29 matches found
adins-prd-mcp (>=0.5.0, <=0.5.7), iflow-mcp-pickleton89-cbioportal-mcp (0.1.0) +2 more potentially affected by CVE-2026-27124 via fastmcp (2.3.3)
fastmcp PYPI version 2.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - adins-prd-mcp =0.5.0, =0.1.2, =0.1.6 - mseep-memory-plus 0.1.5 Source cves: CVE-2026-27124 Source advisory: OSV:PYSEC-2026-2476...
com.eurodyn.qlack.fuse:qlack-fuse-aaa (3.9.8), com.trigyn:java-web-starter (>=2.2, <=2.13) +5 more potentially affected by CVE-2026-40988 via org.springframework.security:spring-security-saml2-service-provider (>=6.4.2, <=6.4.11)
org.springframework.security:spring-security-saml2-service-provider MAVEN version =6.4.2, =2.2, =11.10.0, =dce37d6e6c310e0d86c4f0d73f8846b8ef2f4432, =9.0-rc1, =1.15.0, =1.15.0, =2.4.0 Source cves: CVE-2026-40988 Source advisory: GHSA-M69X-PW9P-7J3Q...
adins-prd-mcp (>=0.5.0, <=0.5.7), iflow-mcp-pickleton89-cbioportal-mcp (0.1.0) +2 more potentially affected by CVE-2026-32871 via fastmcp (2.3.3)
fastmcp PYPI version 2.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - adins-prd-mcp =0.5.0, =0.1.2, =0.1.6 - mseep-memory-plus 0.1.5 Source cves: CVE-2026-32871 Source advisory: OSV:GHSA-VV7Q-7JX5-F767...
adins-prd-mcp (>=0.5.0, <=0.5.7), iflow-mcp-pickleton89-cbioportal-mcp (0.1.0) +2 more potentially affected by CVE-2026-27124 via fastmcp (2.3.3)
fastmcp PYPI version 2.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - adins-prd-mcp =0.5.0, =0.1.2, =0.1.6 - mseep-memory-plus 0.1.5 Source cves: CVE-2026-27124 Source advisory: OSV:GHSA-RWW4-4W9C-7733...
adins-prd-mcp (>=0.5.0, <=0.5.7), iflow-mcp-pickleton89-cbioportal-mcp (0.1.0) +2 more potentially affected by CVE-2025-64340 via fastmcp (2.3.3)
fastmcp PYPI version 2.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - adins-prd-mcp =0.5.0, =0.1.2, =0.1.6 - mseep-memory-plus 0.1.5 Source cves: CVE-2025-64340 Source advisory: OSV:GHSA-M8X7-R2RG-VH5G...
CVE-2024-41668
The cBioPortal for Cancer Genomics provides visualization, analysis, and download of large-scale cancer genomics data sets. When running a publicly exposed proxy endpoint without authentication, cBioPortal could allow someone to perform a Server Side Request Forgery SSRF attack. Logged in users...
EUVD-2021-24702
Malware in sbrugna...
EUVD-2024-39122
Malicious code in bioql PyPI...
CVE-2021-38244
A regular expression denial of service ReDoS vulnerability exits in cbioportal 3.6.21 and older via a POST request to /ProteinArraySignificanceTest.json...
CVE-2024-41668
The cBioPortal for Cancer Genomics provides visualization, analysis, and download of large-scale cancer genomics data sets. When running a publicly exposed proxy endpoint without authentication, cBioPortal could allow someone to perform a Server Side Request Forgery SSRF attack. Logged in users...
CVE-2024-41668 cBioPortal Proxy Endpoint Vulnerabliity
The cBioPortal for Cancer Genomics provides visualization, analysis, and download of large-scale cancer genomics data sets. When running a publicly exposed proxy endpoint without authentication, cBioPortal could allow someone to perform a Server Side Request Forgery SSRF attack. Logged in users...
CVE-2024-41668 cBioPortal Proxy Endpoint Vulnerabliity
The cBioPortal for Cancer Genomics provides visualization, analysis, and download of large-scale cancer genomics data sets. When running a publicly exposed proxy endpoint without authentication, cBioPortal could allow someone to perform a Server Side Request Forgery SSRF attack. Logged in users...
CVE-2024-41668
The cBioPortal for Cancer Genomics provides visualization, analysis, and download of large-scale cancer genomics data sets. When running a publicly exposed proxy endpoint without authentication, cBioPortal could allow someone to perform a Server Side Request Forgery SSRF attack. Logged in users...
CVE-2024-41668 cBioPortal Proxy Endpoint Vulnerabliity
The cBioPortal for Cancer Genomics provides visualization, analysis, and download of large-scale cancer genomics data sets. When running a publicly exposed proxy endpoint without authentication, cBioPortal could allow someone to perform a Server Side Request Forgery SSRF attack. Logged in users...
CVE-2024-41668
The CVE-2024-41668 affects cBioPortal for Cancer Genomics. A publicly exposed proxy endpoint without authentication allows Server-Side Request Forgery (SSRF); logged-in users can exploit this on private instances too. A fix is available in version 6.0.12. As a workaround, disable the /proxy endpo...
CVE-2024-41668: Server-Side Request Forgery (SSRF)
The cBioPortal for Cancer Genomics provides visualization, analysis, and download of large-scale cancer genomics data sets. When running a publicly exposed proxy endpoint without authentication, cBioPortal could allow someone to perform a Server Side Request Forgery SSRF attack. Logged in users...
cBioPortal security vulnerabilities
cBioPortal is an application of cBioPortal open source. It is used to provide visualization, analysis, and download of large-scale cancer genomics datasets. A security vulnerability exists in cBioPortal that originates when running a publicly available proxy endpoint without authentication...
PT-2024-29495 · Unknown · Cbioportal
Name of the Vulnerable Software and Affected Versions: cBioPortal versions prior to 6.0.12 Description: The cBioPortal for Cancer Genomics provides visualization, analysis, and download of large-scale cancer genomics data sets. When running a publicly exposed proxy endpoint without authentication...
CbioPortal Denial of Service Vulnerability
CbioPortal is used to provide visualization, analysis, and download of large-scale cancer genomics datasets. a denial-of-service vulnerability exists in CbioPortal in versions 3.6.21 and earlier, which stems from the insecure handling of regular expressions in /ProteinArraySignificanceTest.json,...