43 matches found
GHSA-2MJX-QC3C-RQVC vulnerabilities
Vulnerabilities for packages: zola, tealdeer, kdash, samply, linkerd-network-validator, cargo-audit, lychee, deno, sdp-k8s-injector, xh, wadm, pnpm, linkerd2-proxy, shadowsocks-rust, sccache, zizmor, pixi, vector, zellij, ntpd-rs, qdrant, zed...
GHSA-8FFR-XGWF-XJ56 vulnerabilities
Vulnerabilities for packages: zed, codex, pixi...
CVE-2026-18140 vulnerabilities
Vulnerabilities for packages: zed, codex, pixi...
GHSA-8FFR-XGWF-XJ56 vulnerabilities
Vulnerabilities for packages: zed, pixi, codex...
CVE-2026-18140 vulnerabilities
Vulnerabilities for packages: zed, pixi, codex...
mahoraga (>=0.5.1, <=0.6.0), pixi-browse (>=0.0.1, <=0.0.13) +5 more potentially affected by CVE-2026-53956 via py-rattler (>=0.5.0, <=0.23.2)
py-rattler PYPI version =0.5.0, =0.5.1, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.10.3 Source cves: CVE-2026-53956 Source advisory: MEND:CVE-2026-53956...
GO-2025-3678 vulnerabilities
Vulnerabilities for packages: wasmcloud, zola, tealdeer, kdash, wasm-pack, buck2, samply, wash, atuin, cargo-audit, lychee, rye, oranda, deno, nushell, sdp-k8s-injector, xh, wadm, wasmtime, linkerd2-proxy, shadowsocks-rust, sccache, uv, zizmor, rustls-ffi, pixi, linkerd-extension-init, parseable,...
mahoraga (>=0.5.1, <=0.6.0), pixi-browse (>=0.0.1, <=0.0.13) +5 more potentially affected by CVE-2026-47425 via py-rattler (>=0.5.0, <=0.23.2)
py-rattler PYPI version =0.5.0, =0.5.1, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.10.3 Source cves: CVE-2026-47425 Source advisory: MEND:CVE-2026-47425...
CVE-2026-47425: Improper Limitation of a Pathname to a Restricted Directory
Rattler is a library that provides common functionality used within the conda ecosystem. Prior to version 0.43.2, EntryPoint::FromStr in rattlercondatypes performs only .trim on the command field before the linker joins it onto the install prefix and writes an executable Python script. A maliciou...
mahoraga (>=0.5.1, <=0.6.0), pixi-browse (>=0.0.1, <=0.0.13) +5 more potentially affected by CVE-2026-47425 via py-rattler (>=0.5.0, <=0.23.2)
py-rattler PYPI version =0.5.0, =0.5.1, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.10.3 Source cves: CVE-2026-47425 Source advisory: OSV:PYSEC-2026-2971...
mahoraga (>=0.5.1, <=0.6.0), pixi-browse (>=0.0.1, <=0.0.13) +5 more potentially affected by CVE-2026-53956 via py-rattler (>=0.5.0, <=0.23.2)
py-rattler PYPI version =0.5.0, =0.5.1, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.10.3 Source cves: CVE-2026-53956 Source advisory: OSV:GHSA-H672-P7H7-97V9...
mahoraga (>=0.5.1, <=0.6.0), pixi-browse (>=0.0.1, <=0.0.13) +5 more potentially affected by CVE-2026-53956 via py-rattler (>=0.5.0, <=0.23.2)
py-rattler PYPI version =0.5.0, =0.5.1, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.10.3 Source cves: CVE-2026-53956 Source advisory: GHSA-H672-P7H7-97V9...
GHSA-3RJW-M598-PQ24 vulnerabilities
Vulnerabilities for packages: komodo, yazi, pixi, deno, apollo-router, mountpoint-s3...
CVE-2026-50185 vulnerabilities
Vulnerabilities for packages: komodo, yazi, pixi, deno, apollo-router, mountpoint-s3...
rattler has an entry-point path traversal in noarch:python install (arbitrary file write)
Summary EntryPoint::FromStr in rattlercondatypes performs only .trim on the command field before the linker joins it onto the install prefix and writes an executable Python script. A malicious noarch:python package can ship an info/link.json with an entry-point name containing .., /, , or an...
GHSA-Q53Q-5R4J-5729 rattler has an entry-point path traversal in noarch:python install (arbitrary file write)
Summary EntryPoint::FromStr in rattlercondatypes performs only .trim on the command field before the linker joins it onto the install prefix and writes an executable Python script. A malicious noarch:python package can ship an info/link.json with an entry-point name containing .., /, , or an...
mahoraga (>=0.5.1, <=0.6.0), pixi-browse (>=0.0.1, <=0.0.13) +5 more potentially affected by CVE-2026-47425 via py-rattler (>=0.5.0, <=0.23.2)
py-rattler PYPI version =0.5.0, =0.5.1, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.10.3 Source cves: CVE-2026-47425 Source advisory: OSV:GHSA-Q53Q-5R4J-5729...
mahoraga (>=0.5.1, <=0.6.0), pixi-browse (>=0.0.1, <=0.0.13) +5 more potentially affected by CVE-2026-47425 via py-rattler (>=0.5.0, <=0.23.2)
py-rattler PYPI version =0.5.0, =0.5.1, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.10.3 Source cves: CVE-2026-47425 Source advisory: SNYK:PYTHON-PYRATTLER-17661108...
mahoraga (>=0.5.1, <=0.6.0), pixi-browse (>=0.0.1, <=0.0.13) +5 more potentially affected by CVE-2026-47425 via py-rattler (>=0.5.0, <=0.23.2)
py-rattler PYPI version =0.5.0, =0.5.1, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.10.3 Source cves: CVE-2026-47425 Source advisory: GHSA-Q53Q-5R4J-5729...