ardupilot-methodic-configurator (>=1.2.2, <=1.4.0), autosubmit (4.1.12) +15 more potentially affected by CVE-2026-59890 via setuptools (76.0.0)

setuptools PYPI version 76.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - ardupilot-methodic-configurator =1.2.2, =0.0.254, =0.1.4, =0.20250312.0, =0.2.7, =0.3.0 - scancodeio 34.10.0 - snowflake-cli 3.6.0 -...

aird (0.2.0), ardupilot-methodic-configurator (1.4.5) +21 more potentially affected by CVE-2026-59890 via setuptools (80.3.1)

setuptools PYPI version 80.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - aird 0.2.0 - ardupilot-methodic-configurator 1.4.5 - cfl-common =8.6.9, =0.27.1, =8.6.9, =20250512.0.0, =1.11.0rc1, =0.0.11, =1.0.2, =1.0.6...

aird (0.2.0), ardupilot-methodic-configurator (1.4.5) +21 more potentially affected by CVE-2026-59890 via setuptools (80.3.1)

setuptools PYPI version 80.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - aird 0.2.0 - ardupilot-methodic-configurator 1.4.5 - cfl-common =8.6.9, =0.27.1, =8.6.9, =20250512.0.0, =1.11.0rc1, =0.0.11, =1.0.2, =1.0.6...

ardupilot-methodic-configurator (>=1.2.2, <=1.4.0), autosubmit (4.1.12) +15 more potentially affected by CVE-2025-47273 via setuptools (76.0.0)

setuptools PYPI version 76.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on setuptools and may be impacted: - ardupilot-methodic-configurator =1.2.2, =0.0.254, =0.1.4, =0.20250312.0, =0.2.7, =0.3.0 - scancodeio 34.10.0 - snowflake-cli 3.6.0 -...

[AP] Owl Intranet Engine CSS Bug

-- ------------------------- -- - AngryPacket Security Advisory - -- ------------------------- -- - +--------------------- -- - + advisory information +------------------ -- - author: methodic [email protected] release date: 05/21/2003 homepage: http://sec.angrypacket.com advisory id: 0x0005...

[AP] YaBB Cross-Site Scripting vulnerability

-- ------------------------- -- - AngryPacket Security Advisory - -- ------------------------- -- - +--------------------- -- - + advisory information +------------------ -- - author: methodic [email protected] release date: 06/21/2002 homepage: http://sec.angrypacket.com advisory...

Format string bug in awhttpd &#40;Re: [AP] awhttpd v2.2 local DoS&#41;

Hello methodic, While testing a buffer overflow in you patch tpbuf is only 210 bytes, but you're lucky - getreqsi is only 100 bytes long : I've found classical exploitable syslog format string in this extremely secure product. Patch? - if priority=LOGLEVEL syslogtplev,buf; + if priority=LOGLEVEL...