61 matches found
CVE-2026-55617
Hydro is a next-generation high-performance online judge platform. From 4.10.4 until 5.0.2, the session recreation logic in packages/hydrooj/src/service/layers/base.ts creates a replacement session token without deleting the previous token from the server-side session token store, so an old sid...
EUVD-2026-78768
Hydro is a next-generation high-performance online judge platform. From 4.10.4 until 5.0.2, the session recreation logic in packages/hydrooj/src/service/layers/base.ts creates a replacement session token without deleting the previous token from the server-side session token store, so an old sid...
CVE-2026-55617 Hydro: Insufficient session expiration when recreating sessions
Hydro is a next-generation high-performance online judge platform. From 4.10.4 until 5.0.2, the session recreation logic in packages/hydrooj/src/service/layers/base.ts creates a replacement session token without deleting the previous token from the server-side session token store, so an old sid...
CVE-2026-55617 Hydro: Insufficient session expiration when recreating sessions
Hydro is a next-generation high-performance online judge platform. From 4.10.4 until 5.0.2, the session recreation logic in packages/hydrooj/src/service/layers/base.ts creates a replacement session token without deleting the previous token from the server-side session token store, so an old sid...
CVE-2026-55617
Hydro (the hydrooj NPM package), a high-performance online judge platform, contains an insufficient session expiration vulnerability in its session recreation logic (packages/hydrooj/src/service/layers/base.ts). From 4.10.4 through 5.0.1 , a new session token is created without deleting the previ...
CVE-2026-55617 Hydro: Insufficient session expiration when recreating sessions
Hydro is a next-generation high-performance online judge platform. From 4.10.4 until 5.0.2, the session recreation logic in packages/hydrooj/src/service/layers/base.ts creates a replacement session token without deleting the previous token from the server-side session token store, so an old sid...
CVE-2026-55617: Insufficient Session Expiration
Hydro is a next-generation high-performance online judge platform. From 4.10.4 until 5.0.2, the session recreation logic in packages/hydrooj/src/service/layers/base.ts creates a replacement session token without deleting the previous token from the server-side session token store, so an old sid...
ads-and (>=0.1.0, <=0.1.3), ads-bib (>=0.1.0, <=0.3.3) +12 more potentially affected by CVE-2026-9335 via keras (>=3.13.0, <=3.14.1)
keras PYPI version =3.13.0, =0.1.0, =0.1.0, =0.0.1, =0.3.4, =0.2.5, =0.1.0, =0.0.1, =1.3.1, =0.2.6, =1.24.0, =1.25.0 Source cves: CVE-2026-9335 Source advisory: OSV:PYSEC-2026-3633...
ads-and (>=0.1.0, <=0.1.3), ads-bib (>=0.1.0, <=0.3.3) +12 more potentially affected by CVE-2026-12482 via keras (>=3.13.0, <=3.14.1)
keras PYPI version =3.13.0, =0.1.0, =0.1.0, =0.0.1, =0.3.4, =0.2.5, =0.1.0, =0.0.1, =1.3.1, =0.2.6, =1.24.0, =1.25.0 Source cves: CVE-2026-12482 Source advisory: GHSA-58HV-7753-XMFQ...
bakaano-hydro (1.3.4), topologyx (1.1.0) potentially affected by CVE-2026-1669 via keras (>=3.13.0, <=3.13.1)
keras PYPI version =3.13.0, =3.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - bakaano-hydro 1.3.4 - topologyx 1.1.0 Source cves: CVE-2026-1669 Source advisory: OSV:PYSEC-2026-2546...
CVE-2026-42952
CVE-2026-42952 concerns the Hydro-Québec Le Circuit Électrique charging-station backend. The issue is an improper restriction of excessive authentication attempts due to lack of throttling, which could enable a denial-of-service condition. Technical details in the connected records indicate an ex...
hydro-integrations (2.3.0.dev0) potentially affected by CVE-2026-1778 via sagemaker (1.52.1)
sagemaker PYPI version 1.52.1 is affected by a known vulnerability. The following packages have a transitive dependency on sagemaker and may be impacted: - hydro-integrations 2.3.0.dev0 Source cves: CVE-2026-1778 Source advisory: OSV:PYSEC-2026-1886...
hydro-integrations (2.3.0.dev0) potentially affected by CVE-2026-1777 via sagemaker (1.52.1)
sagemaker PYPI version 1.52.1 is affected by a known vulnerability. The following packages have a transitive dependency on sagemaker and may be impacted: - hydro-integrations 2.3.0.dev0 Source cves: CVE-2026-1777 Source advisory: OSV:PYSEC-2026-1888...
hydro-integrations (2.3.0.dev0) potentially affected by CVE-2025-0508 via sagemaker (1.52.1)
sagemaker PYPI version 1.52.1 is affected by a known vulnerability. The following packages have a transitive dependency on sagemaker and may be impacted: - hydro-integrations 2.3.0.dev0 Source cves: CVE-2025-0508 Source advisory: OSV:PYSEC-2026-1885...
hydro-integrations (2.3.0.dev0) potentially affected by CVE-2024-34072 via sagemaker (1.52.1)
sagemaker PYPI version 1.52.1 is affected by a known vulnerability. The following packages have a transitive dependency on sagemaker and may be impacted: - hydro-integrations 2.3.0.dev0 Source cves: CVE-2024-34072 Source advisory: OSV:PYSEC-2026-1889...
GHSA-94JP-7776-QJ6Q Hydro: Insufficient session expiration when recreating sessions
Impact Hydro contains an insufficient session expiration vulnerability in its session recreation logic. When a session is recreated, including during logout or other session renewal flows, Hydro creates a new session token but does not delete the previous server-side session token. As a result, a...
NPM: Hydro: Insufficient session expiration when recreating sessions
NPM: Hydro: Insufficient session expiration when recreating sessions vulnerability discovered by ? in WordPress Npm hydrooj versions = 4.10.4, = 5.0.1...
PT-2026-50736
Impact Hydro contains an insufficient session expiration vulnerability in its session recreation logic. When a session is recreated, including during logout or other session renewal flows, Hydro creates a new session token but does not delete the previous server-side session token. As a result, a...
bakaano-hydro (1.3.4), topologyx (1.1.0) potentially affected by CVE-2026-0897 via keras (>=3.13.0, <=3.13.1)
keras PYPI version =3.13.0, =3.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - bakaano-hydro 1.3.4 - topologyx 1.1.0 Source cves: CVE-2026-0897 Source advisory: OSV:GHSA-MGX6-5CF9-RR43...
bakaano-hydro (1.3.4), topologyx (1.1.0) potentially affected by CVE-2026-0897 via keras (>=3.13.0, <=3.13.1)
keras PYPI version =3.13.0, =3.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - bakaano-hydro 1.3.4 - topologyx 1.1.0 Source cves: CVE-2026-0897 Source advisory: GHSA-MGX6-5CF9-RR43...