawberry-graphql - Patched by Root
Root has patched CVE-2026-35523 in the strawberry-graphql package for Root:PyPI. Multiple fixed versions available...
CVE-2026-84380 vulnerabilities
Vulnerabilities for packages: lmcache-cuda-13.0, py3-httpx2...
GHSA-8XX6-HGC6-GC2M vulnerabilities
Vulnerabilities for packages: lmcache-cuda-13.0, py3-httpx2...
GHSA-PF96-P4FJ-6566 vulnerabilities
Vulnerabilities for packages: lmcache-cuda-13.0, py3-httpx2...
GHSA-PF96-P4FJ-6566 vulnerabilities
Vulnerabilities for packages: py3-httpx2...
apidays24pj (>=0.0.5, <=0.0.15), aws-pdk (>=0.20.0, <=0.26.15) +33 more potentially affected by CVE-2026-89065 via projen (>=0.16.42, <=0.99.80)
projen PYPI version =0.16.42, =0.0.5, =0.20.0, =0.0.10, =0.12.9, =0.2.5, =0.12.10, =0.12.18, =0.4.0, =0.0.73, =0.0.68, =0.0.92, =0.0.68, =0.0.73, =0.15.3, =0.0.4, =0.0.9 and more Source cves: CVE-2026-89065 Source advisory: SNYK:PYTHON-PROJEN-19823701...
ROOT-OS-DEBIAN-11-CVE-2026-15308 CVE-2026-15308 in python3.9 - Patched by Root
Root has patched CVE-2026-15308 in the python3.9 package for Root:Debian:11. Multiple fixed versions available...
Linux Distros Unpatched Vulnerability : CVE-2026-49836
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to version 1.17.1, SmartObject.save writes an embedded smart object to a path...
CVE-2026-49836
psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to version 1.17.1, SmartObject.save writes an embedded smart object to a path taken verbatim from the PSD file. Because that name is attacker-controlled and unsanitised, a tool that extracts embedded objects from an...
CVE-2026-49836
psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to version 1.17.1, SmartObject.save writes an embedded smart object to a path taken verbatim from the PSD file. Because that name is attacker-controlled and unsanitised, a tool that extracts embedded objects from an...
CVE-2026-49836 psd-tools: arbitrary file write via smart-object filename
psd-tools is a Python package for working with Adobe Photoshop PSD files. Prior to version 1.17.1, SmartObject.save writes an embedded smart object to a path taken verbatim from the PSD file. Because that name is attacker-controlled and unsanitised, a tool that extracts embedded objects from an...
hubzoid (>=0.7.15, <=0.9.6) potentially affected by CVE-2026-87015 via open-webui (0.11.0)
open-webui PYPI version 0.11.0 is affected by a known vulnerability. The following packages have a transitive dependency on open-webui and may be impacted: - hubzoid =0.7.15, =0.9.6 Source cves: CVE-2026-87015 Source advisory: SNYK:PYTHON-OPENWEBUI-20158702...
PYSEC-2026-3908 Prowler: Stored XSS in HTML reports through unescaped cloud resource tags
Summary Prowler's HTML output formatter inserts finding.resourcetags into the generated report without HTML escaping. A cloud principal who can create or edit a resource tag in an account that is later scanned can store HTML or JavaScript in that tag. When another user opens the generated Prowler...
PYSEC-2026-3907 Prowler: Stored XSS in HTML reports through unescaped cloud resource tags
Summary Prowler's HTML output formatter inserts finding.resourcetags into the generated report without HTML escaping. A cloud principal who can create or edit a resource tag in an account that is later scanned can store HTML or JavaScript in that tag. When another user opens the generated Prowler...
PT-2026-89714
These are all security issues fixed in the python313-modelscope-1.40.0-1.1 package on the GA media of openSUSE Tumbleweed...
Fedora 43 : GitPython (2026-e6bd4d25ab)
The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-e6bd4d25ab advisory. Version 3.1.60 fixes GHSA-g5vv-9gxw-82hx, GHSA-whh4-5q6c-9v3x, and GHSA-239g-whfq-7xj9. Version 3.1.61 fixes accidental removal of public class regex on Acto...
MAL-2026-15935 Malicious code in proxycer (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2286dac5be0a9e8cc2e7b1ff92253d4b09beb0c43d5e795b9b9ea1391e6f8764 The package's top-level init.py imports starts.py, which is a single-line loader that reverses a 100KB string literal, base64-decodes it, marshal.loa...
