PT-2026-98602

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free race condition exists involving the cad pid pointer, a kernel-wide structure. The functions proc do cad pid and kill cad pid read cad pid and pass it to pid vnr and kill...

Astra Linux – Vulnerability in Linux

In the Linux kernel, the following vulnerability has been resolved: PID: Taking a reference when initializing cadpid During boot, kernelinitfreeable initializes cadpid to the struct pid of the init task. Later, we may change cadpid via sysctl. When this happens, procdocadpid will increment the...

cad-viewer-widget (1.4.1), jupyter-cadquery (>=3.3.0, <=3.5.2) +1 more potentially affected by CVE-2026-73415 via jupyterlab (3.6.0rc1)

jupyterlab PYPI version 3.6.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - cad-viewer-widget 1.4.1 - jupyter-cadquery =3.3.0, =3.5.2 - jupyter-cadquery-orion 0.0.1 Source cves: CVE-2026-73415 Source advisory:...

cad-viewer-widget (>=1.3.5, <=1.4.0), jupyter-cadquery (>=3.1.0rc0, <=3.2.2) potentially affected by CVE-2026-73415 via jupyterlab (3.5.0rc0)

jupyterlab PYPI version 3.5.0rc0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - cad-viewer-widget =1.3.5, =3.1.0rc0, =3.2.2 Source cves: CVE-2026-73415 Source advisory: OSV:PYSEC-2026-3671...

Autodesk DWG TrueView 26.0.x < 26.0.118.0 (2027.1) (adsk-sa-2026-0009)

The version of Autodesk DWG TrueView installed on the remote host is prior to 26.0.118.0 2027.1. It is, therefore, affected by multiple vulnerabilities as referenced in the adsk-sa-2026-0009 advisory. - A maliciously crafted DXF file, when parsed through Autodesk AutoCAD, can force a Heap-Based...

cad-viewer-widget (1.4.1), jupyter-cadquery (>=3.3.0, <=3.5.2) +1 more potentially affected by CVE-2026-73415 via jupyterlab (3.6.0rc1)

jupyterlab PYPI version 3.6.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - cad-viewer-widget 1.4.1 - jupyter-cadquery =3.3.0, =3.5.2 - jupyter-cadquery-orion 0.0.1 Source cves: CVE-2026-73415 Source advisory:...

cad-viewer-widget (>=1.3.5, <=1.4.0), jupyter-cadquery (>=3.1.0rc0, <=3.2.2) potentially affected by CVE-2026-73415 via jupyterlab (3.5.0rc0)

jupyterlab PYPI version 3.5.0rc0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - cad-viewer-widget =1.3.5, =3.1.0rc0, =3.2.2 Source cves: CVE-2026-73415 Source advisory: OSV:GHSA-GX64-GJ6P-PC4C...

cad-viewer-widget (1.4.1), jupyter-cadquery (>=3.3.0, <=3.5.2) +1 more potentially affected by CVE-2026-73626 via jupyterlab (3.6.0rc1)

jupyterlab PYPI version 3.6.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - cad-viewer-widget 1.4.1 - jupyter-cadquery =3.3.0, =3.5.2 - jupyter-cadquery-orion 0.0.1 Source cves: CVE-2026-73626 Source advisory:...

cad-viewer-widget (>=1.3.5, <=1.4.0), jupyter-cadquery (>=3.1.0rc0, <=3.2.2) potentially affected by CVE-2026-73626 via jupyterlab (3.5.0rc0)

jupyterlab PYPI version 3.5.0rc0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - cad-viewer-widget =1.3.5, =3.1.0rc0, =3.2.2 Source cves: CVE-2026-73626 Source advisory: OSV:GHSA-WHVH-WF3X-G77J...

cad-viewer-widget (1.4.1), jupyter-cadquery (>=3.3.0, <=3.5.2) +1 more potentially affected by CVE-2026-42557 via jupyterlab (3.6.0rc1)

jupyterlab PYPI version 3.6.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - cad-viewer-widget 1.4.1 - jupyter-cadquery =3.3.0, =3.5.2 - jupyter-cadquery-orion 0.0.1 Source cves: CVE-2026-42557 Source advisory:...

