Astra Linux – Vulnerability in Chromium

Before version 95.0.4638.54, using "use after free" in Dev Tools in Google Chrome allowed a remote attacker to potentially exploit heap corruption through a crafted HTML page...

Astra Linux – Vulnerability in Chromium

A heap buffer overflow in the Settings component of Google Chrome prior to version 95.0.4638.54 allowed a remote attacker to interact with Dev Tools, potentially exploiting heap corruption through a crafted HTML page...

CLEANSTART-2024-DB58731 Insufficient data validation in Dev Tools in Google Chrome prior to 101

Security vulnerability affects the chromium package. Insufficient data validation in Dev Tools in Google Chrome prior to 101...

CLEANSTART-2024-JJ45214 Use after free in Dev Tools in Google Chrome prior to 101

Security vulnerability affects the chromium package. Use after free in Dev Tools in Google Chrome prior to 101...

Malicious Package

Overview helpersutils-dev-tools is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

MAL-2026-16465 Malicious code in helpersutils-dev-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b7208dea3cf1742ac01332c17db9df968fd4a105fbccaf0b5388162b0f3673 The package presents itself as 'Development utility helpers' but its main module executes an IIFE at require-time that issues an Image request to...

Malicious code in helpersutils-dev-tools (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 85b7208dea3cf1742ac01332c17db9df968fd4a105fbccaf0b5388162b0f3673 The package presents itself as 'Development utility helpers' but its main module executes an IIFE at require-time that issues an Image request to...

Malicious Package

Overview helpersutils-dev-tools is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this packag...

dev-tools-eagle (>=0.9.0, <=0.9.4) potentially affected by CVE-2026-55253 via langgraph-store-mongodb (0.1.1)

langgraph-store-mongodb PYPI version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-store-mongodb and may be impacted: - dev-tools-eagle =0.9.0, =0.9.4 Source cves: CVE-2026-55253 Source advisory: MEND:CVE-2026-55253...

Astra Linux – Vulnerability in Firefox and Thunderbird

Internal browser event interfaces were exposed to web content when privileged EventHandler listener callbacks were executed for those events. Web content that attempted to use those interfaces would not be able to do so with elevated privileges. However, the presence of these interfaces indicated...

dev-tools-eagle (>=0.9.0, <=0.9.4) potentially affected by CVE-2026-55253 via langgraph-store-mongodb (0.1.1)

langgraph-store-mongodb PYPI version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-store-mongodb and may be impacted: - dev-tools-eagle =0.9.0, =0.9.4 Source cves: CVE-2026-55253 Source advisory: OSV:PYSEC-2026-3860...

dev-tools-eagle (>=0.9.0, <=0.9.4) potentially affected by CVE-2026-55253 via langgraph-store-mongodb (0.1.1)

langgraph-store-mongodb PYPI version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-store-mongodb and may be impacted: - dev-tools-eagle =0.9.0, =0.9.4 Source cves: CVE-2026-55253 Source advisory: GHSA-533J-2V4Q-MW5H...

dev-tools-eagle (>=0.9.0, <=0.9.4) potentially affected by CVE-2026-55253 via langgraph-store-mongodb (0.1.1)

langgraph-store-mongodb PYPI version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-store-mongodb and may be impacted: - dev-tools-eagle =0.9.0, =0.9.4 Source cves: CVE-2026-55253 Source advisory: OSV:GHSA-533J-2V4Q-MW5H...

notebooktoall (>=0.1.7, <=0.2.0), python-dev-tools (>=2019.2.25, <=2019.3.1) potentially affected by CVE-2026-13346 via pip (19.0.2)

pip PYPI version 19.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - notebooktoall =0.1.7, =2019.2.25, =2019.3.1 Source cves: CVE-2026-13346 Source advisory: OSV:GHSA-QWM4-QH6W-59XR...

chalice (1.12.0), commandfrog (>=0.2.1, <=0.3.1) +12 more potentially affected by CVE-2026-13346 via pip (19.3.1)

pip PYPI version 19.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - chalice 1.12.0 - commandfrog =0.2.1, =0.1.0, =0.8.1, =0.4.11, =0.0.3, =2.4.0.19073113, =0.0.1, =2019.10.25, =0.0.1a0, =0.1.1, =0.1.2 - smartleia 1.0.1...

python-dev-tools (>=2019.7.25, <=2019.8.8) potentially affected by CVE-2026-13346 via pip (19.2.1)

pip PYPI version 19.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - python-dev-tools =2019.7.25, =2019.8.8 Source cves: CVE-2026-13346 Source advisory: OSV:GHSA-QWM4-QH6W-59XR...

diacamma-asso (>=2.3.0.18070322, <=2.3.11.19062511), diacamma-financial (>=2.3.0.18072813, <=2.3.11.19062210) +8 more potentially affected by CVE-2026-13346 via pip (19.1.1)

pip PYPI version 19.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - diacamma-asso =2.3.0.18070322, =2.3.0.18072813, =2.3.0.18073020, =2.3.10.19052414, =2.3.4.19022609, =2.3.2.19022615, =2.3.0.18070322, =1.4.5, =2019.5.6,...

python-dev-tools (>=2019.4.24, <=2019.5.3) potentially affected by CVE-2026-13346 via pip (19.1.0)

pip PYPI version 19.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - python-dev-tools =2019.4.24, =2019.5.3 Source cves: CVE-2026-13346 Source advisory: OSV:GHSA-QWM4-QH6W-59XR...

python-dev-tools (>=2019.8.14, <=2019.8.24) potentially affected by CVE-2026-13346 via pip (19.2.2)

pip PYPI version 19.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - python-dev-tools =2019.8.14, =2019.8.24 Source cves: CVE-2026-13346 Source advisory: OSV:GHSA-QWM4-QH6W-59XR...

python-dev-tools (>=2019.7.25, <=2019.8.8) potentially affected by CVE-2026-13346 via pip (19.2.1)

pip PYPI version 19.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - python-dev-tools =2019.7.25, =2019.8.8 Source cves: CVE-2026-13346 Source advisory: OSV:PYSEC-2026-3721...