bittensor (>=2.1.0, <=3.5.1), converse-sfr (0.0.2) +8 more potentially affected by CVE-2026-0994 via protobuf (3.15.0)

protobuf PYPI version 3.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - bittensor =2.1.0, =1.1.10, =0.1.0, =0.1.8b3, =0.7.11, =0.5.6.dev85, =0.5.6.dev87 Source cves: CVE-2026-0994 Source advisory: OSV:PYSEC-2026-180...

bittensor (>=2.1.0, <=3.5.1), converse-sfr (0.0.2) +8 more potentially affected by CVE-2025-4565 via protobuf (3.15.0)

protobuf PYPI version 3.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on protobuf and may be impacted: - bittensor =2.1.0, =1.1.10, =0.1.0, =0.1.8b3, =0.7.11, =0.5.6.dev85, =0.5.6.dev87 Source cves: CVE-2025-4565 Source advisory: OSV:PYSEC-2026-180...

Cross-site Scripting in FreeTAKServer-UI

FreeTAKServer-UI v1.9.8 was discovered to contain a stored cross-site scripting XSS vulnerability via the Callsign parameter...

PYSEC-2026-640 SQL Injection in FreeTAKServer-UI

FreeTAKServer-UI v1.9.8 was discovered to contain a SQL injection vulnerability via the API endpoint /AuthenticateUser...

Exposure of Sensitive Information to an Unauthorized Actor in FreeTAKServer-UI

FreeTAKServer-UI v1.9.8 was discovered to leak sensitive API and Websocket keys...

PYSEC-2026-637 Path traversal in FreeTAKServer-UI

An issue in the ?filename= argument of the route /DataPackageTable in FreeTAKServer-UI v1.9.8 allows attackers to place arbitrary files anywhere on the system...

Path traversal in FreeTAKServer-UI

An issue in the ?filename= argument of the route /DataPackageTable in FreeTAKServer-UI v1.9.8 allows attackers to place arbitrary files anywhere on the system...

PYSEC-2026-639 Cross-site Scripting in FreeTAKServer-UI

FreeTAKServer-UI v1.9.8 was discovered to contain a stored cross-site scripting XSS vulnerability via the Callsign parameter...

EUVD-2022-1358

Malicious code in bioql PyPI...

EUVD-2022-1391

Malicious code in bioql PyPI...

EUVD-2022-0107

Malicious code in bioql PyPI...

EUVD-2022-1461

Malicious code in bioql PyPI...

EUVD-2022-1427

Malicious code in bioql PyPI...

EUVD-2022-0108

Malicious code in bioql PyPI...

CVE-2022-25512

FreeTAKServer-UI v1.9.8 was discovered to leak sensitive API and Websocket keys...

CVE-2022-25511

An issue in the ?filename= argument of the route /DataPackageTable in FreeTAKServer-UI v1.9.8 allows attackers to place arbitrary files anywhere on the system...

CVE-2022-25506

FreeTAKServer-UI v1.9.8 was discovered to contain a SQL injection vulnerability via the API endpoint /AuthenticateUser...

CVE-2022-25510

FreeTAKServer 1.9.8 contains a hardcoded Flask secret key which allows attackers to create crafted cookies to bypass authentication or escalate privileges...

CVE-2022-25507

FreeTAKServer-UI v1.9.8 was discovered to contain a stored cross-site scripting XSS vulnerability via the Callsign parameter...

CVE-2022-25508

An access control issue in the component /ManageRoute/postRoute of FreeTAKServer v1.9.8 allows unauthenticated attackers to cause a Denial of Service DoS via an unusually large amount of created routes, or create unsafe or false routes for legitimate users...