CLEANSTART-2026-GV56027 Security fixes for ghsa-58pv-8j8x-9vj2, ghsa-jm66-cg57-jjv5, ghsa-mrfv-m5wm-5w6w applied in versions: 2.81.0-r0

Multiple security vulnerabilities affect the az package. These issues are resolved in later releases. See references for individual vulnerability details...

GHSA-JM66-CG57-JJV5 vulnerabilities

Vulnerabilities for packages: kserve, az, py3-cassandra-medusa, open-webui, airflow...

GHSA-JM66-CG57-JJV5 vulnerabilities

Vulnerabilities for packages: barman, open-webui, authentik-fips, authentik, py3-cassandra-medusa, airflow, duplicity, az, kserve, request-1276, pgadmin4, awx...

CVE-2025-23727

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in antonzaroutski AZ Content Finder az-content-finder allows Reflected XSS.This issue affects AZ Content Finder: from n/a through = 0.1...

GHSA-MRFV-M5WM-5W6W vulnerabilities

Vulnerabilities for packages: superset, az, datadog-agent...

CVE-2026-21441 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, kubeflow-katib, checkov, airflow, dask-kubernetes, k8s-sidecar, kserve, mlflow, emissary, kubeflow-jupyter-web-app, confluent-docker-utils, jupyter-base-notebook, jwt-tool, py3-cassandra-medusa, datadog-agent, ggshield, open-webui, py3-pipenv, az,...

CVE-2025-69277 vulnerabilities

Vulnerabilities for packages: superset, az, datadog-agent...

CVE-2025-69277 vulnerabilities

Vulnerabilities for packages: superset, airflow, datadog-agent-fips, az, pgadmin4, datadog-agent...

CVE-2026-21441 vulnerabilities

Vulnerabilities for packages: authentik, airflow-core, az, tensorflow-gpu-jupyter, localstack, authentik-fips, kubeflow-katib, py3-pipenv, apache-beam-python-3.11-sdk, ansible-operator, airflow, awx, kubeflow-volumes-web-app, mlflow, open-webui, kubeflow-jupyter-web-app, emissary,...

GHSA-MRFV-M5WM-5W6W vulnerabilities

Vulnerabilities for packages: superset, airflow, datadog-agent-fips, az, pgadmin4, datadog-agent...

GHSA-38JV-5279-WG99 vulnerabilities

Vulnerabilities for packages: authentik, airflow-core, az, tensorflow-gpu-jupyter, localstack, authentik-fips, kubeflow-katib, py3-pipenv, apache-beam-python-3.11-sdk, ansible-operator, airflow, awx, kubeflow-volumes-web-app, mlflow, open-webui, kubeflow-jupyter-web-app, emissary,...

EUVD-2019-4963

Malware in sbrugna...

EUVD-2001-0433

Malware in sbrugna...

EUVD-2005-1203

Malware in sbrugna...

EUVD-2006-2679

Malware in sbrugna...

EUVD-2006-0414

Malware in sbrugna...

EUVD-2025-3374

Malicious code in bioql PyPI...

MAL-2025-10750 Malicious code in @zalastax/nolb-az_ (npm)

The package @zalastax/nolb-az was found to contain malicious code...

Malicious code in @zalastax/nolb-az_ (npm)

The package @zalastax/nolb-az was found to contain malicious code...

Malicious code in az-css (npm)

The package az-css was found to contain malicious code...