an-website (>=22.5.13, <=22.5.18), dsp-tools (1.15.0) +5 more potentially affected by CVE-2026-59890 via setuptools (62.2.0)

setuptools PYPI version 62.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - an-website =22.5.13, =0.0.7, =0.3.8, =0.0.1, =0.0.16 Source cves: CVE-2026-59890 Source advisory: OSV:PYSEC-2026-3447...

AI Coding Agents Found Triggering Endpoint Security Rules Built to Catch Attackers

Sophos looked at a week of its own endpoint data and found that AI coding agents such as Claude Code, Cursor, and OpenAI Codex are setting off detection rules written to catch human intruders. The agents are not malicious. They just do a lot of things that, to a behavioral engine, look exactly li...

Malicious code in visa-cli-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0e8f566e285de1eec2c3cae07b0faaa8828080a4e1fed7e76e1fe43dfa571ec Package presents as an internal-looking corporate tooling name 'visa-cli-tools' published at an inflated version 99.9.1 — the canonical...

MAL-2026-7005 Malicious code in visa-cli-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a0e8f566e285de1eec2c3cae07b0faaa8828080a4e1fed7e76e1fe43dfa571ec Package presents as an internal-looking corporate tooling name 'visa-cli-tools' published at an inflated version 99.9.1 — the canonical...

Operationalizing Day Minus Seven: The Cloud-Native ROC

Summary Frontier AI models in the post-Mythos era are changing the speed and scale of exposure risk. Security teams are entering an era where AI can help discover, chain, and exploit weaknesses faster than traditional programs can absorb. The challenge is no longer finding more issues; it’s knowi...

[SECURITY] Fedora 43 Update: tor-0.4.9.11-1.fc43

The Tor network is a group of volunteer-operated servers that allows people to improve their privacy and security on the Internet. Tor's users employ this network by connecting through a series of virtual tunnels rather than making a direct connection, thus allowing both organizations and...

angr 9.2.223

angr is an open-source binary analysis platform for Python. It combines both static and dynamic symbolic "concolic" analysis, providing tools to solve a variety of tasks...

ha-mcp: Add-on settings and policy routes are reachable without authentication at the bare root path

Summary In add-on mode, the ha-mcp settings UI routes are mounted both under the MCP secret path and at the bare root of the published port :9583, so Home Assistant ingress can serve the "Open Web UI" button. The root-mounted routes perform no authentication — no secret, no Origin check, no CSRF...

Why Unity Remains the Most Popular Engine for Mobile Games

Learn why Unity is still a trusted engine for mobile games, from faster prototyping and Android and iOS support to tools that help studios scale after releases...

python-dev-tools (>=2019.7.25, <=2019.8.8) potentially affected by CVE-2026-1703 via pip (19.2.1)

pip PYPI version 19.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - python-dev-tools =2019.7.25, =2019.8.8 Source cves: CVE-2026-1703 Source advisory: OSV:PYSEC-2026-1796...

python-dev-tools (>=2019.4.24, <=2019.5.3) potentially affected by CVE-2026-1703 via pip (19.1.0)

pip PYPI version 19.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - python-dev-tools =2019.4.24, =2019.5.3 Source cves: CVE-2026-1703 Source advisory: OSV:PYSEC-2026-1796...

criscostack (1.0.0), neumai (>=0.0.9, <=0.0.36) +2 more potentially affected by CVE-2026-24688 via pypdf (3.9.1)

pypdf PYPI version 3.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - criscostack 1.0.0 - neumai =0.0.9, =0.0.17, =2023.6.0, =2024.4.0 Source cves: CVE-2026-24688 Source advisory: OSV:PYSEC-2026-1827...

python-dev-tools (>=2019.8.16, <=2019.8.19), styletransfer (>=0.8.0, <=0.8.2) potentially affected by CVE-2025-71176 via pytest (5.1.0)

pytest PYPI version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - python-dev-tools =2019.8.16, =0.8.0, =0.8.2 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...

alfrodull (0.1.0), bcdc-apitests (>=0.2.0, <=1.0.4) +4 more potentially affected by CVE-2025-71176 via pytest (4.6.2)

pytest PYPI version 4.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - alfrodull 0.1.0 - bcdc-apitests =0.2.0, =0.2.6, =2019.6.4, =1.0.1, =1.0.7 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...

dostoevsky (>=0.2.0, <=0.2.1), pytest-gherkin (>=0.1.4, <=0.1.6) +1 more potentially affected by CVE-2025-71176 via pytest (5.0.0)

pytest PYPI version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - dostoevsky =0.2.0, =0.1.4, =2019.6.29, =2019.7.2 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...

ftw (>=1.2.3, <=1.2.4), python-dev-tools (2019.6.2) potentially affected by CVE-2025-71176 via pytest (4.6.0)

pytest PYPI version 4.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - ftw =1.2.3, =1.2.4 - python-dev-tools 2019.6.2 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...

bolinette (>=0.0.12, <=0.0.19), mlbackend (0.0.3) +6 more potentially affected by CVE-2025-71176 via pytest (5.3.1)

pytest PYPI version 5.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - bolinette =0.0.12, =0.0.2, =1.0.0, =2019.11.27, =0.0.12, =2019.12.13.0, =1.2.1, =1.2.4 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1...

folio-migration-tools (>=1.0.2, <=1.1.4), json2xml (>=3.10.0rc1, <=3.10.0) potentially affected by CVE-2025-71176 via pytest (7.0.0rc1)

pytest PYPI version 7.0.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - folio-migration-tools =1.0.2, =3.10.0rc1, =3.10.0 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...

mask-anonymization-framework (>=1.2.0, <=1.3.2), python-dev-tools (2019.8.24) +2 more potentially affected by CVE-2025-71176 via pytest (5.1.1)

pytest PYPI version 5.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - mask-anonymization-framework =1.2.0, =0.0.1, =0.0.1, =0.0.4 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...

c2cwsgiutils (0.28.0), chispa (0.2.0) +2 more potentially affected by CVE-2025-71176 via pytest (3.2.2)

pytest PYPI version 3.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - c2cwsgiutils 0.28.0 - chispa 0.2.0 - nxviz =0.3.2, =0.1.0, =0.2.0 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...