CVE-2026-115892

A flaw was found in Wasmtime. A malicious WebAssembly guest can cause a Denial of Service DoS by triggering an unhandled host runtime panic. When handling asynchronous streams or futures exchanged between the host and guest, Wasmtime fails to properly validate payload data types upon their return...

binance-connector (>=1.5.0, <=1.9.0), binance-futures-connector (1.5.0) +11 more potentially affected by CVE-2026-115776 via twisted (21.2.0)

twisted PYPI version 21.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - binance-connector =1.5.0, =1.6.1, =0.1.9, =2019.2.3rc0, =0.0.0, =0.5.3, =0.8.0b1.post1, =0.8.0b1, =0.0.10, =0.0.2, =0.18.0, =0.21.1 Source cves:...

binance-futures-connector (>=1.8.0, <=1.10.0), geonode (4.0.0rc0) +1 more potentially affected by CVE-2026-115776 via twisted (22.2.0)

twisted PYPI version 22.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - binance-futures-connector =1.8.0, =1.10.0 - geonode 4.0.0rc0 - nucypher 6.0.0 Source cves: CVE-2026-115776 Source advisory: OSV:GHSA-53XC-49M8-P7...

adyanutils (>=0.4.0, <=0.8.6), binance-futures-connector (>=1.6.0, <=1.7.0) +1 more potentially affected by CVE-2026-115776 via twisted (22.1.0)

twisted PYPI version 22.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - adyanutils =0.4.0, =1.6.0, =1.1.0, =1.1.2 Source cves: CVE-2026-115776 Source advisory: OSV:GHSA-53XC-49M8-P798...

binance-futures-connector (>=1.8.0, <=1.10.0), geonode (4.0.0rc0) +1 more potentially affected by CVE-2026-115778 via twisted (22.2.0)

twisted PYPI version 22.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - binance-futures-connector =1.8.0, =1.10.0 - geonode 4.0.0rc0 - nucypher 6.0.0 Source cves: CVE-2026-115778 Source advisory: OSV:GHSA-CWM5-JH59-MW...

adyanutils (>=0.4.0, <=0.8.6), binance-futures-connector (>=1.6.0, <=1.7.0) +1 more potentially affected by CVE-2026-115778 via twisted (22.1.0)

twisted PYPI version 22.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - adyanutils =0.4.0, =1.6.0, =1.1.0, =1.1.2 Source cves: CVE-2026-115778 Source advisory: OSV:GHSA-CWM5-JH59-MWXR...

binance-connector (>=1.5.0, <=1.9.0), binance-futures-connector (1.5.0) +11 more potentially affected by CVE-2026-115778 via twisted (21.2.0)

twisted PYPI version 21.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - binance-connector =1.5.0, =1.6.1, =0.1.9, =2019.2.3rc0, =0.0.0, =0.5.3, =0.8.0b1.post1, =0.8.0b1, =0.0.10, =0.0.2, =0.18.0, =0.21.1 Source cves:...

binance-futures-connector (>=1.8.0, <=1.10.0), geonode (4.0.0rc0) +1 more potentially affected by CVE-2026-115877 via twisted (22.2.0)

twisted PYPI version 22.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - binance-futures-connector =1.8.0, =1.10.0 - geonode 4.0.0rc0 - nucypher 6.0.0 Source cves: CVE-2026-115877 Source advisory: OSV:GHSA-Q7QQ-6MHP-9R...

binance-connector (>=1.5.0, <=1.9.0), binance-futures-connector (1.5.0) +11 more potentially affected by CVE-2026-115877 via twisted (21.2.0)

twisted PYPI version 21.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - binance-connector =1.5.0, =1.6.1, =0.1.9, =2019.2.3rc0, =0.0.0, =0.5.3, =0.8.0b1.post1, =0.8.0b1, =0.0.10, =0.0.2, =0.18.0, =0.21.1 Source cves:...

adyanutils (>=0.4.0, <=0.8.6), binance-futures-connector (>=1.6.0, <=1.7.0) +1 more potentially affected by CVE-2026-115877 via twisted (22.1.0)

twisted PYPI version 22.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - adyanutils =0.4.0, =1.6.0, =1.1.0, =1.1.2 Source cves: CVE-2026-115877 Source advisory: OSV:GHSA-Q7QQ-6MHP-9RC4...

