Unicornscan 0.4.43

Unicornscan is an information gathering and correlation engine built for and by members of the security research and testing communities. It was designed to provide an engine that is Scalable, Accurate, Flexible, and Efficient. It is released for the community to use under the terms of the GPL...

Many Hands Make Light Work: An LLM-Based Multi-Agent System for Detecting Malicious PyPI Packages

Malicious code in open-source repositories such as PyPI poses a growing threat to software supply chains. Traditional rule-based tools often overlook the semantic patterns in source code that are crucial for identifying adversarial components. Large language models LLMs show promise for software...

Linux Distros Unpatched Vulnerability : CVE-2026-23528

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Dask distributed is a distributed task scheduler for Dask. Prior to 2026.1.0, when Jupyter Lab, jupyter- server-proxy, and Dask distributed are all run together...

ICE Agent Doxxing Platform was Crippled After Coordinated DDoS Attack

The activist website called "ICE List" was offline after a massive DDoS attack. The crash followed a leak of 4,500 federal agent names linked to the Renee Nicole Good shooting...

Cross-site Scripting (XSS)

Overview distributed is a Distributed scheduler for Dask Affected versions of this package are vulnerable to Cross-site Scripting XSS via the interaction between Jupyter Lab, jupyter-server-proxy, and the Dask dashboard. An attacker can execute arbitrary code by enticing a user to click a phishin...

bioio-qptiff (0.1.0), celldega (>=0.24.0, <=0.27.0) +22 more potentially affected by CVE-2026-23528 via distributed (>=2025.10.0, <=2025.12.0)

distributed PYPI version =2025.10.0, =0.24.0, =0.1.0, =0.1.15, =0.1.0, =0.1.8, =0.6.3, =0.2.0, =0.1.0, =0.2.39, =2510.1.0, =0.2.0, =0.4.5, =0.5.9 and more Source cves: CVE-2026-23528 Source advisory: SNYK:PYTHON-DISTRIBUTED-15032761...

calitp-data-analysis (>=2026.1.30, <=2026.3.5), cellmap-analyze (>=0.0.2, <=0.6.2) +58 more potentially affected by CVE-2026-23528 via distributed (>=2025.1.0, <=2025.9.1)

distributed PYPI version =2025.1.0, =2026.1.30, =0.0.2, =1.0.0, =25.4.0, =25.4.0, =25.10.0, =25.4.0, =25.4.0, =25.4.0, =25.4.0, =25.4.0, =25.4.0, =25.5.0, =25.10.0, =25.10.1 and more Source cves: CVE-2026-23528 Source advisory: SNYK:PYTHON-DISTRIBUTED-15032761...

PYSEC-2026-169

Dask distributed is a distributed task scheduler for Dask. Prior to 2026.1.0, when Jupyter Lab, jupyter-server-proxy, and Dask distributed are all run together, it is possible to craft a URL which will result in code being executed by Jupyter due to a cross-side-scripting XSS bug in the Dask...

PYSEC-2026-169

Dask distributed is a distributed task scheduler for Dask. Prior to 2026.1.0, when Jupyter Lab, jupyter-server-proxy, and Dask distributed are all run together, it is possible to craft a URL which will result in code being executed by Jupyter due to a cross-side-scripting XSS bug in the Dask...

oracle-automlx (23.2.3) potentially affected by CVE-2026-23528 via distributed (2022.2.1)

distributed PYPI version 2022.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - oracle-automlx 23.2.3 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

mobilkit (>=0.2.5, <=0.2.6) potentially affected by CVE-2026-23528 via distributed (2022.4.1)

distributed PYPI version 2022.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - mobilkit =0.2.5, =0.2.6 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

ax-env (>=0.2.6, <=0.3.1), dask-cuda (>=22.6.0a220528, <=22.8.0a220616) +5 more potentially affected by CVE-2026-23528 via distributed (2022.5.2)

distributed PYPI version 2022.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - ax-env =0.2.6, =22.6.0a220528, =0.1.8, =2022.7.0, =0.0.7, =0.0.15 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

launchcontainers (>=0.0.1, <=0.3.16) potentially affected by CVE-2026-23528 via distributed (2022.7.0)

distributed PYPI version 2022.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - launchcontainers =0.0.1, =0.3.16 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

dask-sql (2022.8.0), simmate (>=0.8.0, <=0.11.1) potentially affected by CVE-2026-23528 via distributed (2022.8.0)

distributed PYPI version 2022.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - dask-sql 2022.8.0 - simmate =0.8.0, =0.11.1 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

calitp-data-analysis (>=2023.9.18, <=2024.5.24) potentially affected by CVE-2026-23528 via distributed (2022.8.1)

distributed PYPI version 2022.8.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - calitp-data-analysis =2023.9.18, =2024.5.24 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

dask-sql (2022.10.1), geoapps (>=0.9.0.post1, <=0.9.2) +2 more potentially affected by CVE-2026-23528 via distributed (2022.10.0)

distributed PYPI version 2022.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - dask-sql 2022.10.1 - geoapps =0.9.0.post1, =0.3.0, =0.3.3 - peak-finder-app 0.1.0a1 Source cves: CVE-2026-23528 Source advisory:...

analysis-tools (0.2.1), esi-acme (>=2022.11.0, <=2022.12.0) +2 more potentially affected by CVE-2026-23528 via distributed (2022.10.2)

distributed PYPI version 2022.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - analysis-tools 0.2.1 - esi-acme =2022.11.0, =0.1.0b1, =0.1.0 - simpeg-drivers 0.1.0b1 Source cves: CVE-2026-23528 Source advisory:...

coiled-runtime (>=0.2.0, <=0.2.1), dask-cuda (>=22.12.0a221208, <=23.2.0a221212) +3 more potentially affected by CVE-2026-23528 via distributed (2022.11.1)

distributed PYPI version 2022.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - coiled-runtime =0.2.0, =22.12.0a221208, =1.0.0, =0.1.7, =0.4.36 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

flowcept (>=0.0.122, <=0.0.133), incremental-trees (0.6.0) potentially affected by CVE-2026-23528 via distributed (2022.12.0)

distributed PYPI version 2022.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - flowcept =0.0.122, =0.0.133 - incremental-trees 0.6.0 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...

prefect-dask (0.2.4) potentially affected by CVE-2026-23528 via distributed (2023.3.1)

distributed PYPI version 2023.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on distributed and may be impacted: - prefect-dask 0.2.4 Source cves: CVE-2026-23528 Source advisory: OSV:PYSEC-2026-169...