18541 matches found
CVE-2026-92943
Improper validation of certificate with host mismatch in the MQTT client TLS connection layer in AWS IoT Device SDK for Python 1.5.3 through 1.6.0 on Python 3.7 and later might allow an adversary-in-the-middle actor to impersonate the AWS IoT Core endpoint, read device telemetry, and inject...
CVE-2026-92943 Improper validation of certificate with host mismatch in AWS IoT Device SDK for Python
Improper validation of certificate with host mismatch in the MQTT client TLS connection layer in AWS IoT Device SDK for Python 1.5.3 through 1.6.0 on Python 3.7 and later might allow an adversary-in-the-middle actor to impersonate the AWS IoT Core endpoint, read device telemetry, and inject...
CVE-2026-92943 Improper validation of certificate with host mismatch in AWS IoT Device SDK for Python
Improper validation of certificate with host mismatch in the MQTT client TLS connection layer in AWS IoT Device SDK for Python 1.5.3 through 1.6.0 on Python 3.7 and later might allow an adversary-in-the-middle actor to impersonate the AWS IoT Core endpoint, read device telemetry, and inject...
CVE-2026-92943
AWS IoT Device SDK for Python versions 1.5.3 through 1.6.0 (Python 3.7+) contain an improper certificate validation flaw in the MQTT client TLS connection layer. An adversary-in-the-middle can present a certificate issued for an unrelated hostname by a CA already in the device trust store, thereb...
EUVD-2026-82378
Improper validation of certificate with host mismatch in the MQTT client TLS connection layer in AWS IoT Device SDK for Python 1.5.3 through 1.6.0 on Python 3.7 and later might allow an adversary-in-the-middle actor to impersonate the AWS IoT Core endpoint, read device telemetry, and inject...
CVE-2026-92943 Improper validation of certificate with host mismatch in AWS IoT Device SDK for Python
Improper validation of certificate with host mismatch in the MQTT client TLS connection layer in AWS IoT Device SDK for Python 1.5.3 through 1.6.0 on Python 3.7 and later might allow an adversary-in-the-middle actor to impersonate the AWS IoT Core endpoint, read device telemetry, and inject...
ai.evolv:ascend-sdk (0.5.0), ai.taskmonk:taskmonk-sdk (>=1.7, <=1.16.6) +2862 more potentially affected by CVE-2026-85721 via org.asynchttpclient:async-http-client (>=2.0.0, <=2.16.0)
org.asynchttpclient:async-http-client MAVEN version =2.0.0, =1.7, =4.1.0, =4.2.14, =4.1.0, =4.1.0, =4.1.0, =4.2.14, =3.5.5, =3.5.5, =3.5.5, =3.5.7-jre7.0 and more Source cves: CVE-2026-85721 Source advisory: GHSA-7GRG-JCF7-RPMX...
foxbms-fox-cli (1.12.0), ironoc-pytest-conor-heffron (>=2.3.4, <=2.5.1) +8 more potentially affected by CVE-2026-102938 via virtualenv (>=21.1.0, <=21.7.4)
virtualenv PYPI version =21.1.0, =2.3.4, =0.1.4, =0.1.0, =0.3.1, =0.0.3, =1.5.1, =1.1.0, =1.0.0, =2.0.0, =2.0.1 Source cves: CVE-2026-102938 Source advisory: OSV:PYSEC-2026-4012...
azure-devops-artifacts-helpers (1.0.10), deepof (>=0.1.8, <=0.1.85) +7 more potentially affected by CVE-2026-102938 via virtualenv (20.14.1)
virtualenv PYPI version 20.14.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - azure-devops-artifacts-helpers 1.0.10 - deepof =0.1.8, =0.1.5, =0.30.0, =0.0.3, =1.0.1, =0.0.4, =0.3.0, =0.4.6 Source cves: CVE-2026-10293...
allora-sdk (>=0.1.0, <=0.2.3), coinbase-agentkit (>=0.1.7.dev202503141, <=0.6.0) +2 more potentially affected by CVE-2026-102938 via virtualenv (20.28.1)
virtualenv PYPI version 20.28.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - allora-sdk =0.1.0, =0.1.7.dev202503141, =0.1.1.dev202503260, =0.1.1.dev202503260, =0.3.0 Source cves: CVE-2026-102938 Source advisory:...
sym-sdk (>=0.0.1, <=0.0.22) potentially affected by CVE-2026-102938 via virtualenv (20.4.1)
virtualenv PYPI version 20.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - sym-sdk =0.0.1, =0.0.22 Source cves: CVE-2026-102938 Source advisory: OSV:PYSEC-2026-4012...
pokpok-sdk (>=0.1.3, <=0.1.6) potentially affected by CVE-2026-102938 via virtualenv (20.29.1)
virtualenv PYPI version 20.29.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - pokpok-sdk =0.1.3, =0.1.6 Source cves: CVE-2026-102938 Source advisory: OSV:PYSEC-2026-4012...
rasa (>=3.0.0rc1, <=3.0.8), rasa-sdk (>=3.0.0rc1, <=3.1.0) +7 more potentially affected by CVE-2026-85078 via sanic (21.9.3)
sanic PYPI version 21.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - rasa =3.0.0rc1, =3.0.0rc1, =0.1.3, =1.0.0, =0.6.0, =21.1.5.2, =21.1.5.3 Source cves: CVE-2026-85078 Source advisory: OSV:GHSA-WMJ6-G64G-J7Q5...
banana-cli (0.0.1), banana-server (0.0.1) +31 more potentially affected by CVE-2026-85078 via sanic (21.12.2)
sanic PYPI version 21.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on sanic and may be impacted: - banana-cli 0.0.1 - banana-server 0.0.1 - bf-nlu =1.1.0, =1.1.0, =0.0.3, =0.0.1, =0.0.5, =0.0.1, =0.2.5, =0.1.0, =0.1.2, =0.1.0, =0.0.1, =0.2.0,...
Security Bulletin: Eclipse parsson security vulnerability in IBM Content Cortex reported for BAI-EVENTS-JAVA-SDK
Summary Eclipse parsson CVE-2026-9563 security vulnerability in IBM Content Cortex. Affected and vulnerable. Vulnerability Details CVEID:CVE-2026-9563 DESCRIPTION: In Eclipse Parsson published Maven Central artifacts before version 1.1.8, the JSON parser did not enforce a default maximum on the...
codex-security npm-v0.1.28
Codex Security @openai/codex-security is a CLI and TypeScript SDK for finding, validating, and fixing security vulnerabilities in your code. Features Scan repositories, selected paths, or Git changes. Deep scans run parallel discovery workers on repositories and selected paths. Validate candidate...
CVE-2026-63127
creationtimestamp| type| source ---|---|--- 2026-09-17 00:35:09+00:00| published-proof-of-concept| https://github.com/modelcontextprotocol/rust-sdk/security/advisories/GHSA-33f5-2c5q-wgwj 2026-09-17 03:31:23+00:00| seen| https://gist.github.com/alon710/16597bd55d59e6c89394c487c227381c...
CVE-2026-63128
creationtimestamp| type| source ---|---|--- 2026-09-17 00:35:06+00:00| published-proof-of-concept| https://github.com/modelcontextprotocol/rust-sdk/security/advisories/GHSA-9pj6-vhgr-3mwh 2026-09-17 02:31:48+00:00| seen| https://gist.github.com/alon710/db9fb10afa43797b42605078feda688f...
