96 matches found
hyfi (>=0.16.0, <=1.10.0), hyfi-template (>=0.3.14, <=0.4.0) +6 more potentially affected by CVE-2026-66007 via datasets (2.13.1)
datasets PYPI version 2.13.1 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - hyfi =0.16.0, =0.3.14, =0.0.2, =0.0.1, =0.0.6 - rnaformer 0.0.1 Source cves: CVE-2026-66007 Source advisory: OSV:PYSEC-2026-3716...
kaggle-mcp has a Path Traversal issue
A vulnerability has been found in dexhunter kaggle-mcp up to 406127ffcb2b91b8c10e20e6c2ca787fbc1dc92d. This vulnerability affects the function preparekaggledataset of the file src/kagglemcp/server.py. The manipulation of the argument competitionid leads to path traversal. The attack is possible t...
PYSEC-2026-2542 kaggle-mcp has a Path Traversal issue
A vulnerability has been found in dexhunter kaggle-mcp up to 406127ffcb2b91b8c10e20e6c2ca787fbc1dc92d. This vulnerability affects the function preparekaggledataset of the file src/kagglemcp/server.py. The manipulation of the argument competitionid leads to path traversal. The attack is possible t...
PT-2026-59200
A vulnerability has been found in dexhunter kaggle-mcp up to 406127ffcb2b91b8c10e20e6c2ca787fbc1dc92d. This vulnerability affects the function prepare kaggle dataset of the file src/kaggle mcp/server.py. The manipulation of the argument competition id leads to path traversal. The attack is possib...
draggan (1.1.6), fast-tts (0.0.3) +2 more potentially affected by CVE-2024-12217 via gradio (3.34.0)
gradio PYPI version 3.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - draggan 1.1.6 - fast-tts 0.0.3 - kaggle-deps 0.1.0 - oobabot-plugin =0.2.0, =0.2.2 Source cves: CVE-2024-12217 Source advisory: OSV:PYSEC-2026-1418...
draggan (1.1.6), fast-tts (0.0.3) +2 more potentially affected by CVE-2024-48052 via gradio (3.34.0)
gradio PYPI version 3.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - draggan 1.1.6 - fast-tts 0.0.3 - kaggle-deps 0.1.0 - oobabot-plugin =0.2.0, =0.2.2 Source cves: CVE-2024-48052 Source advisory: OSV:PYSEC-2026-1408...
draggan (1.1.6), fast-tts (0.0.3) +2 more potentially affected by CVE-2024-4325 via gradio (3.34.0)
gradio PYPI version 3.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - draggan 1.1.6 - fast-tts 0.0.3 - kaggle-deps 0.1.0 - oobabot-plugin =0.2.0, =0.2.2 Source cves: CVE-2024-4325 Source advisory: OSV:PYSEC-2026-1413...
draggan (1.1.6), fast-tts (0.0.3) +2 more potentially affected by CVE-2024-1727 via gradio (3.34.0)
gradio PYPI version 3.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - draggan 1.1.6 - fast-tts 0.0.3 - kaggle-deps 0.1.0 - oobabot-plugin =0.2.0, =0.2.2 Source cves: CVE-2024-1727 Source advisory: OSV:PYSEC-2026-1409...
draggan (1.1.6), fast-tts (0.0.3) +2 more potentially affected by CVE-2024-34511 via gradio (3.34.0)
gradio PYPI version 3.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - draggan 1.1.6 - fast-tts 0.0.3 - kaggle-deps 0.1.0 - oobabot-plugin =0.2.0, =0.2.2 Source cves: CVE-2024-34511 Source advisory: OSV:PYSEC-2026-1407...
draggan (1.1.6), fast-tts (0.0.3) +2 more potentially affected by CVE-2024-1183 via gradio (3.34.0)
gradio PYPI version 3.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - draggan 1.1.6 - fast-tts 0.0.3 - kaggle-deps 0.1.0 - oobabot-plugin =0.2.0, =0.2.2 Source cves: CVE-2024-1183 Source advisory: OSV:PYSEC-2026-1419...
