racketeer

Racketeer Project - Ransomware simulation toolkit The goal of this project is to provide a way for teams to simulate and test detection of common ransomware operation, in a controlled manner, against a set of company assets and network endpoints. Deployment model The Racketeer toolkit operates on...

AgentScope vulnerable to Server-Side Request Forgery

A weakness has been identified in modelscope agentscope up to 1.0.18. This vulnerability affects the function processaudioblock of the file src/agentscope/agent/agentbase.py. Executing a manipulation of the argument url can lead to server-side request forgery. It is possible to launch the attack...

gen-ui-kit (0.1.1), jpl-rosa (1.0.7) +2 more potentially affected by CVE-2026-55443 via langchain (0.3.2)

langchain PYPI version 0.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - gen-ui-kit 0.1.1 - jpl-rosa 1.0.7 - myscalekb-agent-base =0.0.1, =0.1.6 - originhub-myscalekb-agent-base 0.1.8 Source cves: CVE-2026-55443...

gen-ui-kit (0.1.1), jpl-rosa (1.0.7) +2 more potentially affected by CVE-2026-55443 via langchain (0.3.2)

langchain PYPI version 0.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - gen-ui-kit 0.1.1 - jpl-rosa 1.0.7 - myscalekb-agent-base =0.0.1, =0.1.6 - originhub-myscalekb-agent-base 0.1.8 Source cves: CVE-2026-55443...

AgentScope vulnerable to Server-Side Request Forgery

A weakness has been identified in modelscope agentscope up to 1.0.18. This vulnerability affects the function processaudioblock of the file src/agentscope/agent/agentbase.py. Executing a manipulation of the argument url can lead to server-side request forgery. It is possible to launch the attack...

CVE-2026-6606 modelscope agentscope _agent_base.py _process_audio_block server-side request forgery

A weakness has been identified in modelscope agentscope up to 1.0.18. This vulnerability affects the function processaudioblock of the file src/agentscope/agent/agentbase.py. Executing a manipulation of the argument url can lead to server-side request forgery. It is possible to launch the attack...

agentiacap (>=0.1.31, <=0.1.37), laclongagent (0.1.2) +5 more potentially affected by CVE-2026-41488 via langchain-openai (0.3.7)

langchain-openai PYPI version 0.3.7 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-openai and may be impacted: - agentiacap =0.1.31, =0.1.0, =1.0.0, =0.1.9, =0.0.18, =0.0.1, =0.0.9b0 Source cves: CVE-2026-41488 Source advisory:...

EUVD-2026-17959

pandas-ai v3.0.0 was discovered to contain a SQL injection vulnerability via the pandasai.agent.base.executesqlquery component...

PT-2026-29566

pandas-ai v3.0.0 was discovered to contain a SQL injection vulnerability via the pandasai.agent.base. execute sql query component...

myscalekb-agent-base (>=0.0.1, <=0.1.6), originhub-myscalekb-agent-base (>=0.1.8, <=0.2.0) potentially affected by CVE-2026-28277 via langgraph (0.2.35)

langgraph PYPI version 0.2.35 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - myscalekb-agent-base =0.0.1, =0.1.8, =0.2.0 Source cves: CVE-2026-28277 Source advisory: OSV:GHSA-G48C-2WQR-H844...

myscalekb-agent-base (>=0.0.1, <=0.1.6), originhub-myscalekb-agent-base (>=0.1.8, <=0.2.0) potentially affected by CVE-2026-28277 via langgraph (0.2.35)

langgraph PYPI version 0.2.35 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph and may be impacted: - myscalekb-agent-base =0.0.1, =0.1.8, =0.2.0 Source cves: CVE-2026-28277 Source advisory: OSV:PYSEC-2026-83...