python-dev-tools (>=2019.4.24, <=2019.5.3) potentially affected by CVE-2026-1703 via pip (19.1.0)

pip PYPI version 19.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - python-dev-tools =2019.4.24, =2019.5.3 Source cves: CVE-2026-1703 Source advisory: OSV:GHSA-6VGW-5PG2-W6JP...

getitfixed (>=1.0.0.dev20191121, <=1.0.0.dev20191126), neuroharmony (>=0.0.1, <=0.1.10) +2 more potentially affected by CVE-2025-71176 via pytest (5.1.3)

pytest PYPI version 5.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - getitfixed =1.0.0.dev20191121, =0.0.1, =1.5.3, =1.18.4 Source cves: CVE-2025-71176 Source advisory: OSV:GHSA-6W46-J5RX-G56G...

ftw (>=1.2.3, <=1.2.4), python-dev-tools (2019.6.2) potentially affected by CVE-2025-71176 via pytest (4.6.0)

pytest PYPI version 4.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - ftw =1.2.3, =1.2.4 - python-dev-tools 2019.6.2 Source cves: CVE-2025-71176 Source advisory: OSV:GHSA-6W46-J5RX-G56G...

python-dev-tools (2019.11.15) potentially affected by CVE-2025-71176 via pytest (5.2.3)

pytest PYPI version 5.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - python-dev-tools 2019.11.15 Source cves: CVE-2025-71176 Source advisory: OSV:GHSA-6W46-J5RX-G56G...

django-clite (>=0.2.11, <=0.3.0), python-dev-tools (>=2019.11.20, <=2019.11.25) +1 more potentially affected by CVE-2025-71176 via pytest (5.3.0)

pytest PYPI version 5.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - django-clite =0.2.11, =2019.11.20, =0.1.1, =0.1.3 Source cves: CVE-2025-71176 Source advisory: OSV:GHSA-6W46-J5RX-G56G...

dostoevsky (>=0.2.0, <=0.2.1), pytest-gherkin (>=0.1.4, <=0.1.6) +1 more potentially affected by CVE-2025-71176 via pytest (5.0.0)

pytest PYPI version 5.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - dostoevsky =0.2.0, =0.1.4, =2019.6.29, =2019.7.2 Source cves: CVE-2025-71176 Source advisory: OSV:GHSA-6W46-J5RX-G56G...

bolinette (>=0.0.12, <=0.0.19), mlbackend (0.0.3) +6 more potentially affected by CVE-2025-71176 via pytest (5.3.1)

pytest PYPI version 5.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - bolinette =0.0.12, =0.0.2, =1.0.0, =2019.11.27, =0.0.12, =2019.12.13.0, =1.2.1, =1.2.4 Source cves: CVE-2025-71176 Source advisory:...

python-dev-tools (>=2019.8.16, <=2019.8.19), styletransfer (>=0.8.0, <=0.8.2) potentially affected by CVE-2025-71176 via pytest (5.1.0)

pytest PYPI version 5.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - python-dev-tools =2019.8.16, =0.8.0, =0.8.2 Source cves: CVE-2025-71176 Source advisory: OSV:GHSA-6W46-J5RX-G56G...

mask-anonymization-framework (>=1.2.0, <=1.3.2), python-dev-tools (2019.8.24) +2 more potentially affected by CVE-2025-71176 via pytest (5.1.1)

pytest PYPI version 5.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - mask-anonymization-framework =1.2.0, =0.0.1, =0.0.1, =0.0.4 Source cves: CVE-2025-71176 Source advisory: OSV:GHSA-6W46-J5RX-G56G...

geopackage-python (>=2.1.0.1, <=2.2.0.2), getccwarc (>=0.0.1.dev23, <=0.0.1.dev34) +5 more potentially affected by CVE-2025-71176 via pytest (4.6.3)

pytest PYPI version 4.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - geopackage-python =2.1.0.1, =0.0.1.dev23, =1.2.2, =2019.6.13, =0.0.2, =0.0.3 Source cves: CVE-2025-71176 Source advisory: OSV:GHSA-6W46-J5RX-G56G...

Important: Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Ansible DevSpaces Container Release Update

An update is now available for Red Hat Ansible Automation Platform Ansible DevSpaces Container Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied...

EUVD-2021-24459

Malware in sbrugna...

The vulnerability of the Dev Tools component in the Xcode integrated development environment for macOS operating systems allows a hacker to trigger a service failure.

The vulnerability of the Dev Tools component in the Xcode integrated development environment for macOS operating systems exists due to the copying of buffers without checking the size of the input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions...

The vulnerability of the Dev Tools component in the Xcode integrated development environment for macOS operating systems allows a hacker to trigger a service failure.

The vulnerability of the Dev Tools component in the Xcode integrated development environment for macOS operating systems exists due to the copying of buffers without checking the size of the input data. Exploiting this vulnerability can allow an attacker to cause a service failure...

python-dev-tools (>=2019.7.25, <=2019.8.8) potentially affected by CVE-2025-8869 via pip (19.2.1)

pip PYPI version 19.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - python-dev-tools =2019.7.25, =2019.8.8 Source cves: CVE-2025-8869 Source advisory: OSV:GHSA-4XH5-X5GV-QWPH...

notebooktoall (>=0.1.7, <=0.2.0), python-dev-tools (>=2019.2.25, <=2019.3.1) potentially affected by CVE-2025-8869 via pip (19.0.2)

pip PYPI version 19.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on pip and may be impacted: - notebooktoall =0.1.7, =2019.2.25, =2019.3.1 Source cves: CVE-2025-8869 Source advisory: OSV:GHSA-4XH5-X5GV-QWPH...

Malicious code in sglk-dev-tools (npm)

The package sglk-dev-tools was found to contain malicious code...

MAL-2025-33040 Malicious code in sglk-dev-tools (npm)

The package sglk-dev-tools was found to contain malicious code...

PT-2025-26211 · WordPress · Ai Engine Wordpress Plugin

Name of the Vulnerable Software and Affected Versions: WordPress AI Engine plugin affected versions not specified Description: A critical flaw in WordPress's AI Engine plugin allows subscribers to escalate privileges and take over websites with Dev Tools/MCP enabled. Recommendations: Update the...

mozilla: Internal event interfaces were exposed to web content when browser EventHandler listener callbacks ran

The Mozilla Foundation's Security Advisory: Internal browser event interfaces were exposed to web content when privileged EventHandler listener callbacks ran for those events. Web content that tried to use those interfaces would not be able to use them with elevated privileges, but their presence...