ais-dom (>=0.92.5, <=0.95.7), bitwarden-simple-cli (>=1.0.0, <=1.3.1) +29 more potentially affected by CVE-2026-34073 via cryptography (2.6.1)

cryptography PYPI version 2.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - ais-dom =0.92.5, =1.0.0, =1.7.1, =0.2.5, =0.0.0, =0.0.17, =0.0.1.dev33, =0.1.8, =0.4.3, =0.1.0, =1.0.5 - ezissue-br 1.0.0 and more Sourc...

ais-dom (>=0.96.10, <=0.98.9), ali-cli (>=0.5.1, <=0.7.2) +52 more potentially affected by CVE-2026-34073 via cryptography (2.7.0)

cryptography PYPI version 2.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - ais-dom =0.96.10, =0.5.1, =0.0.1, =0.5.0, =1.0.1, =1.0.1, =0.0.5a0, =0.2.12, =2.5.6, =0.1.0, =0.5.1, =0.5.2 - duo-universal 1.0.1 -...

moca (0.3.3), oraclebmc (>=1.1.0, <=1.1.1) +2 more potentially affected by CVE-2026-34073 via cryptography (1.5.2)

cryptography PYPI version 1.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - moca 0.3.3 - oraclebmc =1.1.0, =2.1.0, =2.1.3 - teamvault 0.6.1 Source cves: CVE-2026-34073 Source advisory: OSV:PYSEC-2026-35...

aba-cli-scrapper (>=0.6.0, <=0.7.6), agixt (>=1.7.0, <=1.7.2) +130 more potentially affected by CVE-2026-34073 via cryptography (43.0.1)

cryptography PYPI version 43.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on cryptography and may be impacted: - aba-cli-scrapper =0.6.0, =1.7.0, =3.0.0, =2.9.0, =0.2.1, =0.0.81, =1.0.648, =1.0.2, =0.1.0.post173, =0.1.1, =1.1.45, =0.0.1, =0.0.5 and...

pdd-cli (>=0.0.28, <=0.0.94) potentially affected by CVE-2026-34070 via langchain-core (0.3.56)

langchain-core PYPI version 0.3.56 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - pdd-cli =0.0.28, =0.0.94 Source cves: CVE-2026-34070 Source advisory: OSV:PYSEC-2026-2193...

ai-parrot (>=0.5.0, <=0.5.17), aiagents4pharma (>=0.0.0, <=1.49.1) +4 more potentially affected by CVE-2026-34070 via langchain-core (0.3.40)

langchain-core PYPI version 0.3.40 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - ai-parrot =0.5.0, =0.0.0, =0.0.18, =0.0.21 Source cves: CVE-2026-34070 Source advisory: OSV:PYSEC-2026-2193...

aa-rag (>=0.4.2, <=0.4.3), ai-parrot (>=0.5.18, <=0.6.4) +11 more potentially affected by CVE-2026-34070 via langchain-core (0.3.51)

langchain-core PYPI version 0.3.51 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - aa-rag =0.4.2, =0.5.18, =2025.4.71026, =2025.5.11802, =0.1.0, =2025.4.101146, =2025.9.111721, =2025.4.181139, =2025.5.91122, =0.1.8...

algorin-cli (>=0.0.1, <=0.21.0), alita-sdk (>=0.0.1, <=0.0.16) +1 more potentially affected by CVE-2026-34070 via langchain-core (0.1.30)

langchain-core PYPI version 0.1.30 is affected by a known vulnerability. The following packages have a transitive dependency on langchain-core and may be impacted: - algorin-cli =0.0.1, =0.0.1, =0.0.2, =0.0.6 Source cves: CVE-2026-34070 Source advisory: OSV:PYSEC-2026-2193...

GHSA-27V5-C462-WPQ7 vulnerabilities

Vulnerabilities for packages: saf, thingsboard, opensearch-dashboards, langfuse, tileserver-gl-fips, opensearch-dashboards-fips, tileserver-gl, vitess, gemini-cli, kibana, wazuh-dashboard, code-server, langfuse-fips, redisinsight...

GHSA-J3Q9-MXJG-W52F vulnerabilities

Vulnerabilities for packages: saf, thingsboard, opensearch-dashboards, langfuse, tileserver-gl-fips, opensearch-dashboards-fips, tileserver-gl, vitess, gemini-cli, kibana, wazuh-dashboard, code-server, langfuse-fips, redisinsight...

