gai-common (>=0.1.2, <=0.86.0), gai-lib (0.120.0) +4 more potentially affected by CVE-2026-82398 via pypdf (4.3.0)

pypdf PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - gai-common =0.1.2, =1.1.3, =0.3.1, =5.3.8, =0.6.6, =0.7.0 Source cves: CVE-2026-82398 Source advisory: OSV:GHSA-FC8X-2RWW-XW9M...

genai-4-dps-helper (0.2.31), news-scraper-pdf (1.1.6) +6 more potentially affected by CVE-2026-84310 via pypdf (5.3.0)

pypdf PYPI version 5.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - genai-4-dps-helper 0.2.31 - news-scraper-pdf 1.1.6 - polytext =0.1.0, =0.1.0, =0.1.10 - python-pdf-toolkit 0.1.1 - synforge 0.1.0 - ta-using-llms 0.0....

gai-common (>=0.1.2, <=0.86.0), gai-lib (0.120.0) +4 more potentially affected by CVE-2026-84310 via pypdf (4.3.0)

pypdf PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - gai-common =0.1.2, =1.1.3, =0.3.1, =5.3.8, =0.6.6, =0.7.0 Source cves: CVE-2026-84310 Source advisory: OSV:GHSA-23W6-3W8W-8484...

gai-common (>=0.1.2, <=0.86.0), gai-lib (0.120.0) +4 more potentially affected by CVE-2026-84311 via pypdf (4.3.0)

pypdf PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - gai-common =0.1.2, =1.1.3, =0.3.1, =5.3.8, =0.6.6, =0.7.0 Source cves: CVE-2026-84311 Source advisory: OSV:GHSA-763M-79HH-57F2...

gai-common (>=0.1.2, <=0.86.0), gai-lib (0.120.0) +4 more potentially affected by CVE-2026-84309 via pypdf (4.3.0)

pypdf PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - gai-common =0.1.2, =1.1.3, =0.3.1, =5.3.8, =0.6.6, =0.7.0 Source cves: CVE-2026-84309 Source advisory: OSV:GHSA-JP53-MHQP-8XCG...

baotool (1.0.1), clutch-co-scraper (1.0.0) +11 more potentially affected by CVE-2026-55520 via protego (>=0.1.16, <=0.6.0)

protego PYPI version =0.1.16, =0.1.5, =0.3.0a0, =1.0.0, =0.7.2, =0.1.0, =0.1.0, =0.0.1, =0.1.0 - scrapy-plus 1.0.5 - scrapydartx 1.3.2 - shuirouyan-package-test 0.0.3 Source cves: CVE-2026-55520 Source advisory: GHSA-WJMF-P669-5M5P...

baotool (1.0.1), clutch-co-scraper (1.0.0) +11 more potentially affected by CVE-2026-55520 via protego (>=0.1.16, <=0.6.0)

protego PYPI version =0.1.16, =0.1.5, =0.3.0a0, =1.0.0, =0.7.2, =0.1.0, =0.1.0, =0.0.1, =0.1.0 - scrapy-plus 1.0.5 - scrapydartx 1.3.2 - shuirouyan-package-test 0.0.3 Source cves: CVE-2026-55520 Source advisory: MEND:CVE-2026-55520...

MAL-2026-14527 Malicious code in @fongsidev/scraper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c7391aa8a431e807fe8cf8b22ad7a1073422de03f6c1ce923054ea9f3c3faf4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in @fongsidev/scraper

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in @fongsidev/scraper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9c7391aa8a431e807fe8cf8b22ad7a1073422de03f6c1ce923054ea9f3c3faf4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious Package

Overview @fongsidev/scraper is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in vite-plugin-image-analysis (npm)

Source: amazon-inspector e61313bbeab91eb687fc7969f9dcc1478d4b672e1f02f91e56fa886e5ea7bd04 The package presents itself as a Vite 'image analysis' plugin but contains no image-analysis code. Its transformIndexHtml hook injects an inline into every built HTML page. The injected script reads user...

GO-2023-2382 vulnerabilities

Vulnerabilities for packages: slsa-verifier, metrics-server, go-md2man, scorecard, go-licenses, kind, sops, helm-push, aws-flb-firehose, nsc, sbom-scorecard, sonobuoy, wait-for-port, oras, petname, amass, gobuster, hubble-ui, nri-discovery-kubernetes, nats, k3d,...

gai-common (>=0.1.2, <=0.86.0), gai-lib (0.120.0) +4 more potentially affected by CVE-2026-71870 via pypdf (4.3.0)

pypdf PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - gai-common =0.1.2, =1.1.3, =0.3.1, =5.3.8, =0.6.6, =0.7.0 Source cves: CVE-2026-71870 Source advisory: OSV:PYSEC-2026-3655...

gai-common (>=0.1.2, <=0.86.0), gai-lib (0.120.0) +4 more potentially affected by CVE-2026-71852 via pypdf (4.3.0)

pypdf PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - gai-common =0.1.2, =1.1.3, =0.3.1, =5.3.8, =0.6.6, =0.7.0 Source cves: CVE-2026-71852 Source advisory: OSV:PYSEC-2026-3656...

EUVD-2026-54963

A vulnerability was detected in dmitriiweb article-scraper-mcp 1.0.0. This vulnerability affects the function fetcharticle of the file newsscrapermcp/server.py. The manipulation of the argument url results in server-side request forgery. The attack may be performed from remote. The exploit is now...

CVE-2026-19375

A vulnerability was detected in dmitriiweb article-scraper-mcp 1.0.0. This vulnerability affects the function fetcharticle of the file newsscrapermcp/server.py. The manipulation of the argument url results in server-side request forgery. The attack may be performed from remote. The exploit is now...

CVE-2026-19375: Server-Side Request Forgery (SSRF)

A vulnerability was detected in dmitriiweb article-scraper-mcp 1.0.0. This vulnerability affects the function fetcharticle of the file newsscrapermcp/server.py. The manipulation of the argument url results in server-side request forgery. The attack may be performed from remote. The exploit is now...

CVE-2026-19375 dmitriiweb article-scraper-mcp server.py fetch_article server-side request forgery

A vulnerability was detected in dmitriiweb article-scraper-mcp 1.0.0. This vulnerability affects the function fetcharticle of the file newsscrapermcp/server.py. The manipulation of the argument url results in server-side request forgery. The attack may be performed from remote. The exploit is now...

CVE-2026-19375

A vulnerability was detected in dmitriiweb article-scraper-mcp 1.0.0. This vulnerability affects the function fetcharticle of the file newsscrapermcp/server.py. The manipulation of the argument url results in server-side request forgery. The attack may be performed from remote. The exploit is now...