chromewhip (>=0.3.0, <=0.3.4), gerapy-auto-extractor (>=0.0.1a1, <=0.1.2) +11 more potentially affected by CVE-2026-41066 via lxml (4.3.3)

lxml PYPI version 4.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on lxml and may be impacted: - chromewhip =0.3.0, =0.0.1a1, =0.0.2, =1.2.2, =2019.5.24, =0.0.1, =1.3.7, =0.7.0, =0.1.0a1.dev1, =0.1.0a1.dev2 - spam 0.3.3 Source cves: CVE-2026-41066...

MAL-2025-28968 Malicious code in pcpartpicker (npm)

The package pcpartpicker was found to contain malicious code...

Malicious code in pcpartpicker (npm)

The package pcpartpicker was found to contain malicious code...

es.pcpartpicker.com XSS vulnerability

Vulnerable URL: https://es.pcpartpicker.com/qapi/partlist/choices/?cc=us=/-///%27/%22///%20/oNcliCk=alert/OPENBUGBOUNTY/%20/ Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

in.pcpartpicker.com XSS vulnerability

Vulnerable URL: https://in.pcpartpicker.com/qapi/partlist/choices/?cc=us=/-///%27/%22///%20/oNcliCk=alert/OPENBUGBOUNTY/%20/ Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...