5 matches found
cr (1.5.0), cryton-worker (2022.2.2) +5 more potentially affected by CVE-2026-44405 via paramiko (2.11.1)
paramiko PYPI version 2.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - cr 1.5.0 - cryton-worker 2022.2.2 - kubemarine =0.13.1, =1.2.60, =1.5.2, =1.9.0 Source cves: CVE-2026-44405 Source advisory: OSV:PYSEC-2026-285...
BentoML post-link vulnerability
BentoML is an open-source model service library developed by BentoML. It is used to build high-performance and scalable artificial intelligence applications using Python. Versions of BentoML prior to 1.4.38 contained a post-link vulnerability. This vulnerability stemmed from the fact that the bui...
MAL-2026-3747 Malicious code in @aiscene/aiserver (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5afe7de709fb18909451ff49a02f133f248fb0dc0688709251c924038effc6dc On load, dist/index.js unconditionally instantiates new AIServer and calls server.start at module top level no require.main === module guard, so simp...
cr (1.5.0), cryton-worker (2022.2.2) +5 more potentially affected by CVE-2026-44405 via paramiko (2.11.1)
paramiko PYPI version 2.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - cr 1.5.0 - cryton-worker 2022.2.2 - kubemarine =0.13.1, =1.2.60, =1.5.2, =1.9.0 Source cves: CVE-2026-44405 Source advisory:...
