CVE-2026-102185

The routing protocol daemon (rpd) in Juniper Networks Junos OS and Junos OS Evolved is affected by a Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability. A remote network attacker can trigger a denial of service (DoS) by leveraging EVPN multihoming with preference-based designate...

CVE-2026-102185 Junos OS and Junos OS Evolved: An attacker causes an rpd denial of service when EVPN multihoming preference-based DF election is used

A Loop with Unreachable Exit Condition 'Infinite Loop' vulnerability in the routing protocol daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows a remote network attacker to cause a denial of service via EVPN multihoming with preference-based designated-forwarder election...

bunkatopics (>=0.26.0, <=0.34.0), df-graph-construction (0.1.0) +3 more potentially affected by CVE-2026-68770 via sentence-transformers (2.2.0)

sentence-transformers PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - bunkatopics =0.26.0, =0.34.0 - df-graph-construction 0.1.0 - envbert 1.0.6 - leet-topic 0.0.3 - textdiversity 0.0.1...

Deep-Fake CAPTCHA: Mitigating Next-Generation Social Engineering Attacks

This paper presents DF-CAPTCHA, an active defense against real-time deepfake impersonation in voice and video calls. Instead of passively searching for artifacts, DF-CAPTCHA prompts the caller to perform simple challenge-response tasks that are easy for humans but difficult for current real-time...

bunkatopics (>=0.26.0, <=0.34.0), df-graph-construction (0.1.0) +3 more potentially affected by CVE-2026-68770 via sentence-transformers (2.2.0)

sentence-transformers PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - bunkatopics =0.26.0, =0.34.0 - df-graph-construction 0.1.0 - envbert 1.0.6 - leet-topic 0.0.3 - textdiversity 0.0.1...

coreutils bug fix and enhancement update

An update is available for coreutils. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The coreutils packages contain the GNU Core Utilities and represent a...

ALBA-2026:47115 None: coreutils bug fix and enhancement update

The coreutils packages contain the GNU Core Utilities and represent a combination of the previously used GNU fileutils, sh-utils, and textutils packages. Bug Fixes and Enhancements: Fix execution of the downstream tests in coreutils-df-direct.patch and coreutils-i18n.patch almalinux-8.10.z...

df-graph-construction (0.1.0), medcat (>=1.5.3, <=1.6.1) +1 more potentially affected by CVE-2026-66007 via datasets (2.2.2)

datasets PYPI version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - df-graph-construction 0.1.0 - medcat =1.5.3, =0.0.20, =0.1.1 Source cves: CVE-2026-66007 Source advisory: OSV:GHSA-379C-QX7V-6H59...

df-graph-construction (0.1.0), medcat (>=1.5.3, <=1.6.1) +1 more potentially affected by CVE-2026-66007 via datasets (2.2.2)

datasets PYPI version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - df-graph-construction 0.1.0 - medcat =1.5.3, =0.0.20, =0.1.1 Source cves: CVE-2026-66007 Source advisory: OSV:PYSEC-2026-3716...

appenginetaskutils (>=0.4.3.dev2, <=0.4.3), asc (>=0.1.0, <=0.3.1) +20 more potentially affected by CVE-2025-66221 via werkzeug (0.12.2)

werkzeug PYPI version 0.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on werkzeug and may be impacted: - appenginetaskutils =0.4.3.dev2, =0.1.0, =1.0.18, =0.1.0, =0.12.0, =2.10.60, =2.0.2, =0.1.0, =0.1.0, =0.5.0 - nailpack-flask 0.1.0 - nails 0.2.0...

D-Tale Command Execution Vulnerability

D-Tale is the combination of a Flask back-end and a React front-end to bring you an easy way to view & analyze Pandas data structures. Indtale\views.py, under the [email protected]"/chart-data/", the query parameters from the request are directly passed intorunqueryfor execution. And...

Malicious code in df-vision (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f31f7bc1ea70d57f022adc0005cee3e7e6190a458d9bc57a84b1c2966979db7 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Malicious Package

Overview df-vision is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

MAL-2026-6834 Malicious code in df-vision (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f31f7bc1ea70d57f022adc0005cee3e7e6190a458d9bc57a84b1c2966979db7 The package was found to contain malicious code or consuming dependency that contains malicious code Source: ghsa-malware...

Critical: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.18.23 security, enhancement & bug fix update

Red Hat OpenShift Data Foundation 4.18.23 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.18.23 security, enhancement & bug fix update FIXED BUGS: ========== DFBUGS-7032: RHODF 4.18.23 release NGINX: Arbitrary Code Execution Vulnerability CVE-2026-42945...

CVE-2026-7684

A security vulnerability has been detected in Edimax BR-6428nC up to 1.16. This impacts an unknown function of the file /goform/setWAN. Such manipulation of the argument pptpDfGateway leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed publicly and may be...

PT-2026-36674

Name of the Vulnerable Software and Affected Versions Edimax BR-6428nC versions prior to 1.17 Description A buffer overflow can be triggered remotely via an unknown function within the '/goform/setWAN' endpoint. This occurs through the manipulation of the pptpDfGateway argument. Recommendations A...

Malicious code in df-sandbox-test (npm)

Multiple evidences indicate malicious behaviors: data exfiltration, sensitive file access, obfuscated code, and suspicious network connections. --- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 97761ee82976dcee2c3d8438258e8ace733bec2d2c7e1020035e9e390f9fa02f The...

CVE-2026-4500 bagofwords1 bagofwords code_execution.py generate_df injection

A vulnerability was identified in bagofwords1 bagofwords up to 0.0.297. This impacts the function generatedf of the file backend/app/ai/codeexecution/codeexecution.py. Such manipulation leads to injection. The attack may be launched remotely. The exploit is publicly available and might be used...

CVE-2026-4500

Summary: CVE-2026-4500 affects bagofwords1 bagofwords (up to 0.0.297). The vulnerability targets the function generate_df in backend/app/ai/code_execution/code_execution.py, enabling injection via manipulation of inputs. The attack could be launched remotely and an exploit is publicly available. ...