distill-trainer (>=0.1.0, <=0.1.1), poetry-plugin-export (1.3.1) +1 more potentially affected by CVE-2026-41140 via poetry (1.5.0)

poetry PYPI version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on poetry and may be impacted: - distill-trainer =0.1.0, =0.1.1 - poetry-plugin-export 1.3.1 - wolf-core 2.0.1 Source cves: CVE-2026-41140 Source advisory: OSV:PYSEC-2026-2890...

poetry-plugin-export (1.0.4) potentially affected by CVE-2026-41140 via poetry (1.2.0b2)

poetry PYPI version 1.2.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on poetry and may be impacted: - poetry-plugin-export 1.0.4 Source cves: CVE-2026-41140 Source advisory: OSV:PYSEC-2026-2890...

appcensus-dynamic-repos (0.6.1.91), poetry-grpc-plugin (0.1.5) +5 more potentially affected by CVE-2026-41140 via poetry (1.3.2)

poetry PYPI version 1.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on poetry and may be impacted: - appcensus-dynamic-repos 0.6.1.91 - poetry-grpc-plugin 0.1.5 - poetry-plugin-export 1.2.0 - poetry-plugin-pypi-mirror 0.3.0 -...

pab (>=2.5.5, <=2.8.1), poetry-alias (0.1.0) +2 more potentially affected by CVE-2026-41140 via poetry (1.2.0b3)

poetry PYPI version 1.2.0b3 is affected by a known vulnerability. The following packages have a transitive dependency on poetry and may be impacted: - pab =2.5.5, =2.8.1 - poetry-alias 0.1.0 - poetry-plugin-export 1.0.5 - poetry-scaffold-plugin 0.1.0 Source cves: CVE-2026-41140 Source advisory:...

poetry-plugin-export (1.0.6) potentially affected by CVE-2026-41140 via poetry (1.2.0)

poetry PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on poetry and may be impacted: - poetry-plugin-export 1.0.6 Source cves: CVE-2026-41140 Source advisory: OSV:PYSEC-2026-2890...

poetry-plugin-export (>=1.0.7, <=1.1.1), poetry-plugin-tweak-dependencies-version (0.1.0) potentially affected by CVE-2026-41140 via poetry (1.2.1)

poetry PYPI version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on poetry and may be impacted: - poetry-plugin-export =1.0.7, =1.1.1 - poetry-plugin-tweak-dependencies-version 0.1.0 Source cves: CVE-2026-41140 Source advisory: OSV:PYSEC-2026-289...

Malware in @antv/x6-plugin-export

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2026-4103 Malicious code in @antv/x6-plugin-export (npm)

Part of the Mini Shai-Hulud supply chain attack campaign in which a threat actor compromised the npm account atool and published 631 malicious versions across 314 npm packages in an automated 22-minute burst. Each malicious version injects a preinstall hook that executes a 498KB obfuscated Bun...

poetry-plugin-export (1.0.4) potentially affected by CVE-2026-41140 via poetry (1.2.0b2)

poetry PYPI version 1.2.0b2 is affected by a known vulnerability. The following packages have a transitive dependency on poetry and may be impacted: - poetry-plugin-export 1.0.4 Source cves: CVE-2026-41140 Source advisory: OSV:GHSA-73H3-MF4W-8647...

poetry-plugin-export (>=1.0.7, <=1.1.1), poetry-plugin-tweak-dependencies-version (0.1.0) potentially affected by CVE-2026-41140 via poetry (1.2.1)

poetry PYPI version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on poetry and may be impacted: - poetry-plugin-export =1.0.7, =1.1.1 - poetry-plugin-tweak-dependencies-version 0.1.0 Source cves: CVE-2026-41140 Source advisory:...

distill-trainer (>=0.1.0, <=0.1.1), poetry-plugin-export (1.3.1) +1 more potentially affected by CVE-2026-41140 via poetry (1.5.0)

poetry PYPI version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on poetry and may be impacted: - distill-trainer =0.1.0, =0.1.1 - poetry-plugin-export 1.3.1 - wolf-core 2.0.1 Source cves: CVE-2026-41140 Source advisory: OSV:GHSA-73H3-MF4W-8647...

poetry-plugin-export (1.0.6) potentially affected by CVE-2026-41140 via poetry (1.2.0)

poetry PYPI version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on poetry and may be impacted: - poetry-plugin-export 1.0.6 Source cves: CVE-2026-41140 Source advisory: OSV:GHSA-73H3-MF4W-8647...

pab (>=2.5.5, <=2.8.1), poetry-alias (0.1.0) +2 more potentially affected by CVE-2026-41140 via poetry (1.2.0b3)

poetry PYPI version 1.2.0b3 is affected by a known vulnerability. The following packages have a transitive dependency on poetry and may be impacted: - pab =2.5.5, =2.8.1 - poetry-alias 0.1.0 - poetry-plugin-export 1.0.5 - poetry-scaffold-plugin 0.1.0 Source cves: CVE-2026-41140 Source advisory:...

PT-2025-12478 · WordPress · Export/Import Users/Customers

Name of the Vulnerable Software and Affected Versions: Export and Import Users and Customers plugin for WordPress versions up to, and including, 2.6.2 Description: The issue is related to PHP Object Injection via deserialization of untrusted input from the form data parameter. This allows...

WordPress Plugin Export and Import: Vulnerability Due to Path Traversal

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

WordPress Plugin Export WP Page to Static HTML/CSS Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

WordPress Plugin Export WP Page to Static HTML/CSS Security Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

WordPress Plugin Export and Import: Security Vulnerabilities

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...