29 matches found
CVE-2026-50185 vulnerabilities
Vulnerabilities for packages: komodo, yazi, pixi, deno, mountpoint-s3, apollo-router...
GHSA-3RJW-M598-PQ24 vulnerabilities
Vulnerabilities for packages: komodo, yazi, pixi, deno, mountpoint-s3, apollo-router...
GHSA-Q53Q-5R4J-5729 rattler has an entry-point path traversal in noarch:python install (arbitrary file write)
Summary EntryPoint::FromStr in rattlercondatypes performs only .trim on the command field before the linker joins it onto the install prefix and writes an executable Python script. A malicious noarch:python package can ship an info/link.json with an entry-point name containing .., /, , or an...
mahoraga (>=0.5.1 <=0.6.0), pixi-browse (>=0.0.1 <=0.0.13) +2 more potentially affected by CVE-2026-47425 via py-rattler (>=0.22.0 <=0.23.2)
py-rattler PYPI version =0.22.0, =0.5.1, =0.0.1, =0.1.0, =0.8.0 Source cves: CVE-2026-47425 Source advisory: OSV:GHSA-Q53Q-5R4J-5729...
rattler has an entry-point path traversal in noarch:python install (arbitrary file write)
Summary EntryPoint::FromStr in rattlercondatypes performs only .trim on the command field before the linker joins it onto the install prefix and writes an executable Python script. A malicious noarch:python package can ship an info/link.json with an entry-point name containing .., /, , or an...
CVE-2025-4574 vulnerabilities
Vulnerabilities for packages: oranda, lychee, rust-analyzer, deno, cargo-audit, nushell, pixi, yara-x, fd, zed, cargo-c, starship, wasmcloud, ruff, yazi, oxipng, samply, wadm...
CVE-2025-4574 vulnerabilities
Vulnerabilities for packages: yara-x, lychee, cargo-audit, zed, ztunnel-fips, nushell, samply, oxipng, rust-analyzer, ruff, ztunnel, deno, pixi, wasmcloud, cargo-c, yazi, oranda, fd, starship, wadm...
CVE-2025-62518 vulnerabilities
Vulnerabilities for packages: pixi...
GHSA-J5GW-2VRG-8FGX vulnerabilities
Vulnerabilities for packages: pixi...
CVE-2025-62518 vulnerabilities
Vulnerabilities for packages: pixi...
GHSA-J5GW-2VRG-8FGX vulnerabilities
Vulnerabilities for packages: pixi...
CVE-2025-55159 vulnerabilities
Vulnerabilities for packages: shadowsocks-rust, uv, linkerd2, efs-utils, pixi, zola, mdbook, linkerd2-proxy, linkerd-extension-init, buck2...
GHSA-QX2V-8332-M4FV vulnerabilities
Vulnerabilities for packages: shadowsocks-rust, uv, linkerd2, efs-utils, pixi, zola, mdbook, linkerd2-proxy, linkerd-extension-init, buck2...
CVE-2025-55159 vulnerabilities
Vulnerabilities for packages: efs-utils, zola, mdbook, pixi, linkerd2, buck2, uv, linkerd2-proxy, shadowsocks-rust, linkerd-extension-init, jujutsu...
GHSA-QX2V-8332-M4FV vulnerabilities
Vulnerabilities for packages: efs-utils, zola, mdbook, pixi, linkerd2, buck2, uv, linkerd2-proxy, shadowsocks-rust, linkerd-extension-init, jujutsu...
GHSA-4P46-PWFR-66X6 vulnerabilities
Vulnerabilities for packages: wasmtime, zizmor, lychee, cargo-audit, shadowsocks-rust, zed, nushell, ntpd-rs, samply, sccache, parseable, uv, fnm, atuin, rustls-ffi, zola, deno, pixi, xh, wasmcloud, linkerd2-proxy, linkerd-extension-init, rye, kdash, tealdeer, sqlx, buck2, oranda, wash, wadm,...
GHSA-QG5G-GV98-5FFH vulnerabilities
Vulnerabilities for packages: tealdeer, pixi, xh, cargo-audit, parseable, wasmcloud, uv, wash, zed, wadm, fnm, qdrant, wasm-pack, ntpd-rs...
GHSA-2326-PFPJ-VX3H vulnerabilities
Vulnerabilities for packages: nushell, pixi, deno, wash, parseable...