follina-CVE-2022-30190

follina-CVE-2022-30190 by hazard...

basalt

!DOI 10.5281/zenodo.22072811https://img.shields.io/badge/DOI-10.5281/zen...

bittensor (>=1.0.0, <=1.0.4), hazard-feed (>=0.2.0, <=0.2.5) +1 more potentially affected by CVE-2026-77528 via autobahn (20.7.1)

autobahn PYPI version 20.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on autobahn and may be impacted: - bittensor =1.0.0, =0.2.0, =3.0.0b0, =4.4.0 Source cves: CVE-2026-77528 Source advisory: OSV:PYSEC-2026-4027...

djangoappcenter (>=0.1.0, <=0.9.16), djangodjangoappcenter (0.0.11) +4 more potentially affected by CVE-2026-15307 via django (3.0.2)

django PYPI version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - djangoappcenter =0.1.0, =0.1.1, =0.0.2, =0.0.4 - medicine 0.1.9 Source cves: CVE-2026-15307 Source advisory: OSV:PYSEC-2026-4035...

Rocky Linux 8 [CIQ] Security Update: iperf3 / iperf3-debuginfo / iperf3-debugsource (crlsa-2023_4570)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20234570 advisory. iperf3: memory allocation hazard and crash CVE-2023-38403 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that...

Rocky Linux 9 [CIQ] Security Update: iperf3 / iperf3-debuginfo / iperf3-debugsource (crlsa-2023_4571)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20234571 advisory. iperf3: memory allocation hazard and crash CVE-2023-38403 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that...

CVE-2026-38924

In Oraios AI Serena before 1.0.0, the listen address of the MCP server in HTTP mode is 0.0.0.0. NOTE: the Supplier observed that 0.0.0.0 was a "potential security hazard" but the Serena documentation, at the time of the issue report proposing 127.0.0.1 instead of 0.0.0.0, recommended "use a...

authx (>=0.0.3, <=0.1.2), hazard-feed (>=0.2.0, <=0.2.5) +1 more potentially affected by CVE-2026-55558 via aiosmtplib (1.1.4)

aiosmtplib PYPI version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on aiosmtplib and may be impacted: - authx =0.0.3, =0.2.0, =0.9.0, =0.9.13 Source cves: CVE-2026-55558 Source advisory: OSV:PYSEC-2026-3805...

ax (>=0.43.0, <=0.52.0), foambo (>=0.0.1, <=0.0.6) +2 more potentially affected by CVE-2026-55558 via aiosmtplib (1.1.2)

aiosmtplib PYPI version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on aiosmtplib and may be impacted: - ax =0.43.0, =0.0.1, =0.1.1, =2024.10.27.post1, =2024.12.29.post2 Source cves: CVE-2026-55558 Source advisory: OSV:PYSEC-2026-3805...

ax (>=0.43.0, <=0.52.0), foambo (>=0.0.1, <=0.0.6) +2 more potentially affected by CVE-2026-55558 via aiosmtplib (1.1.2)

aiosmtplib PYPI version 1.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on aiosmtplib and may be impacted: - ax =0.43.0, =0.0.1, =0.1.1, =2024.10.27.post1, =2024.12.29.post2 Source cves: CVE-2026-55558 Source advisory: OSV:GHSA-VXJ7-4XRP-5VR4...

authx (>=0.0.3, <=0.1.2), hazard-feed (>=0.2.0, <=0.2.5) +1 more potentially affected by CVE-2026-55558 via aiosmtplib (1.1.4)

aiosmtplib PYPI version 1.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on aiosmtplib and may be impacted: - authx =0.0.3, =0.2.0, =0.9.0, =0.9.13 Source cves: CVE-2026-55558 Source advisory: OSV:GHSA-VXJ7-4XRP-5VR4...

PYSEC-2026-3745

opensslencrypt before 1.4.0 imports Python's non-cryptographic 'random' module Mersenne Twister PRNG at line 15 of opensslencrypt/modules/pqc.py. No direct calls to random. were present in the code, so no cryptographic operation is currently affected; however, the import creates a hazard that...

PYSEC-2026-3745

opensslencrypt before 1.4.0 imports Python's non-cryptographic 'random' module Mersenne Twister PRNG at line 15 of opensslencrypt/modules/pqc.py. No direct calls to random. were present in the code, so no cryptographic operation is currently affected; however, the import creates a hazard that...

CVE-2026-74887

opensslencrypt before 1.4.0 imports Python's non-cryptographic 'random' module Mersenne Twister PRNG at line 15 of opensslencrypt/modules/pqc.py. No direct calls to random. were present in the code, so no cryptographic operation is currently affected; however, the import creates a hazard that...

EUVD-2026-60106

opensslencrypt before 1.4.0 imports Python's non-cryptographic 'random' module Mersenne Twister PRNG at line 15 of opensslencrypt/modules/pqc.py. No direct calls to random. were present in the code, so no cryptographic operation is currently affected; however, the import creates a hazard that...

CVE-2026-74887 openssl_encrypt before 1.4.0 Insecure Random Import in PQC Module

opensslencrypt before 1.4.0 imports Python's non-cryptographic 'random' module Mersenne Twister PRNG at line 15 of opensslencrypt/modules/pqc.py. No direct calls to random. were present in the code, so no cryptographic operation is currently affected; however, the import creates a hazard that...

CVE-2026-74887

The openssl_encrypt package (versions before 1.4.0 ) is vulnerable because the pqc module imports Python's non-cryptographic random module (Mersenne Twister PRNG) at line 15 of openssl_encrypt/modules/pqc.py. While no cryptographic operations are currently affected by direct calls to this module,...

djangoappcenter (>=0.1.0, <=0.9.16), djangodjangoappcenter (0.0.11) +4 more potentially affected by CVE-2026-15307 via django (3.0.2)

django PYPI version 3.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - djangoappcenter =0.1.0, =0.1.1, =0.0.2, =0.0.4 - medicine 0.1.9 Source cves: CVE-2026-15307 Source advisory: OSV:GHSA-WVQV-FJ8W-QMHM...

alcali (>=2018.3.4, <=2019.2.4.post0), django-acsecure (0.1.3) +12 more potentially affected by CVE-2026-15830 via django (3.0.3)

django PYPI version 3.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - alcali =2018.3.4, =0.2.0, =0.1.5.1, =0.0.2, =0.1.1, =0.9.0, =0.1.0.1, =0.4.1, =0.5.1 Source cves: CVE-2026-15830 Source advisory:...

ashley (1.0.0b4), hazard-feed (>=0.2.0, <=0.2.5) +1 more potentially affected by CVE-2026-15830 via django (3.1.4)

django PYPI version 3.1.4 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - ashley 1.0.0b4 - hazard-feed =0.2.0, =0.2.5 - kiwitcms 8.9.0 Source cves: CVE-2026-15830 Source advisory: OSV:PYSEC-2026-3717...