CVE-2026-4926 vulnerabilities

Vulnerabilities for packages: saf, thingsboard, opensearch-dashboards, langfuse, tileserver-gl-fips, opensearch-dashboards-fips, tileserver-gl, vitess, gemini-cli, kibana, wazuh-dashboard, code-server, langfuse-fips, redisinsight...

CVE-2026-4923 vulnerabilities

Vulnerabilities for packages: saf, thingsboard, opensearch-dashboards, langfuse, tileserver-gl-fips, opensearch-dashboards-fips, tileserver-gl, vitess, gemini-cli, kibana, wazuh-dashboard, code-server, langfuse-fips, redisinsight...

PT-2026-32070

Summary Passwords passed via the --password / -p CLI argument in openssl encrypt/modules/crypt cli subparser.py at lines 150-154 are visible to any user on the system via ps aux or /proc/pid/cmdline. Affected Code python subparser.add argument "--password", "-p", help="Password will prompt if not...

CVE-2026-34200: Missing Authentication for Critical Function

Nhost is an open source Firebase alternative with GraphQL. Prior to version 1.41.0, The Nhost CLI MCP server, when explicitly configured to listen on a network port, applies no inbound authentication and does not enforce strict CORS. This allows a malicious website visited on the same machine to...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=4.0.0, <=4.0.1), ca.uhn.hapi.fhir:hapi-fhir-igpacks (>=4.0.0, <=4.0.1) +6 more potentially affected by CVE-2026-34361 via ca.uhn.hapi.fhir:org.hl7.fhir.validation (4.0.0)

ca.uhn.hapi.fhir:org.hl7.fhir.validation MAVEN version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.validation and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api =4.0.0, =4.0.0, =4.0.0, =4.0.0, =4.0.0,...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.0.0, <=6.1.3), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=6.0.3, <=6.1.3) +52 more potentially affected by CVE-2026-34361 via ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.6.36)

ca.uhn.hapi.fhir:org.hl7.fhir.validation MAVEN version 5.6.36 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.validation and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api =6.0.0, =6.0.3, =6.0.0, =6.0.0, =6.0.0,...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.3.0, <=5.3.3), ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserver (>=5.3.0, <=5.3.3) +39 more potentially affected by CVE-2026-34361 via ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.3.0)

ca.uhn.hapi.fhir:org.hl7.fhir.validation MAVEN version 5.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.validation and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api =5.3.0, =5.3.0, =5.3.0, =5.3.0, =5.3.0,...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=5.4.0, <=5.4.2), ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserver (>=5.4.0, <=5.4.2) +41 more potentially affected by CVE-2026-34361 via ca.uhn.hapi.fhir:org.hl7.fhir.validation (5.4.0)

ca.uhn.hapi.fhir:org.hl7.fhir.validation MAVEN version 5.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.validation and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api =5.4.0, =5.4.0, =5.4.0, =5.4.0, =5.4.0,...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (>=6.6.0, <=8.8.2), ca.uhn.hapi.fhir:hapi-fhir-cli-app (>=6.6.0, <=7.4.5) +155 more potentially affected by CVE-2026-34361 via ca.uhn.hapi.fhir:org.hl7.fhir.validation (>=6.0.0, <=6.9.3)

ca.uhn.hapi.fhir:org.hl7.fhir.validation MAVEN version =6.0.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.8.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =6.6.0, =8.4.0, =6.8.0, =6.6.0, =8.8.2 and more Source cves: CVE-2026-34361 Source advisory: OSV:GHSA-VR79-8M62-WH98...

ca.uhn.hapi.fhir:hapi-fhir-cli-api (4.1.0), ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserver (4.1.0) +82 more potentially affected by CVE-2026-34359 via ca.uhn.hapi.fhir:org.hl7.fhir.utilities (4.1.0)

ca.uhn.hapi.fhir:org.hl7.fhir.utilities MAVEN version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on ca.uhn.hapi.fhir:org.hl7.fhir.utilities and may be impacted: - ca.uhn.hapi.fhir:hapi-fhir-cli-api 4.1.0 - ca.uhn.hapi.fhir:hapi-fhir-cli-jpaserv...