abracadabra (>=0.0.0, <=0.0.7), ac-solver (0.1.0) +773 more potentially affected by CVE-2026-82397 via tornado (>=6.0.0b1, <=6.5.7)

tornado PYPI version =6.0.0b1, =0.0.0, =0.2.2, =0.7.3, =0.3.0, =0.4.0, =0.2.0, =1.0.0, =0.1.1, =0.2.0, =1.0.0, =1.0.0, =0.1.0, =0.3.1 and more Source cves: CVE-2026-82397 Source advisory: GHSA-MPF4-983Q-P7J4...

CVE-2026-19327 abracadabra50 claude-sesh enricher.ts enrichSession path traversal

A flaw has been found in abracadabra50 claude-sesh 1.0.0. This issue affects the function getEnrichedData/enrichSession of the file src/services/enricher.ts. Executing a manipulation of the argument sessionId can lead to path traversal. The attack needs to be launched locally. This patch is calle...

abracadabra (0.0.7), bikeshed (>=2.4.0, <=3.4.2) +34 more potentially affected by CVE-2026-59205 via pillow (8.1.1)

pillow PYPI version 8.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - abracadabra 0.0.7 - bikeshed =2.4.0, =1.5.6, =0.11.0, =0.20.0, =0.37.0, =0.9.0, =0.3.0, =0.1.0, =2.0.0, =2.1.1 and more Source cves: CVE-2026-59205...

abracadabra (0.0.7), bikeshed (>=2.4.0, <=3.4.2) +34 more potentially affected by CVE-2026-55798 via pillow (8.1.1)

pillow PYPI version 8.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - abracadabra 0.0.7 - bikeshed =2.4.0, =1.5.6, =0.11.0, =0.20.0, =0.37.0, =0.9.0, =0.3.0, =0.1.0, =2.0.0, =2.1.1 and more Source cves: CVE-2026-55798...

abracadabra (0.0.7), bikeshed (>=2.4.0, <=3.4.2) +34 more potentially affected by CVE-2026-54060 via pillow (8.1.1)

pillow PYPI version 8.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - abracadabra 0.0.7 - bikeshed =2.4.0, =1.5.6, =0.11.0, =0.20.0, =0.37.0, =0.9.0, =0.3.0, =0.1.0, =2.0.0, =2.1.1 and more Source cves: CVE-2026-54060...

abracadabra (0.0.6), agilecode-test-tools (>=0.4.0, <=0.5.0) +76 more potentially affected by CVE-2026-59197 via pillow (8.1.0)

pillow PYPI version 8.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - abracadabra 0.0.6 - agilecode-test-tools =0.4.0, =0.1.1, =0.1.0, =0.11.0, =0.1.0, =0.4.0, =0.11.0, =0.11.0, =0.12.0 and more Source cves:...

abracadabra (>=0.0.0, <=0.0.7), ac-solver (0.1.0) +764 more potentially affected by CVE-2026-49855 via tornado (>=6.0.0b1, <=6.5.5)

tornado PYPI version =6.0.0b1, =0.0.0, =0.2.2, =0.7.3, =0.3.0, =0.4.0, =0.2.0, =1.0.0, =0.1.1, =0.2.0, =1.0.0, =1.0.0, =0.1.0, =0.3.1 and more Source cves: CVE-2026-49855 Source advisory: OSV:PYSEC-2026-3389...

aboutcode-toolkit (>=3.0.0, <=5.1.0), abracadabra (>=0.0.6, <=0.0.7) +1720 more potentially affected by CVE-2025-27516 via jinja2 (2.11.3)

jinja2 PYPI version 2.11.3 is affected by a known vulnerability. The following packages have a transitive dependency on jinja2 and may be impacted: - aboutcode-toolkit =3.0.0, =0.0.6, =0.8.44.4rc1, =0.1.0rc3, =1.1.5, =0.1.0, =0.1.0a0, =0.1.0a0, =1.2.0a1, =2.0.0, =0.1.0, =1.1.0, =1.6.9 and more...

abracadabra (0.0.7), bikeshed (>=2.4.0, <=3.4.2) +34 more potentially affected by CVE-2026-55379 via pillow (8.1.1)

pillow PYPI version 8.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - abracadabra 0.0.7 - bikeshed =2.4.0, =1.5.6, =0.11.0, =0.20.0, =0.37.0, =0.9.0, =0.3.0, =0.1.0, =2.0.0, =2.1.1 and more Source cves: CVE-2026-55379...

