aime-detector-sdk (>=0.0.4.post1, <=0.1.5.post5), aug (0.1.0) +23 more potentially affected by CVE-2019-14493 via opencv-python (>=4.0.0.21, <=4.1.0.25)

opencv-python PYPI version =4.0.0.21, =0.0.4.post1, =0.1.0, =0.1.3, =1.0.11, =0.0.9, =0.8.0rc1, =0.1.0, =0.9.939.513, =0.0.0, =0.5.0, =0.5.2 and more Source cves: CVE-2019-14493 Source advisory: OSV:PYSEC-2026-2806...

cvhelper (0.1.0), deepomatic-cli (>=0.3.0, <=0.5.1) +4 more potentially affected by CVE-2019-14493 via opencv-python (3.4.3.18)

opencv-python PYPI version 3.4.3.18 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-python and may be impacted: - cvhelper 0.1.0 - deepomatic-cli =0.3.0, =2.0.0, =0.1.7, =0.3.3, =1.1.0, =1.4.0 Source cves: CVE-2019-14493 Source advisory:...

coreml (0.0.5), imgreg2d (0.0.0.2) +1 more potentially affected by CVE-2019-14493 via opencv-python (3.4.1.15)

opencv-python PYPI version 3.4.1.15 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-python and may be impacted: - coreml 0.0.5 - imgreg2d 0.0.0.2 - pyannote-video =1.6.0, =1.6.3 Source cves: CVE-2019-14493 Source advisory: OSV:PYSEC-2026-2806...

pyslide (>=0.4.0, <=0.4.1), vouched-python (0.0.5b10) potentially affected by CVE-2019-14493 via opencv-python (3.4.4.19)

opencv-python PYPI version 3.4.4.19 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-python and may be impacted: - pyslide =0.4.0, =0.4.1 - vouched-python 0.0.5b10 Source cves: CVE-2019-14493 Source advisory: OSV:PYSEC-2026-2806...

craft-text-detector (>=0.1.8, <=0.3.2), deeptext (0.1.3) +3 more potentially affected by CVE-2019-14493 via opencv-python (3.4.8.29)

opencv-python PYPI version 3.4.8.29 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-python and may be impacted: - craft-text-detector =0.1.8, =0.1.0, =0.1.2 - s2c 0.0.6 Source cves: CVE-2019-14493 Source advisory: OSV:PYSEC-2026-2806...

deeplabcut (>=2.0.0.dev2, <=2.1.8), deeplabcutcore (>=0.0.0b1, <=0.0.0b3) +8 more potentially affected by CVE-2019-14493 via opencv-python (3.4.17.61)

opencv-python PYPI version 3.4.17.61 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-python and may be impacted: - deeplabcut =2.0.0.dev2, =0.0.0b1, =2.1.1, =0.8.3, =0.3.0, =0.3.0, =3.0.5, =0.1.0a2, =0.1.0a7 Source cves: CVE-2019-14493 Source...

qweb (>=1.0.1, <=1.2.0) potentially affected by CVE-2019-14493 via opencv-python (3.4.13.47)

opencv-python PYPI version 3.4.13.47 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-python and may be impacted: - qweb =1.0.1, =1.2.0 Source cves: CVE-2019-14493 Source advisory: OSV:PYSEC-2026-2806...

spam (0.5.2.1), supervisely (>=6.1.29, <=6.1.48) potentially affected by CVE-2019-14493 via opencv-python (3.4.10.35)

opencv-python PYPI version 3.4.10.35 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-python and may be impacted: - spam 0.5.2.1 - supervisely =6.1.29, =6.1.48 Source cves: CVE-2019-14493 Source advisory: OSV:PYSEC-2026-2806...

opengame (>=0.2.1a0, <=1.0.2b0) potentially affected by CVE-2019-14493 via opencv-python (3.4.11.45)

opencv-python PYPI version 3.4.11.45 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-python and may be impacted: - opengame =0.2.1a0, =1.0.2b0 Source cves: CVE-2019-14493 Source advisory: OSV:PYSEC-2026-2806...

