43 matches found
airflow-provider-appops (>=0.0.3, <=0.0.4), astronomer-providers (1.0.0) +1 more potentially affected by CVE-2026-81914 via apache-airflow-providers-google (6.8.0)
apache-airflow-providers-google PYPI version 6.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - airflow-provider-appops =0.0.3, =0.0.4, =0.1.4 Source cves: CVE-2026-81914 Source advisory:...
Malicious code in @zalastax/nolb-dop (npm)
The package @zalastax/nolb-dop was found to contain malicious code. --- Credit: OpenSSF source...
airflow-provider-appops (>=0.0.3, <=0.0.4), astronomer-providers (1.0.0) +1 more potentially affected by CVE-2026-68868 via apache-airflow-providers-google (6.8.0)
apache-airflow-providers-google PYPI version 6.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - airflow-provider-appops =0.0.3, =0.0.4, =0.1.4 Source cves: CVE-2026-68868 Source advisory:...
carte-blanche (>=1.3.7, <=1.3.8), dop-python-pip-package (>=0.0.1, <=0.0.4) +2 more potentially affected by CVE-2025-71176 via pytest (3.7.2)
pytest PYPI version 3.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - carte-blanche =1.3.7, =0.0.1, =2.0.3, =2.0.6 - seleniumbase 1.14.6 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...
airflow-provider-appops (>=0.0.3, <=0.0.4), astronomer-providers (1.0.0) +1 more potentially affected by CVE-2023-25692 via apache-airflow-providers-google (6.8.0)
apache-airflow-providers-google PYPI version 6.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - airflow-provider-appops =0.0.3, =0.0.4, =0.1.4 Source cves: CVE-2023-25692 Source advisory:...
airflow-provider-appops (>=0.0.3, <=0.0.4), astronomer-providers (1.0.0) +1 more potentially affected by CVE-2026-49297 via apache-airflow-providers-google (6.8.0)
apache-airflow-providers-google PYPI version 6.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - airflow-provider-appops =0.0.3, =0.0.4, =0.1.4 Source cves: CVE-2026-49297 Source advisory:...
airflow-provider-appops (>=0.0.3, <=0.0.4), astronomer-providers (1.0.0) +1 more potentially affected by CVE-2026-49297 via apache-airflow-providers-google (6.8.0)
apache-airflow-providers-google PYPI version 6.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - airflow-provider-appops =0.0.3, =0.0.4, =0.1.4 Source cves: CVE-2026-49297 Source advisory:...
airflow-provider-appops (>=0.0.3, <=0.0.4), astronomer-providers (1.0.0) +1 more potentially affected by CVE-2023-25691 via apache-airflow-providers-google (6.8.0)
apache-airflow-providers-google PYPI version 6.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - airflow-provider-appops =0.0.3, =0.0.4, =0.1.4 Source cves: CVE-2023-25691 Source advisory:...
airflow-provider-appops (>=0.0.3, <=0.0.4), astronomer-providers (1.0.0) +1 more potentially affected by CVE-2026-45361 via apache-airflow-providers-google (6.8.0)
apache-airflow-providers-google PYPI version 6.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - airflow-provider-appops =0.0.3, =0.0.4, =0.1.4 Source cves: CVE-2026-45361 Source advisory:...
airflow-provider-appops (>=0.0.3, <=0.0.4), astronomer-providers (1.0.0) +1 more potentially affected by CVE-2026-45361 via apache-airflow-providers-google (6.8.0)
apache-airflow-providers-google PYPI version 6.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on apache-airflow-providers-google and may be impacted: - airflow-provider-appops =0.0.3, =0.0.4, =0.1.4 Source cves: CVE-2026-45361 Source advisory:...
carte-blanche (>=1.3.7, <=1.3.8), dop-python-pip-package (>=0.0.1, <=0.0.4) +2 more potentially affected by CVE-2025-71176 via pytest (3.7.2)
pytest PYPI version 3.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - carte-blanche =1.3.7, =0.0.1, =2.0.3, =2.0.6 - seleniumbase 1.14.6 Source cves: CVE-2025-71176 Source advisory: OSV:GHSA-6W46-J5RX-G56G...
Malicious code in @zalastax/nolb-dop (npm)
The package @zalastax/nolb-dop was found to contain malicious code...
MAL-2025-43188 Malicious code in @zalastax/nolb-dop (npm)
The package @zalastax/nolb-dop was found to contain malicious code...
MAL-2025-9940 Malicious code in @zalastax/nolb-_dop (npm)
The package @zalastax/nolb-dop was found to contain malicious code...
WordPress DOP Shortcodes plugin <= 1.2 - Contributor+ Stored XSS via Shortcode vulnerability
Contributor+ Stored XSS via Shortcode vulnerability discovered by Bob Matyas in WordPress Plugin DOP Shortcodes versions = 1.2...
CVE-2024-4377
The DOP Shortcodes WordPress plugin through 1.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...
CVE-2024-4377
The DOP Shortcodes WordPress plugin through 1.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...
CVE-2024-4377 DOP Shortcodes <= 1.2 - Contributor+ Stored XSS via Shortcode
The DOP Shortcodes WordPress plugin through 1.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...
CVE-2024-4377 DOP Shortcodes <= 1.2 - Contributor+ Stored XSS via Shortcode
The DOP Shortcodes WordPress plugin through 1.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...