cad-viewer-widget (>=1.3.5, <=1.4.0), jupyter-cadquery (>=3.1.0rc0, <=3.2.2) potentially affected by CVE-2026-42557 via jupyterlab (3.5.0rc0)

jupyterlab PYPI version 3.5.0rc0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - cad-viewer-widget =1.3.5, =3.1.0rc0, =3.2.2 Source cves: CVE-2026-42557 Source advisory: OSV:PYSEC-2026-2537...

cad-viewer-widget (1.4.1), jupyter-cadquery (>=3.3.0, <=3.5.2) +1 more potentially affected by CVE-2026-40171 via jupyterlab (3.6.0rc1)

jupyterlab PYPI version 3.6.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - cad-viewer-widget 1.4.1 - jupyter-cadquery =3.3.0, =3.5.2 - jupyter-cadquery-orion 0.0.1 Source cves: CVE-2026-40171 Source advisory:...

cad-viewer-widget (>=1.3.5, <=1.4.0), jupyter-cadquery (>=3.1.0rc0, <=3.2.2) potentially affected by CVE-2026-40171 via jupyterlab (3.5.0rc0)

jupyterlab PYPI version 3.5.0rc0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - cad-viewer-widget =1.3.5, =3.1.0rc0, =3.2.2 Source cves: CVE-2026-40171 Source advisory: OSV:PYSEC-2026-2538...

cad-viewer-widget (1.4.1), jupyter-cadquery (>=3.3.0, <=3.5.2) +1 more potentially affected by CVE-2025-59842 via jupyterlab (3.6.0rc1)

jupyterlab PYPI version 3.6.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - cad-viewer-widget 1.4.1 - jupyter-cadquery =3.3.0, =3.5.2 - jupyter-cadquery-orion 0.0.1 Source cves: CVE-2025-59842 Source advisory:...

cad-viewer-widget (>=1.3.5, <=1.4.0), jupyter-cadquery (>=3.1.0rc0, <=3.2.2) potentially affected by CVE-2025-59842 via jupyterlab (3.5.0rc0)

jupyterlab PYPI version 3.5.0rc0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - cad-viewer-widget =1.3.5, =3.1.0rc0, =3.2.2 Source cves: CVE-2025-59842 Source advisory: OSV:PYSEC-2026-1482...

cad-viewer-widget (1.4.1), jupyter-cadquery (>=3.3.0, <=3.5.2) +1 more potentially affected by CVE-2026-67338 via jupyterlab (3.6.0rc1)

jupyterlab PYPI version 3.6.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - cad-viewer-widget 1.4.1 - jupyter-cadquery =3.3.0, =3.5.2 - jupyter-cadquery-orion 0.0.1 Source cves: CVE-2026-67338 Source advisory:...

cad-viewer-widget (>=1.3.5, <=1.4.0), jupyter-cadquery (>=3.1.0rc0, <=3.2.2) potentially affected by CVE-2026-67338 via jupyterlab (3.5.0rc0)

jupyterlab PYPI version 3.5.0rc0 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - cad-viewer-widget =1.3.5, =3.1.0rc0, =3.2.2 Source cves: CVE-2026-67338 Source advisory: OSV:GHSA-VMHF-C436-HXJ4...

MAL-2026-4365 Malicious code in @atlisp/mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5f4a9667f0a13220de9b838fde4fc16bd5aaa7f79d91f1122725e4799582515 The package's MCP server auto-injects a LISP bootstrap into every CAD command sent through cadSend/cadSendWithResult, plus connectcad's initAtlisp an...

Malicious code in @atlisp/mcp (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c5f4a9667f0a13220de9b838fde4fc16bd5aaa7f79d91f1122725e4799582515 The package's MCP server auto-injects a LISP bootstrap into every CAD command sent through cadSend/cadSendWithResult, plus connectcad's initAtlisp an...

cad-viewer-widget (1.4.1), jupyter-cadquery (>=3.3.0, <=3.5.2) +1 more potentially affected by CVE-2026-42557 via jupyterlab (3.6.0rc1)

jupyterlab PYPI version 3.6.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - cad-viewer-widget 1.4.1 - jupyter-cadquery =3.3.0, =3.5.2 - jupyter-cadquery-orion 0.0.1 Source cves: CVE-2026-42557 Source advisory:...