PYSEC-2026-1070 Malicious code in langchain-core-mcp (PyPI)

Part of the "Hades" wave of the Shai-Hulud supply-chain campaign. On 2026-06-08, malicious phantom releases of langchain-core-mcp were published to PyPI using stolen credentials. The package executes a bundled JavaScript payload via the Bun runtime on import that harvests and exfiltrates...

tuf-on-ci-sign (>=0.1.0, <=0.14.0) potentially affected by CVE-2026-24408 via sigstore (2.1.5)

sigstore PYPI version 2.1.5 is affected by a known vulnerability. The following packages have a transitive dependency on sigstore and may be impacted: - tuf-on-ci-sign =0.1.0, =0.14.0 Source cves: CVE-2026-24408 Source advisory: OSV:PYSEC-2026-1924...

FastAPI SSP is vulnerable to Cross-site Request Forgery (CSRF) through improper OAuth parameter validation

Versions of the package fastapi-sso before 0.19.0 are vulnerable to Cross-site Request Forgery CSRF due to the improper validation of the OAuth state parameter during the authentication callback. While the getloginurl method allows for state generation, it does not persist the state or bind it to...

BBOT's gitlab.py exposes globally configured "gitlab" API key

Summarybbot's gitlab.py sends the user's "gitlab" API key to on-premise GitLab instances.If a user has configured a gitlab.com API key using this mechanism, it may be leaked to an attacker-controlled server. ImpactA user with a "gitlab" API key configured who uses bbot to scan a malicious webserv...

PYSEC-2026-1217 BBOT's gitlab.py exposes globally configured "gitlab" API key

Summary bbot's gitlab.py sends the user's "gitlab" API key to on-premise GitLab instances. If a user has configured a gitlab.com API key using this mechanism, it may be leaked to an attacker-controlled server. Impact A user with a "gitlab" API key configured who uses bbot to scan a malicious...

Salt's file contents overwrite the VirtKey class

File contents overwrite the VirtKey class is called when “on-demand pillar” data is requested and uses un-validated input to create paths to the “pki directory”. The functionality is used to auto-accept Minion authentication keys based on a pre-placed “authorization file” at a specific location a...

Salt's on demand pillar functionality vulnerable to arbitrary command injections

An attacker with access to a minion key can exploit the 'on demand' pillar functionality with a specially crafted git url which could cause and arbitrary command to be run on the master with the same privileges as the master process...

PYSEC-2026-1895 Salt's file contents overwrite the VirtKey class

File contents overwrite the VirtKey class is called when “on-demand pillar” data is requested and uses un-validated input to create paths to the “pki directory”. The functionality is used to auto-accept Minion authentication keys based on a pre-placed “authorization file” at a specific location a...

PYSEC-2026-1898 Salt's on demand pillar functionality vulnerable to arbitrary command injections

An attacker with access to a minion key can exploit the 'on demand' pillar functionality with a specially crafted git url which could cause and arbitrary command to be run on the master with the same privileges as the master process...

cklauth (>=0.1.0, <=0.3.0), django-models-logging (1.0.0) +9 more potentially affected by CVE-2026-53877 via django (2.0.0)

django PYPI version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - cklauth =0.1.0, =0.1.0, =1.7.0, =1.7.2 - djangotheming 0.1.0 - fastaudiovisal 0.0.1 - fastaudiovisual 0.0.1 - ip2l 8.5.1 - prediction 0.0.3 -...

cabrnet (1.1.0), lisa-on-cuda (1.2.0) potentially affected by CVE-2024-8966 via gradio (4.33.0)

gradio PYPI version 4.33.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - cabrnet 1.1.0 - lisa-on-cuda 1.2.0 Source cves: CVE-2024-8966 Source advisory: OSV:PYSEC-2026-1410...

africanwhisper (>=0.2.1, <=0.2.5), iopaint (>=1.2.3, <=1.6.0) +3 more potentially affected by CVE-2024-8966 via gradio (4.21.0)

gradio PYPI version 4.21.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - africanwhisper =0.2.1, =1.2.3, =1.0.4.post1, =0.2.2, =1.2.3 - llmtuner 0.6.2 Source cves: CVE-2024-8966 Source advisory: OSV:PYSEC-2026-1410...

cabrnet (1.1.0), lisa-on-cuda (1.2.0) potentially affected by CVE-2024-12217 via gradio (4.33.0)

gradio PYPI version 4.33.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - cabrnet 1.1.0 - lisa-on-cuda 1.2.0 Source cves: CVE-2024-12217 Source advisory: OSV:PYSEC-2026-1418...

infervcpy (>=0.1.0, <=1.6.0), lisa-on-cuda (1.4.1) +3 more potentially affected by CVE-2024-12217 via gradio (4.40.0)

gradio PYPI version 4.40.0 is affected by a known vulnerability. The following packages have a transitive dependency on gradio and may be impacted: - infervcpy =0.1.0, =0.0.12, =1.0.0a30, =1.0.0, =1.0.1 Source cves: CVE-2024-12217 Source advisory: OSV:PYSEC-2026-1418...

PYSEC-2026-1705 NiceGUI On Air authentication issue

Summary Once a user logins to one browser, all other browsers are logged in without entering password. Even incognito mode. Impact high...

NiceGUI On Air authentication issue

SummaryOnce a user logins to one browser, all other browsers are logged in without entering password. Even incognito mode. Impacthigh...

projectair (1.1.0), pypi-attestation-models (>=0.0.1rc1, <=0.0.5) +2 more potentially affected by CVE-2024-55655 via sigstore (>=2.1.5, <=3.5.6)

sigstore PYPI version =2.1.5, =0.0.1rc1, =0.0.6, =0.1.0, =0.14.0 Source cves: CVE-2024-55655 Source advisory: OSV:PYSEC-2026-1923...

dragonn (0.4.2), dream-on-gym (0.0.1) +5 more potentially affected by CVE-2023-33976 via tensorflow-gpu (1.15.0)

tensorflow-gpu PYPI version 1.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - dragonn 0.4.2 - dream-on-gym 0.0.1 - ml4a =0.1.0, =0.0.3, =0.3.0, =0.9.0, =0.0.5, =0.0.88 Source cves: CVE-2023-33976 Source...

dragonn (0.4.2), dream-on-gym (0.0.1) +5 more potentially affected by CVE-2022-41911 via tensorflow-gpu (1.15.0)

tensorflow-gpu PYPI version 1.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - dragonn 0.4.2 - dream-on-gym 0.0.1 - ml4a =0.1.0, =0.0.3, =0.3.0, =0.9.0, =0.0.5, =0.0.88 Source cves: CVE-2022-41911 Source...

PYSEC-2026-1191 Apache Superset: Improper data authorization when creating a new dataset

Apache Superset with custom roles that include can write on dataset and without all data access permissions, allows for users to create virtual datasets to data they don't have access to. These users could then use those virtual datasets to get access to unauthorized data. This issue affects Apac...