49639 matches found
alexafaraday
https://www.faradaysec.com https://github.com/infobyte/faraday Amazon Alexa Faraday Skill Using Flask-ASK and VMware REST API's This is the GitHub Repository for Amazon Echo, Python Flask/Flask-ASK, and Faraday API's blogpost and subsequent updates. We leverage Flask-Ask to interact with the Amaz...
Malicious Package
Overview alexa-cybertron-team-code-review-agent is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization...
django-alexa (0.0.9), katka-core (>=0.5.0, <=0.8.0) +2 more potentially affected by CVE-2026-15307 via django (2.1.5)
django PYPI version 2.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-alexa 0.0.9 - katka-core =0.5.0, =1.0.0rc9, =1.0.0 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...
MAL-2026-17430 Malicious code in alexa-cybertron-team-code-review-agent (npm)
alexa-cybertron-team-code-review-agent is a dependency-confusion package: it takes a name that looks like an internal project, uses an inflated version 100.0.0 so it outranks private-registry versions, and runs node setup.js || true as a preinstall script on npm install. setup.js sends the...
Malicious code in alexa-cybertron-team-code-review-agent (npm)
alexa-cybertron-team-code-review-agent is a dependency-confusion package: it takes a name that looks like an internal project, uses an inflated version 100.0.0 so it outranks private-registry versions, and runs node setup.js || true as a preinstall script on npm install. setup.js sends the...
@adobe/aem-site-template-builder (>=0.1.7, <=2.0.2), @ns3/nx-serverless (>=3.2.2, <=4.1.0) +8 more potentially affected by CVE-2026-80427 via bestzip (>=1.1.3, <=2.2.1)
bestzip NPM version =1.1.3, =0.1.7, =3.2.2, =0.3.0, =0.2.0, =1.0.0, =1.0.0, =1.0.7-6, =1.0.2-1, =0.0.1, =1.0.0, =1.0.2 Source cves: CVE-2026-80427 Source advisory: MEND:CVE-2026-80427...
django-alexa (0.0.9), katka-core (>=0.5.0, <=0.8.0) +2 more potentially affected by CVE-2026-15307 via django (2.1.5)
django PYPI version 2.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-alexa 0.0.9 - katka-core =0.5.0, =1.0.0rc9, =1.0.0 Source cves: CVE-2026-15307 Source advisory: OSV:GHSA-WVQV-FJ8W-QMHM...
django-alexa (0.0.9), katka-core (>=0.5.0, <=0.8.0) +2 more potentially affected by CVE-2026-15830 via django (2.1.5)
django PYPI version 2.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-alexa 0.0.9 - katka-core =0.5.0, =1.0.0rc9, =1.0.0 Source cves: CVE-2026-15830 Source advisory: OSV:GHSA-Q238-5CXM-5C9H...
django-alexa (0.0.9), katka-core (>=0.5.0, <=0.8.0) +2 more potentially affected by CVE-2026-15830 via django (2.1.5)
django PYPI version 2.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-alexa 0.0.9 - katka-core =0.5.0, =1.0.0rc9, =1.0.0 Source cves: CVE-2026-15830 Source advisory: OSV:PYSEC-2026-3717...
django-alexa (0.0.9), katka-core (>=0.5.0, <=0.8.0) +2 more potentially affected by CVE-2026-48588 via django (2.1.5)
django PYPI version 2.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-alexa 0.0.9 - katka-core =0.5.0, =1.0.0rc9, =1.0.0 Source cves: CVE-2026-48588 Source advisory: OSV:GHSA-3H9F-R86X-QVJX...
django-alexa (0.0.9), katka-core (>=0.5.0, <=0.8.0) +2 more potentially affected by CVE-2026-53877 via django (2.1.5)
django PYPI version 2.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-alexa 0.0.9 - katka-core =0.5.0, =1.0.0rc9, =1.0.0 Source cves: CVE-2026-53877 Source advisory: OSV:GHSA-CRHF-3PFG-W68W...
django-alexa (0.0.9), katka-core (>=0.5.0, <=0.8.0) +2 more potentially affected by CVE-2024-45231 via django (2.1.5)
django PYPI version 2.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-alexa 0.0.9 - katka-core =0.5.0, =1.0.0rc9, =1.0.0 Source cves: CVE-2024-45231 Source advisory: OSV:PYSEC-2026-1297...
