Server-side Request Forgery (SSRF)

Overview Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the /api/v1/index/retrieve endpoint. An attacker can scan internal network resources by sending GET requests to retrieve a public key. Since only GET requests are allowed for this endpoint, it is not...

agentic-dev-boilerplate (1.1.2), agentiva (>=0.1.0, <=0.1.5) +88 more potentially affected by CVE-2025-71176 via pytest (>=9.0.0, <=9.0.2)

pytest PYPI version =9.0.0, =0.1.0, =0.5.0rc4, =1.0.5, =1.0.83, =25.11.27, =0.2.0, =0.9.78, =1.70.2, =1.1.0, =13.0.10, =13.0.13 and more Source cves: CVE-2025-71176 Source advisory: GHSA-6W46-J5RX-G56G...

algorin-cli (>=0.0.1, <=0.21.0), areaaa (0.0.1) +63 more potentially affected by CVE-2025-71176 via pytest (8.1.1)

pytest PYPI version 8.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - algorin-cli =0.0.1, =0.1.18, =0.0.1, =32.1.0, =0.0.0, =0.0.1, =0.4.0, =0.1.0, =1.0.0, =1.0.17 and more Source cves: CVE-2025-71176 Source advisory:...

fsai-pottery (>=0.0.0, <=3.1.3), legalopsrag (>=0.1.0, <=0.7.0) +5 more potentially affected by CVE-2025-71176 via pytest (7.1.0)

pytest PYPI version 7.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - fsai-pottery =0.0.0, =0.1.0, =2.4.20, =0.0.1, =6.0.0rc0, =0.1.2.2, =0.2.1 Source cves: CVE-2025-71176 Source advisory: OSV:GHSA-6W46-J5RX-G56G...

genhtml-markdown (>=1.0.8, <=1.0.9), j2s3 (>=1.0.0, <=1.0.2) +4 more potentially affected by CVE-2025-71176 via pytest (3.8.0)

pytest PYPI version 3.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - genhtml-markdown =1.0.8, =1.0.0, =1.0.0, =0.10.0, =1.15.7, =1.15.10 Source cves: CVE-2025-71176 Source advisory: OSV:GHSA-6W46-J5RX-G56G...

mold-cli (>=0.0.1, <=0.0.2), pygrest (1.1.0) +3 more potentially affected by CVE-2025-71176 via pytest (4.1.1)

pytest PYPI version 4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - mold-cli =0.0.1, =1.0.0, =0.100.2rc4, =0.100.2 - regexgen 1.0.0 Source cves: CVE-2025-71176 Source advisory: OSV:GHSA-6W46-J5RX-G56G...

Azure Linux 3.0 Security Update: gh (CVE-2025-48938)

The version of gh installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2025-48938 advisory. - go-gh is a collection of Go modules to make authoring GitHub CLI extensions easier. A security vulnerability has...

Azure Linux 3.0 Security Update: dcos-cli (CVE-2020-26160)

The version of dcos-cli installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2020-26160 advisory. - jwt-go before 4.0.0-preview1 allows attackers to bypass intended access restrictions in situations with...

@akashic/akashic-cli (>=2.16.49, <=2.17.21), @akashic/akashic-cli-export (>=1.8.28, <=1.9.17) +250 more potentially affected by CVE-2025-13465 via lodash.unset (>=4.0.2, <=4.5.2)

lodash.unset NPM version =4.0.2, =2.16.49, =1.8.28, =1.2.1, =1.8.4, =8.0.0, =1.0.75, =0.0.2, =0.1.0, =1.31.9, =0.0.4, =0.6.0 and more Source cves: CVE-2025-13465 Source advisory: GHSA-XXJR-MMJV-4GPG...

@backstage/backend-app-api (>=0.0.0-nightly-20220908030128, <=1.4.0-next.1), @backstage/backend-common (>=0.0.0-nightly-20201012104, <=0.0.0-nightly-20240917021806) +172 more potentially affected by CVE-2026-24047 via @backstage/cli-common (>=0.0.0-nightly-2021612205, <=0.1.16)

@backstage/cli-common NPM version =0.0.0-nightly-2021612205, =0.0.0-nightly-20220908030128, =0.0.0-nightly-20201012104, =0.0.0-nightly-20220908030128, =0.0.0-nightly-20240116021644, =0.0.0-nightly-20231025021459, =0.0.0-nightly-20220908030128, =0.0.0-nightly-2021101322257,...