abracadabra (0.0.7), bikeshed (>=2.4.0, <=3.4.2) +34 more potentially affected by CVE-2026-55380 via pillow (8.1.1)

pillow PYPI version 8.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - abracadabra 0.0.7 - bikeshed =2.4.0, =1.5.6, =0.11.0, =0.20.0, =0.37.0, =0.9.0, =0.3.0, =0.1.0, =2.0.0, =2.1.1 and more Source cves: CVE-2026-55380...

abracadabra (0.0.7), bikeshed (>=2.4.0, <=3.4.2) +34 more potentially affected by CVE-2026-54059 via pillow (8.1.1)

pillow PYPI version 8.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - abracadabra 0.0.7 - bikeshed =2.4.0, =1.5.6, =0.11.0, =0.20.0, =0.37.0, =0.9.0, =0.3.0, =0.1.0, =2.0.0, =2.1.1 and more Source cves: CVE-2026-54059...

abracadabra (0.0.7), bikeshed (>=2.4.0, <=3.4.2) +34 more potentially affected by CVE-2026-54060 via pillow (8.1.1)

pillow PYPI version 8.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - abracadabra 0.0.7 - bikeshed =2.4.0, =1.5.6, =0.11.0, =0.20.0, =0.37.0, =0.9.0, =0.3.0, =0.1.0, =2.0.0, =2.1.1 and more Source cves: CVE-2026-54060...

abracadabra (0.0.7), abstract-python-email-validation (>=0.1.1, <=1.0.0) +151 more potentially affected by CVE-2025-50181 via urllib3 (1.26.4)

urllib3 PYPI version 1.26.4 is affected by a known vulnerability. The following packages have a transitive dependency on urllib3 and may be impacted: - abracadabra 0.0.7 - abstract-python-email-validation =0.1.1, =1.0.0, =0.1.0, =0.1.0, =0.1.0, =1.2.3, =1.0.9, =0.0.2, =0.0.0, =0.1.0, =0.2.0,...

a2grunnerp (>=0.1.0, <=0.1.8), abracadabra (>=0.0.0, <=0.0.7) +967 more potentially affected by CVE-2024-5569 via zipp (>=0.3.3, <=3.19.0)

zipp PYPI version =0.3.3, =0.1.0, =0.0.0, =2.0.0a0, =1.0.0.dev0, =1.5.2, =0.1.0, =1.0.0, =1.0.9, =0.0.1, =1.3.0, =0.0.1, =0.0.2 and more Source cves: CVE-2024-5569 Source advisory: MEND:CVE-2024-5569...

abracadabra (0.0.6), agilecode-test-tools (>=0.4.0, <=0.5.0) +76 more potentially affected by CVE-2023-50447 via pillow (8.1.0)

pillow PYPI version 8.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - abracadabra 0.0.6 - agilecode-test-tools =0.4.0, =0.1.1, =0.1.0, =0.11.0, =0.1.0, =0.4.0, =0.11.0, =0.11.0, =0.12.0 and more Source cves:...

abracadabra (>=0.0.0, <=0.0.7), aegis-tools (>=0.7.3, <=2.3.6) +358 more potentially affected by CVE-2023-54397 via tornado (>=6.0.0b1, <=6.3.2)

tornado PYPI version =6.0.0b1, =0.0.0, =0.7.3, =1.0.0, =1.0.0, =1.3.0, =0.0.9.1, =22.5.13, =0.0.2, =0.1.0, =0.3.5, =0.3.7 - arcade-generator 0.0.3 - arcipelago 0.1.0 - arctic-ai 0.1.0 and more Source cves: CVE-2023-54397 Source advisory: OSV:GHSA-QPPV-J76H-2RPX...

abracadabra-online.com Cross Site Scripting vulnerability OBB-2844704

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

abracadabra-jp.com Cross Site Scripting vulnerability OBB-2844703

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

a2ml (>=0.3.7, <=1.0.22), abcpy (>=0.5.0, <=0.5.2) +1785 more potentially affected by CVE-2021-41496 via numpy (>=1.8.1, <=1.18.5)

numpy PYPI version =1.8.1, =0.3.7, =0.5.0, =1.0.2rc1, =0.0.0, =0.0.1, =1.0.62, =0.1.0, =1.0.0, =0.0.1, =0.1.0, =0.3.20 and more Source cves: CVE-2021-41496 Source advisory: GHSA-F7C7-J99H-C22F...

abracadabra (0.0.7), bikeshed (>=2.4.0, <=3.4.2) +34 more potentially affected by CVE-2022-22815 via pillow (8.1.1)

pillow PYPI version 8.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - abracadabra 0.0.7 - bikeshed =2.4.0, =1.5.6, =0.11.0, =0.20.0, =0.37.0, =0.9.0, =0.3.0, =0.1.0, =2.0.0, =2.1.1 and more Source cves: CVE-2022-22815...