16138 matches found
cupyopt (0.14.11.1), fantasy-analysis (>=0.0.0, <=0.0.3) potentially affected by CVE-2024-8183 via prefect (0.14.11)
prefect PYPI version 0.14.11 is affected by a known vulnerability. The following packages have a transitive dependency on prefect and may be impacted: - cupyopt 0.14.11.1 - fantasy-analysis =0.0.0, =0.0.3 Source cves: CVE-2024-8183 Source advisory: OSV:PYSEC-2026-1800...
aspect-based-sentiment-analysis (2.0.2), docly (>=0.0.4, <=0.2.1) +2 more potentially affected by CVE-2024-12720 via transformers (2.5.0)
transformers PYPI version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aspect-based-sentiment-analysis 2.0.2 - docly =0.0.4, =0.0.7b0, =0.1.9, =0.1.18 Source cves: CVE-2024-12720 Source advisory:...
allennlp (>=0.9.1.dev20200415, <=1.0.0rc4.dev20200511), allennlp-models (>=1.0.0rc2, <=1.0.0rc3) +6 more potentially affected by CVE-2024-12720 via transformers (2.8.0)
transformers PYPI version 2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - allennlp =0.9.1.dev20200415, =1.0.0rc2, =0.1.9, =0.0.2, =0.1.0, =0.3.2 Source cves: CVE-2024-12720 Source advisory: OSV:PYSEC-2026-1982...
MobSF Stored Cross-Site Scripting (XSS)
Product: MobSFVersion: 4.3.1CWE-ID: CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting'CVSS vector v.4.0: 8.5 AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:N/SC:N/SI:N/SA:NCVSS vector v.3.1: 8.1 AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:NDescription: Stored XSS in the iOS...
PYSEC-2026-1673 MobSF Stored Cross-Site Scripting (XSS)
Product: MobSF Version: CFBundleIdentifier value. In the dynamicanalysis.html file you do not sanitize...
accomate (>=1.0.4, <=2.0.0.6), aind-analysis-arch-result-access (>=0.3.0, <=1.2.0) +266 more potentially affected by CVE-2024-5629 via pymongo (>=4.0.0, <=4.6.2)
pymongo PYPI version =4.0.0, =1.0.4, =0.3.0, =0.2.0, =0.1.0, =0.0.27, =0.3.1, =0.1.19, =1.9.0, =0.0.1a0, =0.0.2, =0.4.0, =0.1.0, =0.3.1 and more Source cves: CVE-2024-5629 Source advisory: OSV:PYSEC-2026-1826...
aspect-based-sentiment-analysis (2.0.2), docly (>=0.0.4, <=0.2.1) +2 more potentially affected by CVE-2024-3568 via transformers (2.5.0)
transformers PYPI version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - aspect-based-sentiment-analysis 2.0.2 - docly =0.0.4, =0.0.7b0, =0.1.9, =0.1.18 Source cves: CVE-2024-3568 Source advisory:...
pymatgen-analysis-defects (>=2022.7.19, <=2022.8.15) potentially affected by CVE-2022-42964 via pymatgen (2022.7.19)
pymatgen PYPI version 2022.7.19 is affected by a known vulnerability. The following packages have a transitive dependency on pymatgen and may be impacted: - pymatgen-analysis-defects =2022.7.19, =2022.8.15 Source cves: CVE-2022-42964 Source advisory: OSV:PYSEC-2026-909...
pymatgen-analysis-defects (2023.5.4) potentially affected by CVE-2022-42964 via pymatgen (2023.1.9)
pymatgen PYPI version 2023.1.9 is affected by a known vulnerability. The following packages have a transitive dependency on pymatgen and may be impacted: - pymatgen-analysis-defects 2023.5.4 Source cves: CVE-2022-42964 Source advisory: OSV:PYSEC-2026-909...
MAL-2026-10656 Malicious code in @pimy-b2cweb/frontend-lib (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 52b7395e417c7c853087ef974cc074fc88ea814575ea3ff10ad627f90eb236ed The OpenSSF Package Analysis project identified '@pimy-b2cweb/frontend-lib' @ 99.99.99 npm as malicious. It is considered malicious because: - T...
Malicious code in zluri-ad-connector (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b7a807f066f0255f7480ebd7d445043282260b464b0ef54a32a2d022c93bbf7 The package declares a preinstall hook node index.js that runs automatically on npm install. index.js requires os, dns, https, querystring, and the...
MAL-2026-6910 Malicious code in zluri-ad-connector (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1b7a807f066f0255f7480ebd7d445043282260b464b0ef54a32a2d022c93bbf7 The package declares a preinstall hook node index.js that runs automatically on npm install. index.js requires os, dns, https, querystring, and the...
Inspectra
Inspectra 🛡️ Web Security Configuration Auditor Inspe...
When Agents Go Rogue: Activation-Based Detection of Malicious Behaviors in Multi-Agent Systems
While enabling effective collaboration on complex tasks, LLM-based Multi-Agent Systems MAS face critical security challenges due to vulnerabilities at the agent and interaction levels. Most existing MAS security defenses are built upon two core assumptions: semantically-explicit malicious attacks...
XDECAF: An Extensible Data Flow Diagram Analysis Framework for Information Security
xDECAF is an extensible tool for architecture-based data flow analysis with a focus on information security. It combines an extended data flow diagram metamodel of labeled flows and nodes, a domain-specific constraint language with different flow operations, and a browser-based editor backed by a...
PackageKit Advanced Vulnerability Assessment with D-Bus and Polkit Security Analysis
This Python tool is an advanced security assessment framework designed to evaluate potential exposure to a PackageKit-related vulnerability scenario by combining version analysis, policy inspection, and D-Bus interaction testing...
Beyond Refusal: A Same-Lineage Study of Aligned and Abliterated LLMs for Vulnerability Analysis
Large language model LLM-assisted software security operates at a difficult boundary: the vulnerability-analysis terminology needed for legitimate code review, triage, and repair can closely resemble terminology associated with misuse. Existing safety and cybersecurity evaluations are difficult t...
Zeek 8.0.9
Zeek is a powerful network analysis framework that is much different from the typical IDS you may know. While focusing on network security monitoring, Zeek provides a comprehensive platform for more general network traffic analysis as well. Well grounded in more than 15 years of research, Zeek ha...
QUBO Modeling of Module Learning with Errors: Stability and Scaling in Post-Quantum Cryptography
Lattice-based post-quantum cryptography relies on the hardness of the Learning With Errors LWE and Module Learning With Errors MLWE problems. This work introduces a constructive framework for encoding small MLWE instances as Quadratic Unconstrained Binary Optimization QUBO models suitable for...