sec-edgar-agentkit-smolagents (0.1.0) potentially affected by CVE-2026-4963 via smolagents (0.1.3)

smolagents PYPI version 0.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on smolagents and may be impacted: - sec-edgar-agentkit-smolagents 0.1.0 Source cves: CVE-2026-4963 Source advisory: OSV:PYSEC-2026-3066...

sec-edgar-agentkit-smolagents (0.1.0) potentially affected by CVE-2026-2654 via smolagents (0.1.3)

smolagents PYPI version 0.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on smolagents and may be impacted: - sec-edgar-agentkit-smolagents 0.1.0 Source cves: CVE-2026-2654 Source advisory: OSV:PYSEC-2026-3067...

sec-edgar-agentkit-smolagents (0.1.0) potentially affected by CVE-2025-11844 via smolagents (0.1.3)

smolagents PYPI version 0.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on smolagents and may be impacted: - sec-edgar-agentkit-smolagents 0.1.0 Source cves: CVE-2025-11844 Source advisory: OSV:PYSEC-2026-1930...

sec-edgar-agentkit-smolagents (0.1.0) potentially affected by CVE-2025-14931 via smolagents (0.1.3)

smolagents PYPI version 0.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on smolagents and may be impacted: - sec-edgar-agentkit-smolagents 0.1.0 Source cves: CVE-2025-14931 Source advisory: OSV:PYSEC-2026-543...

sec-edgar-agentkit-smolagents (0.1.0) potentially affected by CVE-2025-5120 via smolagents (0.1.3)

smolagents PYPI version 0.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on smolagents and may be impacted: - sec-edgar-agentkit-smolagents 0.1.0 Source cves: CVE-2025-5120 Source advisory: OSV:PYSEC-2026-542...

CVE-2026-52704: Improper Control of Generation of Code

Improper Control of Generation of Code 'Code Injection' vulnerability in Edgar Rojas WooCommerce PDF Invoice Builder allows Remote Code Inclusion. This issue affects WooCommerce PDF Invoice Builder: from n/a through 2.0.8...

sec-edgar-agentkit-smolagents (0.1.0) potentially affected by CVE-2026-4963 via smolagents (0.1.3)

smolagents PYPI version 0.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on smolagents and may be impacted: - sec-edgar-agentkit-smolagents 0.1.0 Source cves: CVE-2026-4963 Source advisory: OSV:GHSA-54FQ-V6X8-244G...

sec-edgar-agentkit-smolagents (0.1.0) potentially affected by CVE-2026-2654 via smolagents (0.1.3)

smolagents PYPI version 0.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on smolagents and may be impacted: - sec-edgar-agentkit-smolagents 0.1.0 Source cves: CVE-2026-2654 Source advisory: OSV:GHSA-JXGV-6J54-WWC7...

sec-edgar-agentkit-smolagents (0.1.0) potentially affected by CVE-2025-14931 via smolagents (0.1.3)

smolagents PYPI version 0.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on smolagents and may be impacted: - sec-edgar-agentkit-smolagents 0.1.0 Source cves: CVE-2025-14931 Source advisory: OSV:GHSA-Q9R5-6HRR-9PH7...

sec-edgar-agentkit-smolagents (0.1.0) potentially affected by CVE-2025-11844 via smolagents (0.1.3)

smolagents PYPI version 0.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on smolagents and may be impacted: - sec-edgar-agentkit-smolagents 0.1.0 Source cves: CVE-2025-11844 Source advisory: OSV:GHSA-8MF9-RMGW-33QC...

sec-edgar-agentkit-smolagents (0.1.0) potentially affected by CVE-2025-5120 via smolagents (0.1.3)

smolagents PYPI version 0.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on smolagents and may be impacted: - sec-edgar-agentkit-smolagents 0.1.0 Source cves: CVE-2025-5120 Source advisory: OSV:GHSA-6V92-R5MX-H5FX...

WordPress WooCommerce PDF Invoice Builder plugin <= 1.2.148 - Cross Site Request Forgery (CSRF) Vulnerability

Cross Site Request Forgery CSRF Vulnerability discovered by Nguyen Xuan Chien in WordPress Plugin WooCommerce PDF Invoice Builder versions = 1.2.148...

MAL-2024-2151 Malicious code in down_load_ebook_cambiemos_de_via_by_edgar_morin_s4uv8 (npm)

--- -= Per source details. Do not edit below this line.=-...

WordPress WooCommerce PDF Invoice Builder Plugin <= 1.2.103 is vulnerable to Cross Site Scripting (XSS)

Software WooCommerce PDF Invoice Builder Type Plugin Vulnerable versions = 1.2.103 Fixed in 1.2.104 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-46076 Patch priority High CVSS severity High 7.1 Developer Edgar Rojas PSID e196625e8b7e Credits LEE S...

WordPress WooCommerce PDF Invoice Builder Plugin <= 1.2.90 is vulnerable to Cross Site Scripting (XSS)

Software WooCommerce PDF Invoice Builder Type Plugin Vulnerable versions = 1.2.90 Fixed in 1.2.91 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-4160 Patch priority Low CVSS severity Low 5.9 Developer Edgar Rojas PSID 27b991f0b0a1 Credits Marco...

WordPress WooCommerce PDF Invoice Builder Plugin <= 1.2.91 is vulnerable to Broken Access Control

Software WooCommerce PDF Invoice Builder Type Plugin Vulnerable versions = 1.2.91 Fixed in 1.2.92 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-4245 Patch priority Low CVSS severity Low 4.3 Developer Edgar Rojas PSID f1eb4f613ca1 Credits Marco Wotschka...

WordPress WooCommerce PDF Invoice Builder Plugin <= 1.2.89 is vulnerable to SQL Injection

Software WooCommerce PDF Invoice Builder Type Plugin Vulnerable versions = 1.2.89 Fixed in 1.2.90 OWASP Top 10 A3: Injection Classification SQL Injection CVE CVE-2023-3677 Patch priority High CVSS severity High 8.5 Developer Edgar Rojas PSID 2cec7ed323a9 Credits Marco Wotschka Required privilege...

WordPress WooCommerce PDF Invoice Builder Plugin <= 1.2.90 is vulnerable to Cross Site Request Forgery (CSRF)

Software WooCommerce PDF Invoice Builder Type Plugin Vulnerable versions = 1.2.90 Fixed in 1.2.91 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-3764 Patch priority Low CVSS severity Low 4.3 Developer Edgar Rojas PSID 32ad6bbe40fc Credits Marco...

Kim Kardashian gets huge fine for crypto ad

The Securities and Exchange Commission SEC announced in a recent press release that it's charging celebrity influencer Kim Kardashian for violating Section 17b of the Securities Act of 1933, or the anti-touting provision. Kardashian was paid to promote EthereumMax or EMAX, a crypto asset security...

Avoiding Smash and Grab Under the SEC’s Proposed Cyber Rule

The SEC recently proposed a regulation to require all public companies to report cybersecurity incidents within four days of determining that the incident is material. While Rapid7 generally supports the proposed rule, we are concerned that the rule requires companies to publicly disclose a cyber...