deeplabcutcore (>=0.0.0, <=0.1.0) potentially affected by CVE-2019-15939 via opencv-python-headless (3.4.16.57)

opencv-python-headless PYPI version 3.4.16.57 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-python-headless and may be impacted: - deeplabcutcore =0.0.0, =0.1.0 Source cves: CVE-2019-15939 Source advisory: OSV:PYSEC-2026-2838...

arucophotoembedding (0.0.1), arvideo (0.0.1) +4 more potentially affected by CVE-2019-14493 via opencv-contrib-python (>=4.0.0.21, <=4.1.0.25)

opencv-contrib-python PYPI version =4.0.0.21, =0.0.1, =0.0.2, =0.9.1, =0.0.12, =0.0.13 Source cves: CVE-2019-14493 Source advisory: OSV:PYSEC-2026-2795...

multi-template-matching (>=1.5.1, <=1.5.3) potentially affected by CVE-2019-14491 via opencv-python-headless (4.1.0.25)

opencv-python-headless PYPI version 4.1.0.25 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-python-headless and may be impacted: - multi-template-matching =1.5.1, =1.5.3 Source cves: CVE-2019-14491 Source advisory: OSV:PYSEC-2026-2836...

aime-detector-sdk (>=0.0.4.post1, <=0.1.5.post5), aug (0.1.0) +23 more potentially affected by CVE-2019-14491 via opencv-python (>=4.0.0.21, <=4.1.0.25)

opencv-python PYPI version =4.0.0.21, =0.0.4.post1, =0.1.0, =0.1.3, =1.0.11, =0.0.9, =0.8.0rc1, =0.1.0, =0.9.939.513, =0.0.0, =0.5.0, =0.5.2 and more Source cves: CVE-2019-14491 Source advisory: OSV:PYSEC-2026-2818...

byu-auvsi-imaging-client (>=0.1.1, <=0.1.8), colour-checker-detection (0.1.0) +35 more potentially affected by CVE-2019-14491 via opencv-python (>=3.4.1.15, <=3.4.5.20)

opencv-python PYPI version =3.4.1.15, =0.1.1, =0.3.0, =0.7.0, =1.14.2, =0.9.2, =0.0.1, =2.0.0, =0.1.7, =3.0.1a0, =0.0.1a0, =1.0.0a0 and more Source cves: CVE-2019-14491 Source advisory: OSV:PYSEC-2026-2818...

CVE-2026-45409

A flaw was found in the idna library, which handles Internationalized Domain Names in Python applications. A remote attacker could exploit this vulnerability by sending specially crafted, excessively long inputs to the library's encoding function. This could cause the system to consume significan...

USN-8524-1 python2.7, python3.5 vulnerability

It was discovered that Python did not use sufficient entropy for Expat hash-flooding protection in the xml.parsers.expat and xml.etree.ElementTree modules. An attacker could use this to cause a denial of service via a crafted XML document...

USN-8524-1: Python vulnerability

It was discovered that Python did not use sufficient entropy for Expat hash-flooding protection in the xml.parsers.expat and xml.etree.ElementTree modules. An attacker could use this to cause a denial of service via a crafted XML document...

GHSA-M5X5-28JR-GPJJ pyLoad: SSRF guard bypass via IPv6 6to4/NAT64 transition wrappers of internal IPs

Summary isglobaladdress in src/pyload/core/utils/web/check.py is the central guard against SSRF-style outbound connections in pyload-ng. It tests whether a given IP is "globally routable" via Python's ipaddress.ipaddressvalue.isglobal, and callers treat not isglobal as "deny": python def...

Malicious code in playwrightr (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1e165b925f82629524e611c81597c32a171df7cec246dc73f268d8192ccbe2c5 setup.py registers a CustomInstallCommand that runs automatically on pip install under Windows. It uses WinHTTP via ctypes to fetch a binary from...

CVE-2026-59928

A flaw was found in Mistune, a Python Markdown parser. A remote attacker could exploit this vulnerability by providing a specially crafted Markdown document containing numerous repeated or distinct reference-link definitions. This can lead to excessive processing, causing CPU exhaustion and a...