binance-futures-connector (>=1.8.0, <=1.10.0), geonode (4.0.0rc0) +1 more potentially affected by CVE-2026-106454 via twisted (22.2.0)

twisted PYPI version 22.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - binance-futures-connector =1.8.0, =1.10.0 - geonode 4.0.0rc0 - nucypher 6.0.0 Source cves: CVE-2026-106454 Source advisory: OSV:PYSEC-2026-4304...

adyanutils (>=0.4.0, <=0.8.6), binance-futures-connector (>=1.6.0, <=1.7.0) +1 more potentially affected by CVE-2026-106454 via twisted (22.1.0)

twisted PYPI version 22.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - adyanutils =0.4.0, =1.6.0, =1.1.0, =1.1.2 Source cves: CVE-2026-106454 Source advisory: OSV:PYSEC-2026-4304...

binance-connector (>=1.5.0, <=1.9.0), binance-futures-connector (1.5.0) +11 more potentially affected by CVE-2026-106454 via twisted (21.2.0)

twisted PYPI version 21.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - binance-connector =1.5.0, =1.6.1, =0.1.9, =2019.2.3rc0, =0.0.0, =0.5.3, =0.8.0b1.post1, =0.8.0b1, =0.0.10, =0.0.2, =0.18.0, =0.21.1 Source cves:...

adyanutils (>=0.4.0, <=0.8.6), binance-futures-connector (>=1.6.0, <=1.7.0) +1 more potentially affected by CVE-2026-106454 via twisted (22.1.0)

twisted PYPI version 22.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - adyanutils =0.4.0, =1.6.0, =1.1.0, =1.1.2 Source cves: CVE-2026-106454 Source advisory: OSV:GHSA-8PQF-F4M5-798G...

binance-futures-connector (>=1.8.0, <=1.10.0), geonode (4.0.0rc0) +1 more potentially affected by CVE-2026-106454 via twisted (22.2.0)

twisted PYPI version 22.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - binance-futures-connector =1.8.0, =1.10.0 - geonode 4.0.0rc0 - nucypher 6.0.0 Source cves: CVE-2026-106454 Source advisory: OSV:GHSA-8PQF-F4M5-79...

binance-connector (>=1.5.0, <=1.9.0), binance-futures-connector (>=1.5.0, <=1.10.0) +1 more potentially affected by CVE-2026-77528 via autobahn (21.2.1)

autobahn PYPI version 21.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on autobahn and may be impacted: - binance-connector =1.5.0, =1.5.0, =1.6.1, =1.6.2 Source cves: CVE-2026-77528 Source advisory: OSV:PYSEC-2026-4027...

binance-connector (>=1.5.0, <=1.9.0), binance-futures-connector (>=1.5.0, <=1.10.0) +1 more potentially affected by CVE-2026-77528 via autobahn (21.2.1)

autobahn PYPI version 21.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on autobahn and may be impacted: - binance-connector =1.5.0, =1.5.0, =1.6.1, =1.6.2 Source cves: CVE-2026-77528 Source advisory: OSV:GHSA-HXP9-W8X3-P566...

Malicious code in ccxt-mexc-futures (PyPI)

Source: kam193 f2eb5eb75679b536c430ad6d5440e63fbe1d1cd391ab1abf2a411dae3a768ed8 There is a hidden code that overwrites the default method and downloads remote data, which contains the dictionary pretending to be the right value, and a hidden code to exfiltrate machine ID and download and run a...

CVE-2026-63763

SurrealDB before 2.5.0 and before 3.0.0-beta.3 contains a confused deputy privilege escalation vulnerability. Unprivileged users e.g., those with the database editor role can create or modify fields containing futures, functions, or closures. Because these are executed in the context of the...

CVE-2026-63763 SurrealDB before 2.5.0 Privilege Escalation via Future Fields

SurrealDB before 2.5.0 and before 3.0.0-beta.3 contains a confused deputy privilege escalation vulnerability. Unprivileged users e.g., those with the database editor role can create or modify fields containing futures, functions, or closures. Because these are executed in the context of the...