draggan (1.1.6), fast-tts (0.0.3) +2 more potentially affected by CVE-2024-1729 via gradio (3.34.0)
gradio PYPI version 3.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - draggan 1.1.6 - fast-tts 0.0.3 - kaggle-deps 0.1.0 - oobabot-plugin =0.2.0, =0.2.2 Source cves: CVE-2024-1729 Source advisory: OSV:PYSEC-2026-1416...
draggan (1.1.6), fast-tts (0.0.3) +2 more potentially affected by CVE-2026-49119 via gradio (3.34.0)
gradio PYPI version 3.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - draggan 1.1.6 - fast-tts 0.0.3 - kaggle-deps 0.1.0 - oobabot-plugin =0.2.0, =0.2.2 Source cves: CVE-2026-49119 Source advisory:...
draggan (1.1.6), fast-tts (0.0.3) +2 more potentially affected by CVE-2026-49119 via gradio (3.34.0)
gradio PYPI version 3.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - draggan 1.1.6 - fast-tts 0.0.3 - kaggle-deps 0.1.0 - oobabot-plugin =0.2.0, =0.2.2 Source cves: CVE-2026-49119 Source advisory: OSV:PYSEC-2026-2179...
draggan (1.1.6), fast-tts (0.0.3) +2 more potentially affected by CVE-2024-1728 via gradio (3.34.0)
gradio PYPI version 3.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - draggan 1.1.6 - fast-tts 0.0.3 - kaggle-deps 0.1.0 - oobabot-plugin =0.2.0, =0.2.2 Source cves: CVE-2024-1728 Source advisory: OSV:PYSEC-2026-345...
CVE-2026-7149
A vulnerability has been found in dexhunter kaggle-mcp up to 406127ffcb2b91b8c10e20e6c2ca787fbc1dc92d. This vulnerability affects the function preparekaggledataset of the file src/kagglemcp/server.py. The manipulation of the argument competitionid leads to path traversal. The attack is possible t...
draggan (1.1.6), fast-tts (0.0.3) +2 more potentially affected by CVE-2026-10783 via gradio (3.34.0)
gradio PYPI version 3.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - draggan 1.1.6 - fast-tts 0.0.3 - kaggle-deps 0.1.0 - oobabot-plugin =0.2.0, =0.2.2 Source cves: CVE-2026-10783 Source advisory:...
draggan (1.1.6), fast-tts (0.0.3) +2 more potentially affected by CVE-2026-48545 via gradio (3.34.0)
gradio PYPI version 3.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - draggan 1.1.6 - fast-tts 0.0.3 - kaggle-deps 0.1.0 - oobabot-plugin =0.2.0, =0.2.2 Source cves: CVE-2026-48545 Source advisory:...
draggan (1.1.6), fast-tts (0.0.3) +2 more potentially affected by CVE-2026-48545 via gradio (3.34.0)
gradio PYPI version 3.34.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - draggan 1.1.6 - fast-tts 0.0.3 - kaggle-deps 0.1.0 - oobabot-plugin =0.2.0, =0.2.2 Source cves: CVE-2026-48545 Source advisory: OSV:PYSEC-2026-2178...
Malicious code in kaggle-runner (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dcd49ca70b987b236ba4341d839addfec9afb344e1471195f2f825281092f71 kagglerunner/coordinator.py embeds a bash reverse-shell template rvsstr that connects to vtool.duckdns.org:23454 via ncat with retry/backoff plus a...
MAL-2026-3693 Malicious code in kaggle-runner (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dcd49ca70b987b236ba4341d839addfec9afb344e1471195f2f825281092f71 kagglerunner/coordinator.py embeds a bash reverse-shell template rvsstr that connects to vtool.duckdns.org:23454 via ncat with retry/backoff plus a...