acryl-datahub-airflow-plugin (>=0.8.44.4rc1, <=0.9.2.1), aerismodsdk (>=0.1.1, <=0.1.5) +678 more potentially affected by CVE-2026-101917 +1 more via pyjwt (1.7.1)

pyjwt PYPI version 1.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on pyjwt and may be impacted: - acryl-datahub-airflow-plugin =0.8.44.4rc1, =0.1.1, =1.6.2, =0.1.1, =0.6.0, =0.2.0, =0.0.3, =0.0.6, =0.0.1, =0.92.5, =2021.5.0b9 - alastria-identity...

foxbms-fox-cli (1.12.0), ironoc-pytest-conor-heffron (>=2.3.4, <=2.5.1) +8 more potentially affected by CVE-2026-102930 via virtualenv (>=21.1.0, <=21.7.4)

virtualenv PYPI version =21.1.0, =2.3.4, =0.1.4, =0.1.0, =0.3.1, =0.0.3, =1.5.1, =1.1.0, =1.0.0, =2.0.0, =2.0.1 Source cves: CVE-2026-102930 Source advisory: SNYK:PYTHON-VIRTUALENV-20335492...

aaa-ml-datasets-course (1.0.0), aerocm (0.1.0b0) +148 more potentially affected by CVE-2026-102904 via jupyterlab (>=4.0.0, <=4.5.8)

jupyterlab PYPI version =4.0.0, =0.5.5, =2.0.0, =4.33.0, =1.0.1, =0.1.0, =1.6.4b1, =0.0.1, =1.8.2, =0.0.1, =0.3.1, =0.1.0, =0.1.4 - cad-viewer-widget 3.0.2 and more Source cves: CVE-2026-102904 Source advisory: SNYK:PYTHON-JUPYTERLAB-20335547...

Malicious code in queeuees (PyPI)

Source: kam193 1adc88dd9031dc991006afcf10242d1de3aa7994f6bcb4542faed95524d6ebe0 Obfuscated code iterates over files in the system and adds a comment to every .py file found. --- Category: MALICIOUS - The campaign has clearly malicious intent, like infostealers. Campaign: 2026-09-queeuees Reasons...

CVE-2026-102904

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 4.0.0 until 4.5.11 and 4.6.4, the PyPI Extension Manager uninstall request reaches ExtensionHandler.post, which validates extension names for installatio...

DEBIAN-CVE-2026-102904

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 4.0.0 until 4.5.11 and 4.6.4, the PyPI Extension Manager uninstall request reaches ExtensionHandler.post, which validates extension names for installatio...

CVE-2026-102904

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 4.0.0 until 4.5.11 and 4.6.4, the PyPI Extension Manager uninstall request reaches ExtensionHandler.post, which validates extension names for installatio...

UBUNTU-CVE-2026-102904

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 4.0.0 until 4.5.11 and 4.6.4, the PyPI Extension Manager uninstall request reaches ExtensionHandler.post, which validates extension names for installatio...

arthur-common (>=2.4.82, <=2.4.86), boscli (>=2.3.0, <=2.3.1) +5 more potentially affected by unknown CVE via litellm (>=1.102.0, <=1.102.1)

litellm PYPI version =1.102.0, =2.4.82, =2.3.0, =0.9.4.18, =0.7.26, =1.0.1, =0.1.0, =1.5.5, =1.5.8 Source cves: unknown CVE Source advisory: SNYK:PYTHON-LITELLM-20840177...

0xpwn (0.1.1), a2a-acl (>=0.0.14, <=0.1.1) +892 more potentially affected by unknown CVE via litellm (>=1.67.4.post1, <=1.100.1)

litellm PYPI version =1.67.4.post1, =0.0.14, =0.0.14, =0.3.5, =0.7.3, =1.0.1, =1.0.2, =0.1.0rc1, =0.1.0, =0.4.0, =0.1.0, =1.10.4, =1.3.2, =0.1.39, =0.1.55 and more Source cves: unknown CVE Source advisory: SNYK:PYTHON-LITELLM-20840177...

arthur-common (>=2.4.80, <=2.4.81), heta-framework (0.1.3b1) +2 more potentially affected by unknown CVE via litellm (1.101.0)

litellm PYPI version 1.101.0 is affected by a known vulnerability. The following packages have a transitive dependency on litellm and may be impacted: - arthur-common =2.4.80, =1.7.1, =1.7.2 - pr-agent 0.46.0 Source cves: unknown CVE Source advisory: SNYK:PYTHON-LITELLM-20840177...

5gasp-cli (>=0.1.0, <=0.4.0), ablator (0.0.1b3) +766 more potentially affected by CVE-2026-102937 via virtualenv (>=1.11.6, <=21.7.4)

virtualenv PYPI version =1.11.6, =0.1.0, =0.2.0, =0.1.0, =0.5.1, =1.0.9, =0.5.0, =2023.2.21, =2.0.1, =0.12.0, =0.1.0, =0.2.0, =0.2.0, =0.3.4 and more Source cves: CVE-2026-102937 Source advisory: MEND:CVE-2026-102937...

CVE-2026-102904 JupyterLab: Argument injection in JupyterLab extension uninstall exposes server-readable files and internal URLs

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 4.0.0 until 4.5.11 and 4.6.4, the PyPI Extension Manager uninstall request reaches ExtensionHandler.post, which validates extension names for installatio...

CVE-2026-102904 JupyterLab: Argument injection in JupyterLab extension uninstall exposes server-readable files and internal URLs

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 4.0.0 until 4.5.11 and 4.6.4, the PyPI Extension Manager uninstall request reaches ExtensionHandler.post, which validates extension names for installatio...

CVE-2026-102904

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 4.0.0 until 4.5.11 and 4.6.4, the PyPI Extension Manager uninstall request reaches ExtensionHandler.post, which validates extension names for installatio...

CVE-2026-102904

In JupyterLab versions 4.0.0 through 4.5.11 and 4.6.4, an argument injection vulnerability exists in the PyPI Extension Manager . The ExtensionHandler.post method validates names for installation but fails to reject option-like values during uninstallation, passing them directly to PyPIExtensionM...

CVE-2026-102904

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 4.0.0 until 4.5.11 and 4.6.4, the PyPI Extension Manager uninstall request reaches ExtensionHandler.post, which validates extension names for installatio...

CVE-2026-102904 JupyterLab: Argument injection in JupyterLab extension uninstall exposes server-readable files and internal URLs

JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From JupyterLab 4.0.0 until 4.5.11 and 4.6.4, the PyPI Extension Manager uninstall request reaches ExtensionHandler.post, which validates extension names for installatio...

MAL-2026-17286 Malicious code in queeuees (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f793adc7f1d26294831307abed18a284d7834d8e4733a8b05d9863bf2d70c60d Queeuees 0.0.1 ships two top-level packages, Queeuees and Queues, with byte-identical init.py files. Each init.py assembles a byte blob from...

Malicious code in queeuees (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f793adc7f1d26294831307abed18a284d7834d8e4733a8b05d9863bf2d70c60d Queeuees 0.0.1 ships two top-level packages, Queeuees and Queues, with byte-identical init.py files. Each init.py assembles a byte blob from...