174 matches found
python313-Beaker-1.13.0-2.4 on GA media (moderate)
python313-Beaker-1.13.0-2.4 on GA media Announcement ID: openSUSE-SU-2026:11987-1 Rating: moderate Cross-References: CVE-2012-3458 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the...
PT-2026-105696
These are all security issues fixed in the python313-Beaker-1.13.0-2.4 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2026:11987-1 python313-Beaker-1.13.0-2.4 on GA media
These are all security issues fixed in the python313-Beaker-1.13.0-2.4 package on the GA media of openSUSE Tumbleweed...
adhoc-api (>=2.1.0, <=2.6.1), archytas (>=1.3.14, <=1.4.5) +6 more potentially affected by CVE-2026-55443 via langchain-anthropic (0.3.12)
langchain-anthropic PYPI version 0.3.12 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-anthropic and may be impacted: - adhoc-api =2.1.0, =1.3.14, =1.8.0, =0.10.0, =0.4.7, =1.2.0, =1.4.10 Source cves: CVE-2026-55443 Source advisory:...
Ckan remote code execution and private information access via crafted resource ids
Specific vulnerabilities: Arbitrary file write in resourcecreate and packageupdate actions, using the ResourceUploader object. Also reachable via packagecreate, packagerevise, and packagepatch via calls to packageupdate. Remote code execution via unsafe pickle loading, via Beaker's session store...
PYSEC-2026-312 Ckan remote code execution and private information access via crafted resource ids
Specific vulnerabilities: Arbitrary file write in resourcecreate and packageupdate actions, using the ResourceUploader object. Also reachable via packagecreate, packagerevise, and packagepatch via calls to packageupdate. Remote code execution via unsafe pickle loading, via Beaker's session store...
PT-2026-53405
Specific vulnerabilities: Arbitrary file write in resource create and package update actions, using the ResourceUploader object. Also reachable via package create, package revise, and package patch via calls to package update. Remote code execution via unsafe pickle loading, via Beaker's session...
adhoc-api (>=2.1.0, <=2.6.1), archytas (>=1.3.14, <=1.4.5) +6 more potentially affected by CVE-2026-55443 via langchain-anthropic (0.3.12)
langchain-anthropic PYPI version 0.3.12 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-anthropic and may be impacted: - adhoc-api =2.1.0, =1.3.14, =1.8.0, =0.10.0, =0.4.7, =1.2.0, =1.4.10 Source cves: CVE-2026-55443 Source advisory:...
EUVD-2015-3238
Malware in sbrugna...
EUVD-2015-3240
Malware in sbrugna...
EUVD-2015-3241
Malware in sbrugna...
EUVD-2020-4395
Malware in sbrugna...
EUVD-2020-0051
Malware in sbrugna...
EUVD-2012-0002
Malware in sbrugna...
EUVD-2015-3239
Malware in sbrugna...
EUVD-2022-6165
Malicious code in bioql PyPI...
EUVD-2022-6187
Malicious code in bioql PyPI...
CVE-2023-32321
CKAN is an open-source data management system for powering data hubs and data portals. Multiple vulnerabilities have been discovered in Ckan which may lead to remote code execution. An arbitrary file write in resourcecreate and packageupdate actions, using the ResourceUploader object. Also...