Malicious Package

Overview claudcode-cli is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

an-website (24.1.0), browserist (1.6.7) +5 more potentially affected by CVE-2026-41066 via lxml (5.0.0)

lxml PYPI version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on lxml and may be impacted: - an-website 24.1.0 - browserist 1.6.7 - ena-upload-cli =0.6.3, =5.0.0, =0.1.0, =0.5.0 - stockplot 2.0.3 Source cves: CVE-2026-41066 Source advisory:...

aztarna (1.0.0), gluetool (>=1.25.0, <=1.26.0) +4 more potentially affected by CVE-2026-41066 via lxml (4.2.4)

lxml PYPI version 4.2.4 is affected by a known vulnerability. The following packages have a transitive dependency on lxml and may be impacted: - aztarna 1.0.0 - gluetool =1.25.0, =1.0.0, =1.0.0, =0.4.1, =1.4.0, =1.5.2 Source cves: CVE-2026-41066 Source advisory: OSV:GHSA-VFMQ-68HX-4JFW...

kraken-build (>=0.34.0, <=0.35.3), kraken-wrapper (>=0.33.2, <=0.35.3) +4 more potentially affected by CVE-2026-40606 via mitmproxy (10.4.2)

mitmproxy PYPI version 10.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - kraken-build =0.34.0, =0.33.2, =0.11.0, =0.0.2, =0.0.1, =0.0.3 Source cves: CVE-2026-40606 Source advisory: OSV:PYSEC-2026-92...

http-tools (>=1.0.1, <=1.0.2), lyrebird (>=0.11.0, <=0.12.1) +2 more potentially affected by CVE-2026-40606 via mitmproxy (4.0.4)

mitmproxy PYPI version 4.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on mitmproxy and may be impacted: - http-tools =1.0.1, =0.11.0, =1.2.1, =1.5.33, =1.5.41 Source cves: CVE-2026-40606 Source advisory: OSV:PYSEC-2026-92...

CVE-2026-40602 hass-cli: Handling of user-supplied Jinja2 templates

The Home Assistant Command-line interface hass-cli is a command-line tool for Home Assistant. Up to 1.0.0 of home-assitant-cli an unrestricted environment was used to handle Jninja2 templates instead of a sandboxed one. The user-supplied input within Jinja2 templates was rendered locally with no...

CVE-2026-40602 hass-cli: Handling of user-supplied Jinja2 templates

The Home Assistant Command-line interface hass-cli is a command-line tool for Home Assistant. Up to 1.0.0 of home-assitant-cli an unrestricted environment was used to handle Jninja2 templates instead of a sandboxed one. The user-supplied input within Jinja2 templates was rendered locally with no...

boss-cli (>=1.0.0a18, <=1.0.3), lore (0.4.36) +1 more potentially affected by CVE-2026-28684 via python-dotenv (0.6.5)

python-dotenv PYPI version 0.6.5 is affected by a known vulnerability. The following packages have a transitive dependency on python-dotenv and may be impacted: - boss-cli =1.0.0a18, =0.1.16, =0.1.20 Source cves: CVE-2026-28684 Source advisory: OSV:GHSA-MF9W-MJ56-HR94...

EUVD-2026-24079

This vulnerability exists in Quantum Networks router due to missing rate limiting and CAPTCHA protection for failed login attempts in the web-based management interface. An attacker on the same network could exploit this vulnerability by performing brute force attacks against administrative...

CVE-2026-41036 Command Injection Vulnerability in Quantum Networks Router QN-I-470

This vulnerability exists in Quantum Networks router due to inadequate sanitization of user-supplied input in the management CLI interface. An authenticated remote attacker could exploit this vulnerability by injecting arbitrary OS commands on the targeted device. Successful exploitation of this...

CVE-2026-41036: Improper Neutralization of Special Elements used in an OS Command

This vulnerability exists in Quantum Networks router due to inadequate sanitization of user-supplied input in the management CLI interface. An authenticated remote attacker could exploit this vulnerability by injecting arbitrary OS commands on the targeted device. Successful exploitation of this...

CVE-2026-40602: Improper Control of Generation of Code

The Home Assistant Command-line interface hass-cli is a command-line tool for Home Assistant. Up to 1.0.0 of home-assitant-cli an unrestricted environment was used to handle Jninja2 templates instead of a sandboxed one. The user-supplied input within Jinja2 templates was rendered locally with no...

hyperpod-elastic-agent (>=1.1.0, <=1.1.3), jupyter-quant (>=2509.1.0, <=2510.1.0) +5 more potentially affected by CVE-2026-3219 via pip (25.2.0)

pip PYPI version 25.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - hyperpod-elastic-agent =1.1.0, =2509.1.0, =0.1.0, =0.20.0, =3.13.0, =3.13.0, =3.14.0 Source cves: CVE-2026-3219 Source advisory: OSV:GHSA-58QW-9MGM-455V...

cli-pipeline (1.5.114), medikit (0.5.20) potentially affected by CVE-2026-3219 via pip (10.0.0b2)

pip PYPI version 10.0.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - cli-pipeline 1.5.114 - medikit 0.5.20 Source cves: CVE-2026-3219 Source advisory: OSV:GHSA-58QW-9MGM-455V...

boss-cli (>=1.0.0a18, <=1.0.3), lore (0.4.36) +1 more potentially affected by CVE-2026-28684 via python-dotenv (0.6.5)

python-dotenv PYPI version 0.6.5 is affected by a known vulnerability. The following packages have a transitive dependency on python-dotenv and may be impacted: - boss-cli =1.0.0a18, =0.1.16, =0.1.20 Source cves: CVE-2026-28684 Source advisory: OSV:PYSEC-2026-2270...

tempo-cli-2.10.4-1.1 on GA media (moderate)

tempo-cli-2.10.4-1.1 on GA media Announcement ID: openSUSE-SU-2026:10578-1 Rating: moderate Cross-References: CVE-2026-25679 CVSS scores: CVE-2026-25679 SUSE : 3.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N CVE-2026-25679 SUSE : 4.6 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:L/VA:N/SC:N/SI:N/SA:...

OPENSUSE-SU-2026:10578-1 tempo-cli-2.10.4-1.1 on GA media

These are all security issues fixed in the tempo-cli-2.10.4-1.1 package on the GA media of openSUSE Tumbleweed...

elFinder: Command injection in resize background color parameter when using ImageMagick CLI

Severity High bg can be injected into shell command construction, leading to possible RCE in affected configurations. Summary elFinder contains a command injection vulnerability in the resize command. The bg background color parameter is accepted from user input and passed through image...

GHSA-PC3F-X583-G7J2 vulnerabilities

Vulnerabilities for packages: istio, argo-rollouts, cert-manager-istio-csr, emissary, kots, kwok, rancher-fleet, postgres-operator, cluster-api, gitlab-runner, zarf, k8sgpt, rancher, argo-workflows, aws-node-termination-handler, k9s, kargo, headlamp, kubeflow-pipelines, kubernetes, argo-cd,...

CVE-2026-35469 vulnerabilities

Vulnerabilities for packages: istio, argo-rollouts, cert-manager-istio-csr, emissary, kots, kwok, rancher-fleet, postgres-operator, cluster-api, gitlab-runner, zarf, k8sgpt, rancher, argo-workflows, aws-node-termination-handler, k9s, kargo, headlamp, kubeflow-pipelines, kubernetes, argo-cd,...