nova-tracer

Nova-tracer Agent Monitoring and Visibility Security monitoring and prompt injection defense for Claude Code using the NOVA Framework. Features Session Tracking - Captures all tool usage with timestamps and metadata Prompt Injection Detection - Three-tier scanning keywords, semantic ML, LLM -...

ansible-mongodb-store (>=0.1.0, <=0.3.0), bson-extra (0.0.4) +6 more potentially affected by CVE-2026-96749 via pymongo (3.12.2)

pymongo PYPI version 3.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - ansible-mongodb-store =0.1.0, =1.0.0, =1.0.0, =1.0.0, =0.15.2, =0.1.1, =0.2.14 - ss-daily-tools 1.0.0 Source cves: CVE-2026-96749 Source advisory...

ansible-mongodb-store (>=0.1.0, <=0.3.0), bson-extra (0.0.4) +6 more potentially affected by CVE-2026-88029 via pymongo (3.12.2)

pymongo PYPI version 3.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - ansible-mongodb-store =0.1.0, =1.0.0, =1.0.0, =1.0.0, =0.15.2, =0.1.1, =0.2.14 - ss-daily-tools 1.0.0 Source cves: CVE-2026-88029 Source advisory...

WordPress Shipping for Nova Poshta plugin 1.18.7-1.19.8 - Unauthenticated Order Shipment Record Deletion vulnerability

Unauthenticated Order Shipment Record Deletion vulnerability discovered by Emiliano Carrizo in WordPress Plugin Shipping for Nova Poshta versions 1.18.7-1.19.8...

CVE-2026-87846

The Shipping for Nova Poshta WordPress plugin through 1.19.8 does not perform any authorisation, nonce or ownership checks on one of its AJAX actions available to unauthenticated users, allowing anyone to delete the shipment records of arbitrary orders and to make the store issue the carrier's...

EUVD-2026-95707

The Shipping for Nova Poshta WordPress plugin through 1.19.8 does not perform any authorisation, nonce or ownership checks on one of its AJAX actions available to unauthenticated users, allowing anyone to delete the shipment records of arbitrary orders and to make the store issue the carrier's...

CVE-2026-87846

The Shipping for Nova Poshta WordPress plugin (versions 1.18.7 through 1.19.8 ) contains a vulnerability where an AJAX action lacks authorization, nonce, or ownership checks. This allows unauthenticated users to delete shipment records for arbitrary orders. Additionally, attackers can force the s...

CVE-2026-87846 Shipping for Nova Poshta 1.18.7 - 1.19.8 - Unauthenticated Order Shipment Record Deletion

The Shipping for Nova Poshta WordPress plugin through 1.19.8 does not perform any authorisation, nonce or ownership checks on one of its AJAX actions available to unauthenticated users, allowing anyone to delete the shipment records of arbitrary orders and to make the store issue the carrier's...

PT-2026-108872

Name of the Vulnerable Software and Affected Versions Shipping for Nova Poshta WordPress plugin versions prior to 1.19.9 Description An issue exists where an AJAX action available to unauthenticated users lacks authorization, nonce, or ownership checks. This allows an attacker to delete shipment...

CVE-2026-87846: Missing Authorization

The Shipping for Nova Poshta WordPress plugin through 1.19.8 does not perform any authorisation, nonce or ownership checks on one of its AJAX actions available to unauthenticated users, allowing anyone to delete the shipment records of arbitrary orders and to make the store issue the carrier's...

ansible-mongodb-store (>=0.1.0, <=0.3.0), bson-extra (0.0.4) +6 more potentially affected by CVE-2026-96749 via pymongo (3.12.2)

pymongo PYPI version 3.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - ansible-mongodb-store =0.1.0, =1.0.0, =1.0.0, =1.0.0, =0.15.2, =0.1.1, =0.2.14 - ss-daily-tools 1.0.0 Source cves: CVE-2026-96749 Source advisory...

ansible-mongodb-store (>=0.1.0, <=0.3.0), bson-extra (0.0.4) +6 more potentially affected by CVE-2026-88029 via pymongo (3.12.2)

pymongo PYPI version 3.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - ansible-mongodb-store =0.1.0, =1.0.0, =1.0.0, =1.0.0, =0.15.2, =0.1.1, =0.2.14 - ss-daily-tools 1.0.0 Source cves: CVE-2026-88029 Source advisory...

nova-prompt-optimizer (>=1.0.48, <=1.1.0), pkg-15903 (>=0.1.20, <=0.1.55) +9 more potentially affected by CVE-2026-102937 via virtualenv (20.31.2)

virtualenv PYPI version 20.31.2 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - nova-prompt-optimizer =1.0.48, =0.1.20, =0.1.1, =0.1.0, =1.0.0, =0.4.9, =0.5.3 Source cves: CVE-2026-102937 Source advisory:...

nova-prompt-optimizer (>=1.0.48, <=1.1.0), pkg-15903 (>=0.1.20, <=0.1.55) +9 more potentially affected by CVE-2026-102930 via virtualenv (20.31.2)

virtualenv PYPI version 20.31.2 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - nova-prompt-optimizer =1.0.48, =0.1.20, =0.1.1, =0.1.0, =1.0.0, =0.4.9, =0.5.3 Source cves: CVE-2026-102930 Source advisory:...

CVE-2026-102266 vulnerabilities

Vulnerabilities for packages: openstack-horizon-2025.1, openstack-placement-2026.1, openstack-placement-2025.2, authentik, azureml-inference-server-http-fips, airflow-postgres-fips, airflow-core, open-webui, openstack-glance-2026.1-fips, openstack-horizon-2026.1, py3-cassandra-medusa,...

GHSA-R6X4-923Q-G947 vulnerabilities

Vulnerabilities for packages: openstack-horizon-2025.1, openstack-placement-2026.1, openstack-placement-2025.2, authentik, azureml-inference-server-http-fips, airflow-postgres-fips, airflow-core, open-webui, openstack-glance-2026.1-fips, openstack-horizon-2026.1, py3-cassandra-medusa,...

CVE-2026-102269 vulnerabilities

Vulnerabilities for packages: openstack-horizon-2025.1, openstack-placement-2026.1, openstack-placement-2025.2, authentik, azureml-inference-server-http-fips, airflow-postgres-fips, airflow-core, open-webui, openstack-glance-2026.1-fips, openstack-horizon-2026.1, airflow, py3-cassandra-medusa,...

GHSA-W6J9-CWV2-H6WQ vulnerabilities

Vulnerabilities for packages: openstack-horizon-2025.1, openstack-placement-2026.1, openstack-placement-2025.2, authentik, azureml-inference-server-http-fips, airflow-postgres-fips, airflow-core, open-webui, openstack-glance-2026.1-fips, openstack-horizon-2026.1, airflow, py3-cassandra-medusa,...

GHSA-9V7F-9G4P-FFGJ vulnerabilities

Vulnerabilities for packages: openstack-horizon-2025.1, openstack-placement-2026.1, openstack-placement-2025.2, authentik, azureml-inference-server-http-fips, airflow-postgres-fips, airflow-core, open-webui, openstack-glance-2026.1-fips, openstack-horizon-2026.1, airflow, py3-cassandra-medusa,...

CVE-2026-101917 vulnerabilities

Vulnerabilities for packages: openstack-horizon-2025.1, openstack-placement-2026.1, openstack-placement-2025.2, authentik, azureml-inference-server-http-fips, airflow-postgres-fips, airflow-core, open-webui, openstack-glance-2026.1-fips, openstack-horizon-2026.1, airflow, py3-cassandra-medusa,...