federate (>=0.9.9, <=0.9.10) potentially affected by CVE-2026-71433 via langgraph-checkpoint-sqlite (2.0.7)

langgraph-checkpoint-sqlite PYPI version 2.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - federate =0.9.9, =0.9.10 Source cves: CVE-2026-71433 Source advisory: OSV:PYSEC-2026-3636...

federate (>=0.9.9, <=0.9.10) potentially affected by CVE-2026-71433 via langgraph-checkpoint-sqlite (2.0.7)

langgraph-checkpoint-sqlite PYPI version 2.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - federate =0.9.9, =0.9.10 Source cves: CVE-2026-71433 Source advisory: OSV:GHSA-47PJ-3JCM-6WHG...

federate (>=0.9.9, <=0.9.10) potentially affected by CVE-2025-67644 via langgraph-checkpoint-sqlite (2.0.7)

langgraph-checkpoint-sqlite PYPI version 2.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - federate =0.9.9, =0.9.10 Source cves: CVE-2025-67644 Source advisory: OSV:PYSEC-2026-1530...

federate (>=0.9.9, <=0.9.10), haistings (0.0.2) +5 more potentially affected by CVE-2025-8709 via langgraph-checkpoint-sqlite (>=2.0.0, <=2.0.10)

langgraph-checkpoint-sqlite PYPI version =2.0.0, =0.9.9, =1.0.1, =0.1.0a1, =0.1.0a24 Source cves: CVE-2025-8709 Source advisory: OSV:PYSEC-2026-1528...

agent-nexus-cli (>=0.1.0, <=0.1.31), agentiva (>=0.1.0, <=0.1.5) +6 more potentially affected by CVE-2026-48775 via langgraph-checkpoint (>=4.0.0, <=4.1.0)

langgraph-checkpoint PYPI version =4.0.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.9.16, =4.1.2, =0.1.5, =0.1.0, =0.1.3 Source cves: CVE-2026-48775 Source advisory: OSV:GHSA-FJQC-HQ36-QH5P...

federate (>=0.9.9, <=0.9.10) potentially affected by CVE-2025-67644 via langgraph-checkpoint-sqlite (2.0.7)

langgraph-checkpoint-sqlite PYPI version 2.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on langgraph-checkpoint-sqlite and may be impacted: - federate =0.9.9, =0.9.10 Source cves: CVE-2025-67644 Source advisory: OSV:GHSA-9RWJ-6RC7-P77C...

CVE-2025-27935

The OTP Integration Kit for PingFederate fails to enforce HTTP method validation and state validation properly. The server advances the authentication state without verifying the OTP, thereby bypassing multi-factor authentication...

CVE-2025-27935

The CVE-2025-27935 issue concerns the OTP Integration Kit for PingFederate. According to connected sources, it fails to enforce HTTP method validation and state validation, allowing the server to advance authentication without verifying the OTP and effectively bypassing multi-factor authenticatio...

Ping Identity One-Time Passcode Integration Kit for PingFederate security vulnerabilities

Ping Identity One-Time Passcode Integration Kit for PingFederate is a suite of software tools and adapters from Ping Identity USA. A security vulnerability exists in Ping Identity One-Time Passcode Integration Kit for PingFederate that stems from not properly validating the HTTP method and state,...

federate (>=0.9.9, <=0.9.10), haistings (0.0.2) +5 more potentially affected by CVE-2025-64104 via langgraph-checkpoint-sqlite (>=2.0.0, <=2.0.10)

langgraph-checkpoint-sqlite PYPI version =2.0.0, =0.9.9, =1.0.1, =0.1.0a1, =0.1.0a24 Source cves: CVE-2025-64104 Source advisory: OSV:GHSA-7P73-8JQX-23R8...

federate (>=0.9.9, <=0.9.10), haistings (0.0.2) +5 more potentially affected by CVE-2025-8709 via langgraph-checkpoint-sqlite (>=2.0.0, <=2.0.10)

langgraph-checkpoint-sqlite PYPI version =2.0.0, =0.9.9, =1.0.1, =0.1.0a1, =0.1.0a24 Source cves: CVE-2025-8709 Source advisory: GHSA-4H97-WPXP-3757...

federate (>=0.9.9, <=0.9.10), haistings (0.0.2) +5 more potentially affected by CVE-2025-8709 via langgraph-checkpoint-sqlite (>=2.0.0, <=2.0.10)

langgraph-checkpoint-sqlite PYPI version =2.0.0, =0.9.9, =1.0.1, =0.1.0a1, =0.1.0a24 Source cves: CVE-2025-8709 Source advisory: OSV:GHSA-4H97-WPXP-3757...

EUVD-2021-15589

Malware in sbrugna...

Ping Identity PingFederate security vulnerabilities

Ping Identity PingFederate is a flagship software-based federation server from US-based Ping Identity, Inc. for identity management. Ping Identity PingFederate suffers from a security vulnerability that stems from failure to clean user-supplied data and could lead to the execution of JavaScript...

CVE-2021-28938

Siren Federate before 6.8.14-10.3.9, 6.9.x through 7.6.x before 7.6.2-20.2, 7.7.x through 7.9.x before 7.9.3-21.6, 7.10.x before 7.10.2-22.2, and 7.11.x before 7.11.2-23.0 can leak user information across thread contexts. This occurs in opportunistic circumstances when there is concurrent query...

CVE-2025-30355

Synapse is an open source Matrix homeserver implementation. A malicious server can craft events which, when received, prevent Synapse version up to 1.127.0 from federating with other servers. The vulnerability has been exploited in the wild and has been fixed in Synapse v1.127.1. No known...

Ping Identity PingFederate PingOne MFA Integration Kit Security Vulnerability

Ping Identity PingFederate PingOne MFA Integration Kit is from Ping Identity This integration kit allows PingFederate to use the PingOne MFA service for multi-factor authentication MFA. A security vulnerability exists in Ping Identity PingFederate PingOne MFA Integration Kit versions prior to...

Ping Identity PingFederate code-related vulnerabilities

Ping Identity PingFederate is a flagship software-based federation server in the United States. It is used for identity management. Ping Identity PingFederate has a code issue vulnerability that stems from the presence of a Server Request Forgery SSRF vulnerability...

CVE-2024-25108 Insufficient authorization allowing elevated access to resources in pixelfed

Pixelfed is an open source photo sharing platform. When processing requests authorization was improperly and insufficiently checked, allowing attackers to access far more functionality than users intended, including to the administrative and moderator functionality of the Pixelfed server. This...

CVE-2024-25108 Insufficient authorization allowing elevated access to resources in pixelfed

Pixelfed is an open source photo sharing platform. When processing requests authorization was improperly and insufficiently checked, allowing attackers to access far more functionality than users intended, including to the administrative and moderator functionality of the Pixelfed server. This...