airflow-provider-skypilot (0.1.3), autodistill-efficient-yolo-world (>=0.1.0, <=0.1.1) +28 more potentially affected by CVE-2026-13482 via skypilot (>=0.2.2, <=0.13.0)

skypilot PYPI version =0.2.2, =0.1.0, =0.1.2.dev0, =0.1.4, =0.12.0, =0.1.4, =0.1.1, =0.9.9, =0.9.9rc23, =0.9.9rc23, =0.9.9, =0.9.9, =1.0.2, =0.1.0, =0.12.1 and more Source cves: CVE-2026-13482 Source advisory: SNYK:PYTHON-SKYPILOT-17675441...

CVE-2026-13482

creationtimestamp| type| source ---|---|--- 2026-06-28 05:50:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpdbpoptbv23 2026-06-28 07:30:27+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mpdhcgnhzm2d 2026-06-29 19:45:24+00:00| seen|...

CVE-2026-13482

A vulnerability was detected in skypilot-org skypilot up to 0.12.0. Impacted is the function username.encode of the file sky/users/server.py of the component User ID Handler. The manipulation results in use of weak hash. The attack may be performed from remote. This attack is characterized by hig...