bakaano-hydro (1.3.4), topologyx (1.1.0) potentially affected by CVE-2026-1462 via keras (>=3.13.0, <=3.13.1)

keras PYPI version =3.13.0, =3.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - bakaano-hydro 1.3.4 - topologyx 1.1.0 Source cves: CVE-2026-1462 Source advisory: SNYK:PYTHON-KERAS-16032293...

bakaano-hydro (1.3.4), topologyx (1.1.0) potentially affected by CVE-2026-1669 via keras (>=3.13.0, <=3.13.1)

keras PYPI version =3.13.0, =3.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - bakaano-hydro 1.3.4 - topologyx 1.1.0 Source cves: CVE-2026-1669 Source advisory: OSV:GHSA-3M4Q-JMJ6-R34Q...

bakaano-hydro (1.3.4), topologyx (1.1.0) potentially affected by CVE-2026-1669 via keras (>=3.13.0, <=3.13.1)

keras PYPI version =3.13.0, =3.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - bakaano-hydro 1.3.4 - topologyx 1.1.0 Source cves: CVE-2026-1669 Source advisory: GHSA-3M4Q-JMJ6-R34Q...

bakaano-hydro (1.3.4), topologyx (1.1.0) potentially affected by CVE-2026-1669 via keras (>=3.13.0, <=3.13.1)

keras PYPI version =3.13.0, =3.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on keras and may be impacted: - bakaano-hydro 1.3.4 - topologyx 1.1.0 Source cves: CVE-2026-1669 Source advisory: SNYK:PYTHON-KERAS-15268069...

hydro-integrations (2.3.0.dev0) potentially affected by CVE-2026-1777 via sagemaker (1.52.1)

sagemaker PYPI version 1.52.1 is affected by a known vulnerability. The following packages have a transitive dependency on sagemaker and may be impacted: - hydro-integrations 2.3.0.dev0 Source cves: CVE-2026-1777 Source advisory: OSV:GHSA-RJRP-M2JW-PV9C...

hydro-integrations (2.3.0.dev0) potentially affected by CVE-2026-1778 via sagemaker (1.52.1)

sagemaker PYPI version 1.52.1 is affected by a known vulnerability. The following packages have a transitive dependency on sagemaker and may be impacted: - hydro-integrations 2.3.0.dev0 Source cves: CVE-2026-1778 Source advisory: OSV:GHSA-62RC-F4V9-H543...

EUVD-2025-19277

Malicious code in bioql PyPI...

africanwhisper (>=0.2.3, <=0.9.0), arbitragelab (1.0.0) +78 more potentially affected by CVE-2025-8747 via keras (>=3.0.0, <=3.10.0)

keras PYPI version =3.0.0, =0.2.3, =0.1.2, =0.1.0, =1.1.8, =1.3.3, =0.1.1, =0.1.0, =1.9.5, =3.1.0 - data-aug-4-tsc 0.0.1 and more Source cves: CVE-2025-8747 Source advisory: MEND:CVE-2025-8747...

CVE-2025-31428

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BuddhaThemes HYDRO hydro allows Reflected XSS.This issue affects HYDRO: from n/a through = 2.8...

CVE-2025-31428

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BuddhaThemes HYDRO hydro allows Reflected XSS.This issue affects HYDRO: from n/a through = 2.8...

CVE-2025-31428 WordPress HYDRO theme <= 2.8 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BuddhaThemes HYDRO hydro allows Reflected XSS.This issue affects HYDRO: from n/a through = 2.8...

CVE-2025-31428 WordPress HYDRO theme <= 2.8 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BuddhaThemes HYDRO hydro allows Reflected XSS.This issue affects HYDRO: from n/a through = 2.8...

CVE-2025-31428

CVE-2025-31428 describes an unpatched Reflected Cross-Site Scripting (XSS) in the BuddhaThemes HYDRO WordPress theme (versions n/a through 2.8). The vulnerability arises from improper neutralization of user input during web page generation, enabling an attacker to inject scripts via a reflected p...

CVE-2025-31428: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in BuddhaThemes HYDRO hydro allows Reflected XSS.This issue affects HYDRO: from n/a through = 2.8...

WordPress plugin HYDRO has a cross-site scripting vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site...

PT-2025-27098 · Buddhathemes · Buddhathemes Hydro

Name of the Vulnerable Software and Affected Versions: BuddhaThemes HYDRO versions n/a through 2.8 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting, which allows Reflected XSS. This means that an attacker can inje...

WordPress HYDRO theme <= 2.8 - Reflected Cross Site Scripting (XSS) vulnerability

Reflected Cross Site Scripting XSS vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme HYDRO versions = 2.8...

hydro-integrations (2.3.0.dev0) potentially affected by CVE-2025-0508 via sagemaker (1.52.1)

sagemaker PYPI version 1.52.1 is affected by a known vulnerability. The following packages have a transitive dependency on sagemaker and may be impacted: - hydro-integrations 2.3.0.dev0 Source cves: CVE-2025-0508 Source advisory: OSV:GHSA-32G6-MG92-GHM2...

Ecuador Is Literally Powerless in the Face of Drought

Drought-stricken hydro dams have led to daily electricity cuts in Ecuador. As weather becomes less predictable due to climate change, experts say other countries need to take notice...

hydro-integrations (2.3.0.dev0) potentially affected by CVE-2024-34073 via sagemaker (1.52.1)

sagemaker PYPI version 1.52.1 is affected by a known vulnerability. The following packages have a transitive dependency on sagemaker and may be impacted: - hydro-integrations 2.3.0.dev0 Source cves: CVE-2024-34073 Source advisory: OSV:GHSA-7PC3-PR3Q-58VG...