GHSA-6W46-J5RX-G56G vulnerabilities

Vulnerabilities for packages: open-webui, py3-cassandra-medusa...

GHSA-2599-H6XX-HPXP vulnerabilities

Vulnerabilities for packages: py3-cassandra-medusa...

CVE-2025-69230 vulnerabilities

Vulnerabilities for packages: checkov, dask-kubernetes, py3-cassandra-medusa, open-webui, kubeflow-pipelines-visualization-server, kserve...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. The package was flagged as malicious during the Sha1-hulud supply chain attack. Although the Sha1-hulud IoCs are not present within the package, the contents of the affected version were removed from the officia...

Malicious code in @medusajs/medusa-oas-cli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 48124e119c7f2c21e744172a5901266335824c5ceac7a1c631805772baa3798a The package @medusajs/medusa-oas-cli was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191457 Malicious code in @medusajs/medusa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3aa5b0f943792c37642fca6c2ef986192e352a69adc62d136967da06a71efe27 The package @medusajs/medusa was found to contain malicious code. Source: ghsa-malware 01bb6c10c02f2427b66ecf6036cf38726397291c4de895e6c942bf3cdf78f0...

Malicious code in @medusajs/medusa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3aa5b0f943792c37642fca6c2ef986192e352a69adc62d136967da06a71efe27 The package @medusajs/medusa was found to contain malicious code. Source: ghsa-malware 01bb6c10c02f2427b66ecf6036cf38726397291c4de895e6c942bf3cdf78f0...

CVE-2025-53643 vulnerabilities

Vulnerabilities for packages: py3.10-vllm-cuda-11.8, request-1276, airflow-core, apache-beam-python-3.11-sdk, py3-vllm-cuda-12.4, py3-cassandra-medusa, py3.13-scanner-test-libraries-aiohttp, dask-kubernetes, text-generation-inference, airflow...