Malicious code in slnccduioc (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in slnccbvjvj (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in sgjqdnyybe (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in qagfypuewln (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-8351 Malicious code in oaitsvnxpamle (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-8312 Malicious code in oaipkesbgrrqn (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in oaiix7984341 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-8114 Malicious code in mytemptest1778551000 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in m8405v2llz (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in m8403v1zxu (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in lambbzrproxyoai (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in eilhgtestfsmmg (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7591 Malicious code in chmid8320x613915 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7590 Malicious code in chmid8310x612257 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7569 Malicious code in chatoaifetch177855557914 (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

MAL-2026-7539 Malicious code in aizwhvgtkghn (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in aiuzxgqioltv (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

PYSEC-2026-1645 Undefined Behavior in mlflow

A vulnerability in mlflow/mlflow version 2.11.1 allows attackers to create multiple models with the same name by exploiting URL encoding. This flaw can lead to Denial of Service DoS as an authenticated user might not be able to use the intended model, as it will open a different model each time...

PYSEC-2026-1102 aiohttp Cross-site Scripting vulnerability on index pages for static file handling

Summary A XSS vulnerability exists on index pages for static file handling. Details When using web.static..., showindex=True, the resulting index pages do not escape file names. If users can upload files with arbitrary filenames to the static directory, the server is vulnerable to XSS attacks...

Potential DoS via the Tudoor mechanism in eventlet and dnspython

eventlet before 0.35.2, as used in dnspython before 2.6.0, allows remote attackers to interfere with DNS name resolution by quickly sending an invalid packet from the expected IP address and source port, aka a "TuDoor" attack. In other words, dnspython does not have the preferred behavior in whic...