@backstage/backend-app-api (>=0.0.0-nightly-20220908030128, <=1.4.0-next.1), @backstage/backend-common (>=0.0.0-nightly-20201012104, <=0.0.0-nightly-20240917021806) +172 more potentially affected by CVE-2026-24047 via @backstage/cli-common (>=0.0.0-nightly-202153022114, <=0.1.16)

@backstage/cli-common NPM version =0.0.0-nightly-202153022114, =0.0.0-nightly-20220908030128, =0.0.0-nightly-20201012104, =0.0.0-nightly-20220908030128, =0.0.0-nightly-20240116021644, =0.0.0-nightly-20231025021459, =0.0.0-nightly-20220908030128, =0.0.0-nightly-2021101322257,...

@backstage/backend-app-api (>=0.0.0-nightly-20220908030128, <=1.4.0-next.1), @backstage/backend-common (>=0.0.0-nightly-20201012104, <=0.0.0-nightly-20240917021806) +172 more potentially affected by CVE-2026-24047 via @backstage/cli-common (>=0.0.0-nightly-202153022114, <=0.1.16)

@backstage/cli-common NPM version =0.0.0-nightly-202153022114, =0.0.0-nightly-20220908030128, =0.0.0-nightly-20201012104, =0.0.0-nightly-20220908030128, =0.0.0-nightly-20240116021644, =0.0.0-nightly-20231025021459, =0.0.0-nightly-20220908030128, =0.0.0-nightly-2021101322257,...

dialogy (>=0.2.3, <=0.9.20), flexlate-dev (>=0.1.0, <=0.19.0) +2 more potentially affected by CVE-2026-23986 via copier (5.1.0)

copier PYPI version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on copier and may be impacted: - dialogy =0.2.3, =0.1.0, =0.1.0, =0.1.0, =0.2.0 Source cves: CVE-2026-23986 Source advisory: OSV:GHSA-4FQP-R85R-HXQH...

data-pipelines-cli (>=0.31.0, <=0.32.0), pytoil (>=0.36.0, <=0.38.1) potentially affected by CVE-2026-23986 via copier (7.0.1)

copier PYPI version 7.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on copier and may be impacted: - data-pipelines-cli =0.31.0, =0.36.0, =0.38.1 Source cves: CVE-2026-23986 Source advisory: OSV:GHSA-4FQP-R85R-HXQH...

entangled-cli (>=2.0.0, <=2.0.2), flet (>=0.10.0, <=0.11.0) +9 more potentially affected by CVE-2026-23986 via copier (8.3.0)

copier PYPI version 8.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on copier and may be impacted: - entangled-cli =2.0.0, =0.10.0, =0.10.0, =0.1.1, =0.1.10, =0.7.1, =0.12.5, =4.1.0b1, =4.3.0b3, =4.1.0b1, =4.1.0b1, =4.3.4rc3 Source cves:...

data-pipelines-cli (>=0.31.0, <=0.32.0), pytoil (>=0.36.0, <=0.38.1) potentially affected by CVE-2026-23968 via copier (7.0.1)

copier PYPI version 7.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on copier and may be impacted: - data-pipelines-cli =0.31.0, =0.36.0, =0.38.1 Source cves: CVE-2026-23968 Source advisory: OSV:GHSA-XJHM-GP88-8PFX...

entangled-cli (>=2.0.0, <=2.0.2), flet (>=0.10.0, <=0.11.0) +9 more potentially affected by CVE-2026-23968 via copier (8.3.0)

copier PYPI version 8.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on copier and may be impacted: - entangled-cli =2.0.0, =0.10.0, =0.10.0, =0.1.1, =0.1.10, =0.7.1, =0.12.5, =4.1.0b1, =4.3.0b3, =4.1.0b1, =4.1.0b1, =4.3.4rc3 Source cves:...

CVE-2025-33228

A flaw was found in NVIDIA Nsight Systems. This vulnerability allows a local attacker to achieve arbitrary code execution by manually invoking the processnsysrepcli.py script with a malicious string. This OS command injection can lead to privilege escalation, data tampering, denial of service, an...

Malicious Package

Overview kc-fe-cli is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

@alephium/cli (>=0.38.0, <=0.45.0), @alephium/get-extension-wallet (>=0.38.0, <=0.45.0) +19 more potentially affected by CVE-2026-1245 via binary-parser (>=2.0.3, <=2.2.1)

binary-parser NPM version =2.0.3, =0.38.0, =0.38.0, =0.38.0, =0.30.0-beta.1, =0.38.0, =0.38.0, =0.38.0, =0.22.0, =0.0.2, =1.4.1, =0.8.0, =1.13.0, =1.0.0, =2.1.1 and more Source cves: CVE-2026-1245 Source advisory: OSV:GHSA-M39P-34QH-RH3W...