Label Studio < 1.16.0 - Cross-Site Scripting Detection

Label Studio prior to version 1.16.0 contains a cross-site scripting caused by rendering unsanitized user-provided HTML in the /projects/upload-example endpoint, letting attackers execute arbitrary JavaScript via crafted labelconfig in a GET request, exploit requires victims to visit malicious UR...

CVE-2026-66299: Uncontrolled Resource Consumption

Uncontrolled Resource Consumption vulnerability in Apache Tomcat's WebSocket chat example. This issue affects Apache Tomcat: from 11.0.0-M20 through 11.0.24, from 10.1.24 through 10.1.57, from 9.0.89 through 9.0.120. Users who have followed the security guidance to remove the examples web...

PT-2026-65495

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 11.0.0-M20 through 11.0.24 Apache Tomcat versions 10.1.24 through 10.1.57 Apache Tomcat versions 9.0.89 through 9.0.120 Description An uncontrolled resource consumption issue exists in the WebSocket chat example. The...

Malicious Package

Overview pg-expense-example is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious Package

Overview afterpay-sdk-example-server is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

org.openidentityplatform.opendj:opendj-dsml-servlet (4.5.3), org.openidentityplatform.opendj:opendj-embedded-server-examples (4.5.3) +3 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.5.3)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.opendj:opendj-dsml-servlet 4.5...

org.openidentityplatform.openam:embedded.opendj (>=14.6.1.1, <=14.6.1.2), org.openidentityplatform.openam:openam-slf4j (14.6.1) +3 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.4.9)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.4.9 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.openam:embedded.opendj...

org.openidentityplatform.opendj:opendj-dsml-servlet (4.5.1), org.openidentityplatform.opendj:opendj-embedded-server-examples (4.5.1) +3 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.5.1)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.opendj:opendj-dsml-servlet 4.5...

org.openidentityplatform.opendj:opendj-dsml-servlet (4.4.13), org.openidentityplatform.opendj:opendj-embedded-server-examples (4.4.13) +2 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.4.13)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.4.13 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.opendj:opendj-dsml-servlet...

org.openidentityplatform.opendj:opendj-dsml-servlet (4.5.7), org.openidentityplatform.opendj:opendj-embedded-server-examples (4.5.7) +3 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.5.7)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.5.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.opendj:opendj-dsml-servlet 4.5...

org.openidentityplatform.opendj:opendj-dsml-servlet (4.4.12), org.openidentityplatform.opendj:opendj-embedded-server-examples (4.4.12) +2 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.4.12)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.4.12 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.opendj:opendj-dsml-servlet...

org.openidentityplatform.opendj:opendj-dsml-servlet (4.4.14), org.openidentityplatform.opendj:opendj-embedded-server-examples (4.4.14) +2 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.4.14)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.4.14 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.opendj:opendj-dsml-servlet...

org.openidentityplatform.opendj:opendj-dsml-servlet (4.4.15), org.openidentityplatform.opendj:opendj-embedded-server-examples (4.4.15) +3 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.4.15)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.4.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.opendj:opendj-dsml-servlet...

org.openidentityplatform.openam:openam-slf4j (15.1.4), org.openidentityplatform.opendj:opendj-dsml-servlet (4.9.2) +5 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.9.2)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.openam:openam-slf4j 15.1.4 -...

org.openidentityplatform.openam:openam-slf4j (15.2.1), org.openidentityplatform.opendj:opendj-dsml-servlet (4.10.1) +5 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.10.1)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.openam:openam-slf4j 15.2.1 -...

org.openidentityplatform.opendj:opendj-dsml-servlet (4.9.1), org.openidentityplatform.opendj:opendj-embedded (4.9.1) +4 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.9.1)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.9.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.opendj:opendj-dsml-servlet 4.9...

org.openidentityplatform.openam:openam-slf4j (15.1.5), org.openidentityplatform.opendj:opendj-dsml-servlet (4.9.3) +5 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.9.3)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.9.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.openam:openam-slf4j 15.1.5 -...

org.openidentityplatform.openam:openam-slf4j (15.1.6), org.openidentityplatform.opendj:opendj-dsml-servlet (4.9.4) +5 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.9.4)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.9.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.openam:openam-slf4j 15.1.6 -...

org.openidentityplatform.openam:openam-slf4j (15.2.2), org.openidentityplatform.opendj:opendj-dsml-servlet (4.10.2) +5 more potentially affected by CVE-2026-73644 via org.openidentityplatform.opendj:opendj-server-legacy (4.10.2)

org.openidentityplatform.opendj:opendj-server-legacy MAVEN version 4.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.openidentityplatform.opendj:opendj-server-legacy and may be impacted: - org.openidentityplatform.openam:openam-slf4j 15.2.2 -...

example-pkg-naturalett (>=6.0.0, <=12.6.0) potentially affected by CVE-2026-50271 via ddtrace (0.37.0)

ddtrace PYPI version 0.37.0 is affected by a known vulnerability. The following packages have a transitive dependency on ddtrace and may be impacted: - example-pkg-naturalett =6.0.0, =12.6.0 Source cves: CVE-2026-50271 Source advisory: OSV:PYSEC-2026-3461...