abraia (>=0.8.10, <=0.9.2), adamapi (>=2.1.0, <=2.2.0) +128 more potentially affected by CVE-2026-54059 via pillow (8.3.2)

pillow PYPI version 8.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - abraia =0.8.10, =2.1.0, =1.1.3, =1.5.0, =0.0.25, =0.2.2, =0.0.2a2, =1.4.0, =0.2.2, =0.0.1, =0.2.1b20210731, =0.2.1b20210731, =0.3.2b20211206 and mor...

3d-card (0.1.0), aamutils (>=0.0.11, <=0.0.12) +574 more potentially affected by CVE-2026-55380 via pillow (>=12.0.0, <=12.2.0)

pillow PYPI version =12.0.0, =0.0.11, =0.4.0, =1.10.0rc1, =0.0.116, =0.2.0, =0.1.1, =0.13.2, =0.1.0rc1, =0.1.0, =1.1.0, =1.3.0, =0.1.0, =0.2.0, =0.5.0 and more Source cves: CVE-2026-55380 Source advisory: OSV:PYSEC-2026-2256...

adaptgym (>=0.1.0, <=0.1.2), agave-pyclient (>=1.0.0, <=1.1.2) +138 more potentially affected by CVE-2026-55380 via pillow (8.2.0)

pillow PYPI version 8.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - adaptgym =0.1.0, =1.0.0, =1.1.5, =1.2.3, =0.0.21, =1.0.1, =0.0.7, =0.15.0, =0.14.0, =0.3.0, =0.4.0 - arcor2-dobot 0.2.3 - arcor2-execution 0.16.0 -...

3deecelltracker (>=0.5.1a0, <=0.5.2a0), adversarial-attacks-white-black-box (0.1.7) +200 more potentially affected by CVE-2026-55380 via pillow (9.3.0)

pillow PYPI version 9.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - 3deecelltracker =0.5.1a0, =1.5.0rc1, =0.0.3, =22.11.2, =2.6.17, =0.1.0a0, =0.1.0, =0.0.1a1, =0.3.1rc5, =0.8.0, =22.43.1, =22.52.1 and more Source...

agave (0.2.3.dev0), ai-shell-agent (>=0.2.0, <=0.2.2) +30 more potentially affected by CVE-2026-8643 via pip (25.0.1)

pip PYPI version 25.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - agave 0.2.3.dev0 - ai-shell-agent =0.2.0, =0.74.3, =0.1.1, =1.31.4, =0.1.2, =0.0.1, =0.0.1, =4.4.3, =0.1.0, =0.1.1 -...

agave (>=0.1.1, <=0.1.7), bankruptcy (>=0.0.2, <=0.0.5) +10 more potentially affected by CVE-2026-8643 via pip (21.0.1)

pip PYPI version 21.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - agave =0.1.1, =0.0.2, =0.2.0, =1.22.1, =0.0.60, =1.0.2, =2.0.3, =0.6.3, =0.0.7, =0.0.39, =0.5.0, =0.5.1 Source cves: CVE-2026-8643 Source advisory:...

aamutils (>=0.0.1, <=0.0.10), aau-gomapedge-etl (>=0.3.2, <=0.4.1) +326 more potentially affected by CVE-2026-42308 via pillow (10.3.0)

pillow PYPI version 10.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - aamutils =0.0.1, =0.3.2, =0.1.0, =1.7.0, =0.9.5, =0.1.0, =0.1.10, =24.5.0, =1.0.5, =0.1.0, =0.1.1 - arcplot 1.0.0 and more Source cves:...

adaptgym (>=0.1.0, <=0.1.2), agave-pyclient (>=1.0.0, <=1.1.2) +138 more potentially affected by CVE-2026-42308 via pillow (8.2.0)

pillow PYPI version 8.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - adaptgym =0.1.0, =1.0.0, =1.1.5, =1.2.3, =0.0.21, =1.0.1, =0.0.7, =0.15.0, =0.14.0, =0.3.0, =0.4.0 - arcor2-dobot 0.2.3 - arcor2-execution 0.16.0 -...

agave (>=0.1.1, <=0.1.7), bankruptcy (>=0.0.2, <=0.0.5) +10 more potentially affected by CVE-2026-6357 via pip (21.0.1)

pip PYPI version 21.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - agave =0.1.1, =0.0.2, =0.2.0, =1.22.1, =0.0.60, =1.0.2, =2.0.3, =0.6.3, =0.0.7, =0.0.39, =0.5.0, =0.5.1 Source cves: CVE-2026-6357 Source advisory:...

aftool (>=0.1.2, <=0.2.8), agave (>=0.0.3, <=0.1.3.dev2) +23 more potentially affected by CVE-2026-3219 via pip (20.3.4)

pip PYPI version 20.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - aftool =0.1.2, =0.0.3, =0.1.0.dev1, =1.21.5, =0.4.0, =1.0.2, =0.1.59, =0.4.3, =0.2.1, =2.6.0b1, =2020.0.1, =0.1.0, =2.4.6.20013014, =2.4.0.19073113,...

CVE-2019-11641

Anomali Agave formerly Drupot through 1.0.0 fails to avoid fingerprinting by including predictable data and minimal variation in size within HTML templates, giving attackers the ability to detect and avoid this system...

EUVD-2019-3311

Malware in sbrugna...

Malicious code in @malware-test-burls-bases-agave-caxon/test-mlw3-burls-bases-agave-caxon (npm)

The package @malware-test-burls-bases-agave-caxon/test-mlw3-burls-bases-agave-caxon was found to contain malicious code...

Malicious code in test-mlw2-agave-slurs (npm)

The package test-mlw2-agave-slurs was found to contain malicious code...

Malicious code in test-mlw2-mucic-tatou-agave-gemmy (npm)

The package test-mlw2-mucic-tatou-agave-gemmy was found to contain malicious code...

MAL-2025-35819 Malicious code in test-mlw2-mucic-tatou-agave-gemmy (npm)

The package test-mlw2-mucic-tatou-agave-gemmy was found to contain malicious code...

MAL-2025-8529 Malicious code in @malware-test-burls-bases-agave-caxon/test-mlw3-burls-bases-agave-caxon (npm)

The package @malware-test-burls-bases-agave-caxon/test-mlw3-burls-bases-agave-caxon was found to contain malicious code...

MAL-2025-34844 Malicious code in test-mlw2-agave-slurs (npm)

The package test-mlw2-agave-slurs was found to contain malicious code...

Malicious code in agave_client (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

adaptgym (>=0.1.0, <=0.1.2), agave-pyclient (>=1.0.0, <=1.1.2) +138 more potentially affected by CVE-2023-44271 via pillow (8.2.0)

pillow PYPI version 8.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - adaptgym =0.1.0, =1.0.0, =1.1.5, =1.2.3, =0.0.21, =1.0.1, =0.0.7, =0.15.0, =0.14.0, =0.3.0, =0.4.0 - arcor2-dobot 0.2.3 - arcor2-execution 0.16.0 -...