django-alexa (0.0.9), katka-core (>=0.5.0, <=0.8.0) +2 more potentially affected by CVE-2026-8404 via django (2.1.5)
django PYPI version 2.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-alexa 0.0.9 - katka-core =0.5.0, =1.0.0rc9, =1.0.0 Source cves: CVE-2026-8404 Source advisory: OSV:GHSA-8CJM-8MP7-R2XF...
alexa-browser-client (3.3.0), channels (>=1.1.2, <=2.1.7) +7 more potentially affected by CVE-2026-44545 via daphne (2.2.5)
daphne PYPI version 2.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on daphne and may be impacted: - alexa-browser-client 3.3.0 - channels =1.1.2, =0.2.0, =2.0.1, =0.1.1, =0.1.2, =4.0.0a1, =0.9.0a1, =16.0.0a4, =16.0.0a5 Source cves: CVE-2026-44545...
alexa-browser-client (>=1.2.0, <=2.1.0), channels (>=1.1.5, <=1.1.8) +21 more potentially affected by CVE-2026-44545 via daphne (1.4.2)
daphne PYPI version 1.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on daphne and may be impacted: - alexa-browser-client =1.2.0, =1.1.5, =0.1.0a0, =0.2.0, =0.0.1, =2.2.0, =0.3.0, =0.3.1 - otree-redwood 0.1.1 - pytest-rotest 0.1.0 and more Source...
alexa-browser-client (3.3.0), channels (>=1.1.2, <=2.1.7) +7 more potentially affected by CVE-2026-44546 via daphne (2.2.5)
daphne PYPI version 2.2.5 is affected by a known vulnerability. The following packages have a transitive dependency on daphne and may be impacted: - alexa-browser-client 3.3.0 - channels =1.1.2, =0.2.0, =2.0.1, =0.1.1, =0.1.2, =4.0.0a1, =0.9.0a1, =16.0.0a4, =16.0.0a5 Source cves: CVE-2026-44546...
io.micronaut.aws:micronaut-function-aws-alexa (>=1.1.0.m2, <=1.1.2), io.micronaut.aws:micronaut-function-aws-api-proxy (>=1.1.0.m2, <=1.1.2) +78 more potentially affected by CVE-2026-44242 via io.micronaut:micronaut-inject (1.0.4)
io.micronaut:micronaut-inject MAVEN version 1.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-inject and may be impacted: - io.micronaut.aws:micronaut-function-aws-alexa =1.1.0.m2, =1.1.0.m2, =1.1.0.m2, =1.0.4, =1.0.0.rc3,...
io.micronaut.aws:micronaut-aws-alexa (>=2.0.0.m1, <=2.0.0.m3), io.micronaut.aws:micronaut-aws-alexa-httpserver (>=2.0.0.m1, <=2.0.0.m3) +45 more potentially affected by CVE-2026-44242 via io.micronaut:micronaut-inject (2.0.0.m2)
io.micronaut:micronaut-inject MAVEN version 2.0.0.m2 is affected by a known vulnerability. The following packages have a transitive dependency on io.micronaut:micronaut-inject and may be impacted: - io.micronaut.aws:micronaut-aws-alexa =2.0.0.m1, =2.0.0.m1, =2.0.0.m1, =2.0.0.m1, =2.0.0.m1,...
tarteaucitron.js has Regular Expression Denial of Service (ReDoS) vulnerability
Summary A potential Regular Expression Denial of Service ReDoS vulnerability was identified in tarteaucitron.js in the handling of the issuuid parameter. Details The issue was caused by the use of insufficiently constrained regular expressions applied to attacker-controlled input: if...
GHSA-Q5F6-QXM2-MCQM tarteaucitron.js has Regular Expression Denial of Service (ReDoS) vulnerability
Summary A potential Regular Expression Denial of Service ReDoS vulnerability was identified in tarteaucitron.js in the handling of the issuuid parameter. Details The issue was caused by the use of insufficiently constrained regular expressions applied to attacker-controlled input: if...