vantage6-node (3.7.2), vantage6-server (3.7.2) potentially affected by CVE-2023-28635 via vantage6 (3.7.2)

vantage6 PYPI version 3.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.7.2 - vantage6-server 3.7.2 Source cves: CVE-2023-28635 Source advisory: OSV:PYSEC-2026-2006...

vantage6-node (3.3.8a6), vantage6-server (3.3.8a6) potentially affected by CVE-2023-28635 via vantage6 (3.3.8a6)

vantage6 PYPI version 3.3.8a6 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.3.8a6 - vantage6-server 3.3.8a6 Source cves: CVE-2023-28635 Source advisory: OSV:PYSEC-2026-2006...

vantage6-node (3.9.0), vantage6-server (3.9.0) potentially affected by CVE-2023-28635 via vantage6 (3.9.0)

vantage6 PYPI version 3.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.9.0 - vantage6-server 3.9.0 Source cves: CVE-2023-28635 Source advisory: OSV:PYSEC-2026-2006...

vantage6-node (3.3.6), vantage6-server (3.3.6) potentially affected by CVE-2023-28635 via vantage6 (3.3.6)

vantage6 PYPI version 3.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.3.6 - vantage6-server 3.3.6 Source cves: CVE-2023-28635 Source advisory: OSV:PYSEC-2026-2006...

vantage6-node (3.1.0rc1), vantage6-server (3.1.0rc1) potentially affected by CVE-2023-28635 via vantage6 (3.1.0rc1)

vantage6 PYPI version 3.1.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.1.0rc1 - vantage6-server 3.1.0rc1 Source cves: CVE-2023-28635 Source advisory: OSV:PYSEC-2026-2006...

vantage6-node (3.3.3), vantage6-server (3.3.3) potentially affected by CVE-2023-28635 via vantage6 (3.3.3)

vantage6 PYPI version 3.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.3.3 - vantage6-server 3.3.3 Source cves: CVE-2023-28635 Source advisory: OSV:PYSEC-2026-2006...

vantage6-node (3.2.0rc2), vantage6-server (3.2.0rc2) potentially affected by CVE-2023-28635 via vantage6 (3.2.0rc2)

vantage6 PYPI version 3.2.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.2.0rc2 - vantage6-server 3.2.0rc2 Source cves: CVE-2023-28635 Source advisory: OSV:PYSEC-2026-2006...

vantage6-node (3.6.0), vantage6-server (3.6.0) potentially affected by CVE-2023-28635 via vantage6 (3.6.0)

vantage6 PYPI version 3.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.6.0 - vantage6-server 3.6.0 Source cves: CVE-2023-28635 Source advisory: OSV:PYSEC-2026-2006...

vantage6-node (3.3.0rc3), vantage6-server (3.3.0rc3) potentially affected by CVE-2023-28635 via vantage6 (3.3.0rc3)

vantage6 PYPI version 3.3.0rc3 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.3.0rc3 - vantage6-server 3.3.0rc3 Source cves: CVE-2023-28635 Source advisory: OSV:PYSEC-2026-2006...

vantage6-node (0.0.0), vantage6-server (0.0.0) potentially affected by CVE-2023-28635 via vantage6 (0.0.0)

vantage6 PYPI version 0.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 0.0.0 - vantage6-server 0.0.0 Source cves: CVE-2023-28635 Source advisory: OSV:PYSEC-2026-2006...

vantage6-node (3.7.1), vantage6-server (3.7.1) potentially affected by CVE-2023-28635 via vantage6 (3.7.1)

vantage6 PYPI version 3.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.7.1 - vantage6-server 3.7.1 Source cves: CVE-2023-28635 Source advisory: OSV:PYSEC-2026-2006...

vantage6-node (3.1.1rc2), vantage6-server (3.1.1rc2) potentially affected by CVE-2023-28635 via vantage6 (3.1.1rc2)

vantage6 PYPI version 3.1.1rc2 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.1.1rc2 - vantage6-server 3.1.1rc2 Source cves: CVE-2023-28635 Source advisory: OSV:PYSEC-2026-2006...

vantage6-node (3.0.0), vantage6-server (3.0.0) potentially affected by CVE-2023-28635 via vantage6 (3.0.0)

vantage6 PYPI version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.0.0 - vantage6-server 3.0.0 Source cves: CVE-2023-28635 Source advisory: OSV:PYSEC-2026-2006...

TensorFlow vulnerable to null-dereference in `mlir::tfg::GraphDefImporter::ConvertNodeDef`

ImpactWhen mlir::tfg::GraphDefImporter::ConvertNodeDef tries to convert NodeDefs without an op name, it crashes.cppStatus GraphDefImporter::ConvertNodeDefOpBuilder , ConversionState , const NodeDef VLOG4 opdef; else auto it = functionopdefs.findnode.op; if it == functionopdefs.end return...

ROOT-APP-NPM-CVE-2026-35213 CVE-2026-35213 in @rootio/hapi__content - Patched by Root

Root has patched CVE-2026-35213 in the @rootio/hapicontent package for Root:npm. Multiple fixed versions available...

MAL-2026-10655 Malicious code in @pimy-b2cweb/apiclient-b2cweb-r2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 2e81b01be81080333f758249c9b2b33eea63eff7eb1d10c62c6b42288e99a227 The OpenSSF Package Analysis project identified '@pimy-b2cweb/apiclient-b2cweb-r2' @ 99.99.99 npm as malicious. It is considered malicious...

Malicious code in @higherlogic/ocfe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2bbd559291bd6c2d7889aebe011bb43bef61938171904f5c9ff378f33fd9e5e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2026-6911 Malicious code in @higherlogic/ocfe (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2bbd559291bd6c2d7889aebe011bb43bef61938171904f5c9ff378f33fd9e5e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in paperclip-adapter-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d49d1a6c5381f58370cbfedc2321bd44796eb4ea79541d967a661760d9759801 [email protected] executes a credential-theft and C2 backdoor automatically on import. The package's main re-exports...

Malicious code in chai-spycore (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fbb99516f251bbd13baae5273239a6a04acefea76ddf1a7b06f4b5a328339dae Package republishes the chai-spies Chai plugin source verbatim including original author header under the near-identical name chai-spycore...