bunkatopics (>=0.26.0, <=0.34.0), df-graph-construction (0.1.0) +3 more potentially affected by CVE-2026-68770 via sentence-transformers (2.2.0)

sentence-transformers PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - bunkatopics =0.26.0, =0.34.0 - df-graph-construction 0.1.0 - envbert 1.0.6 - leet-topic 0.0.3 - textdiversity 0.0.1...

EUVD-2026-75784

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to execute arbitrary code due to code injection during graph construction...

CVE-2026-81204

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to execute arbitrary code due to code injection during graph construction...

CVE-2026-81204

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to execute arbitrary code due to code injection during graph construction...

CVE-2026-81204 Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to execute arbitrary code due to code injection during graph construction...

CVE-2026-81204 Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to execute arbitrary code due to code injection during graph construction...

CVE-2026-81204

IBM Langflow OSS (versions 1.0.0 through 1.11.5) is vulnerable to unauthenticated remote code execution (CVSS 9.8, CRITICAL) caused by code injection during graph construction (CWE-94). The root cause involves the lfx CodeParser passing return-type annotation source directly to eval without sanit...

PT-2026-89625

Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.11.5 Description Remote attackers can execute arbitrary code on the host system due to code injection during graph construction. The issue occurs because the software accepts attacker-controlled node o...

CVE-2026-81204: Improper Control of Generation of Code

IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to execute arbitrary code due to code injection during graph construction...

BEACON: Behavior-Anchored Cross-Source Knowledge Graph Construction for Cyber Threat Intelligence

Cyber threat intelligence CTI is foundational to modern cyber defense, yet much of it resides in unstructured reports whose volume and heterogeneity far exceed manual analysis, motivating research on automatically constructing knowledge graphs from CTI reports. However, existing approaches mainly...

Pre-Model Representation Failures in GNN-Based Smart Contract Vulnerability Detection

This paper is a failure analysis of the representation layer underlying GNN-based smart contract vulnerability detectors. These systems convert source code into graphs before any learning takes place; if the graph fails to capture the code's semantics, no model improvement can compensate. We...

bunkatopics (>=0.26.0, <=0.34.0), df-graph-construction (0.1.0) +3 more potentially affected by CVE-2026-68770 via sentence-transformers (2.2.0)

sentence-transformers PYPI version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on sentence-transformers and may be impacted: - bunkatopics =0.26.0, =0.34.0 - df-graph-construction 0.1.0 - envbert 1.0.6 - leet-topic 0.0.3 - textdiversity 0.0.1...

df-graph-construction (0.1.0), medcat (>=1.5.3, <=1.6.1) +1 more potentially affected by CVE-2026-66007 via datasets (2.2.2)

datasets PYPI version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - df-graph-construction 0.1.0 - medcat =1.5.3, =0.0.20, =0.1.1 Source cves: CVE-2026-66007 Source advisory: OSV:GHSA-379C-QX7V-6H59...

df-graph-construction (0.1.0), medcat (>=1.5.3, <=1.6.1) +1 more potentially affected by CVE-2026-66007 via datasets (2.2.2)

datasets PYPI version 2.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - df-graph-construction 0.1.0 - medcat =1.5.3, =0.0.20, =0.1.1 Source cves: CVE-2026-66007 Source advisory: OSV:PYSEC-2026-3716...

TACTIC-KG: Toward Small Agent Teams for Cyber Threat Intelligence Knowledge Graph Construction

Cyber Threat Intelligence CTI reports are predominantly unstructured, heterogeneous, and noisy, which limits their direct usability for automated analysis and reasoning. Cybersecurity Knowledge Graphs CSKGs provide a structured representation of adversarial entities, actions, and relations, but...

Rust and Go Directed Fuzzing with LibAFL-DiFuzz

In modern SSDLC, program analysis and automated testing are essential for minimizing vulnerabilities before software release, with fuzzing being a fast and widely used dynamic testing method. However, traditional coverage-guided fuzzing may be less effective in specific tasks like verifying stati...

MM-AttacKG: a Multimodal Approach to Attack Graph Construction with Large Language Models

Cyber Threat Intelligence CTI parsing aims to extract key threat information from massive data, transform it into actionable intelligence, enhance threat detection and defense efficiency, including attack graph construction, intelligence fusion and indicator extraction. Among these research topic...