28 matches found
adins-prd-mcp (>=0.5.0, <=0.5.7), iflow-mcp-pickleton89-cbioportal-mcp (0.1.0) +2 more potentially affected by CVE-2026-27124 via fastmcp (2.3.3)
fastmcp PYPI version 2.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - adins-prd-mcp =0.5.0, =0.1.2, =0.1.6 - mseep-memory-plus 0.1.5 Source cves: CVE-2026-27124 Source advisory: OSV:PYSEC-2026-2476...
com.eurodyn.qlack.fuse:qlack-fuse-aaa (3.9.8), com.trigyn:java-web-starter (>=2.2, <=2.13) +5 more potentially affected by CVE-2026-40988 via org.springframework.security:spring-security-saml2-service-provider (>=6.4.2, <=6.4.11)
org.springframework.security:spring-security-saml2-service-provider MAVEN version =6.4.2, =2.2, =11.10.0, =dce37d6e6c310e0d86c4f0d73f8846b8ef2f4432, =9.0-rc1, =1.15.0, =1.15.0, =2.4.0 Source cves: CVE-2026-40988 Source advisory: GHSA-M69X-PW9P-7J3Q...
adins-prd-mcp (>=0.5.0, <=0.5.7), iflow-mcp-pickleton89-cbioportal-mcp (0.1.0) +2 more potentially affected by CVE-2026-32871 via fastmcp (2.3.3)
fastmcp PYPI version 2.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - adins-prd-mcp =0.5.0, =0.1.2, =0.1.6 - mseep-memory-plus 0.1.5 Source cves: CVE-2026-32871 Source advisory: OSV:GHSA-VV7Q-7JX5-F767...
adins-prd-mcp (>=0.5.0, <=0.5.7), iflow-mcp-pickleton89-cbioportal-mcp (0.1.0) +2 more potentially affected by CVE-2025-64340 via fastmcp (2.3.3)
fastmcp PYPI version 2.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on fastmcp and may be impacted: - adins-prd-mcp =0.5.0, =0.1.2, =0.1.6 - mseep-memory-plus 0.1.5 Source cves: CVE-2025-64340 Source advisory: OSV:GHSA-M8X7-R2RG-VH5G...
CVE-2024-41668
The cBioPortal for Cancer Genomics provides visualization, analysis, and download of large-scale cancer genomics data sets. When running a publicly exposed proxy endpoint without authentication, cBioPortal could allow someone to perform a Server Side Request Forgery SSRF attack. Logged in users...
EUVD-2021-24702
Malware in sbrugna...
EUVD-2024-39122
Malicious code in bioql PyPI...
CVE-2021-38244
A regular expression denial of service ReDoS vulnerability exits in cbioportal 3.6.21 and older via a POST request to /ProteinArraySignificanceTest.json...
CVE-2024-41668
The cBioPortal for Cancer Genomics provides visualization, analysis, and download of large-scale cancer genomics data sets. When running a publicly exposed proxy endpoint without authentication, cBioPortal could allow someone to perform a Server Side Request Forgery SSRF attack. Logged in users...
CVE-2024-41668 cBioPortal Proxy Endpoint Vulnerabliity
The cBioPortal for Cancer Genomics provides visualization, analysis, and download of large-scale cancer genomics data sets. When running a publicly exposed proxy endpoint without authentication, cBioPortal could allow someone to perform a Server Side Request Forgery SSRF attack. Logged in users...
CVE-2024-41668
The cBioPortal for Cancer Genomics provides visualization, analysis, and download of large-scale cancer genomics data sets. When running a publicly exposed proxy endpoint without authentication, cBioPortal could allow someone to perform a Server Side Request Forgery SSRF attack. Logged in users...
CVE-2024-41668
The CVE-2024-41668 affects cBioPortal for Cancer Genomics. A publicly exposed proxy endpoint without authentication allows Server-Side Request Forgery (SSRF); logged-in users can exploit this on private instances too. A fix is available in version 6.0.12. As a workaround, disable the /proxy endpo...
CVE-2024-41668 cBioPortal Proxy Endpoint Vulnerabliity
The cBioPortal for Cancer Genomics provides visualization, analysis, and download of large-scale cancer genomics data sets. When running a publicly exposed proxy endpoint without authentication, cBioPortal could allow someone to perform a Server Side Request Forgery SSRF attack. Logged in users...
CVE-2024-41668 cBioPortal Proxy Endpoint Vulnerabliity
The cBioPortal for Cancer Genomics provides visualization, analysis, and download of large-scale cancer genomics data sets. When running a publicly exposed proxy endpoint without authentication, cBioPortal could allow someone to perform a Server Side Request Forgery SSRF attack. Logged in users...
PT-2024-29495 · Unknown · Cbioportal
Name of the Vulnerable Software and Affected Versions: cBioPortal versions prior to 6.0.12 Description: The cBioPortal for Cancer Genomics provides visualization, analysis, and download of large-scale cancer genomics data sets. When running a publicly exposed proxy endpoint without authentication...
cBioPortal 安全漏洞
cBioPortal is an application of cBioPortal open source. It is used to provide visualization, analysis, and download of large-scale cancer genomics datasets. A security vulnerability exists in cBioPortal that originates when running a publicly available proxy endpoint without authentication...
CVE-2024-41668: Server-Side Request Forgery (SSRF)
The cBioPortal for Cancer Genomics provides visualization, analysis, and download of large-scale cancer genomics data sets. When running a publicly exposed proxy endpoint without authentication, cBioPortal could allow someone to perform a Server Side Request Forgery SSRF attack. Logged in users...
CbioPortal Denial of Service Vulnerability
CbioPortal is used to provide visualization, analysis, and download of large-scale cancer genomics datasets. a denial-of-service vulnerability exists in CbioPortal in versions 3.6.21 and earlier, which stems from the insecure handling of regular expressions in /ProteinArraySignificanceTest.json,...
