EUVD-2026-82414

NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. The absence of tests/init.py and the lack of --import-mode=importlib cause pytest prepend import mode to place the tests directory at the front of sys.path during collection. An...

delete-branches (1.2.14), delete-workflow-runs (1.2.32) +6 more potentially affected by CVE-2026-102938 via virtualenv (20.35.3)

virtualenv PYPI version 20.35.3 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - delete-branches 1.2.14 - delete-workflow-runs 1.2.32 - ironoc-pytest-conor-heffron =2.1.7, =2.2.0 - pkg-15903 0.1.100 - pkg-26548 1.3.32 -...

aieng-platform-onboard (>=0.5.0, <=0.7.5), autodocgenerator (>=0.5.1, <=1.6.6.8) +10 more potentially affected by CVE-2026-102938 via virtualenv (20.36.1)

virtualenv PYPI version 20.36.1 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - aieng-platform-onboard =0.5.0, =0.5.1, =1.1.0.dev20260322010408, =0.0.0, =2.2.9, =0.5.0, =1.0.0, =1.0.0b2, =1.1.0, =1.2.0 - waldiez-runner...

foxbms-fox-cli (1.12.0), ironoc-pytest-conor-heffron (>=2.3.4, <=2.5.1) +8 more potentially affected by CVE-2026-102938 via virtualenv (>=21.1.0, <=21.7.4)

virtualenv PYPI version =21.1.0, =2.3.4, =0.1.4, =0.1.0, =0.3.1, =0.0.3, =1.5.1, =1.1.0, =1.0.0, =2.0.0, =2.0.1 Source cves: CVE-2026-102938 Source advisory: OSV:PYSEC-2026-4012...

CVE-2026-54916: Uncontrolled Search Path Element

NetBox Device Type Library is a collection of community-sourced device type definitions for import into NetBox. The absence of tests/init.py and the lack of --import-mode=importlib cause pytest prepend import mode to place the tests directory at the front of sys.path during collection. An...

Incomplete List of Disallowed Inputs

Overview google-adk is an Agent Development Kit Affected versions of this package are vulnerable to Incomplete List of Disallowed Inputs in the adk web process due to an incomplete denylist of standard library modules. An attacker can execute arbitrary code by sending a crafted test session repla...

CVE-2026-79696

Google Cloud Agent Development Kit (ADK) for Python (versions 2.0.0 through 2.6.0) contains a code injection vulnerability in the adk web component caused by an incomplete standard library denylist . In environments where pytest is installed—on Python (OSS), Cloud Run, and GKE—an unauthenticated ...

PT-2026-88902

CVE-2026-79696: A Perfect 10.0 in Google's Agent Toolkit Google just shipped a fix for a vulnerability that scored a perfect 10.0 on the CVSS scale — the maximum severity a flaw can get. The bug lives in ADK, Google Cloud's Agent Development Kit for Python — the framework a growing number of team...

python313-pytest-html-4.2.0-5.1 on GA media (moderate)

python313-pytest-html-4.2.0-5.1 on GA media Announcement ID: openSUSE-SU-2026:11540-1 Rating: moderate Cross-References: CVE-2026-73088 CVSS scores: CVE-2026-73088 SUSE : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2026-73088 SUSE : 8.7...

openSUSE 16 Security Update : python-pytest-html (openSUSE-SU-2026:21602-1)

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21602-1 advisory. Changes in python-pytest-html: - Revendor browserslist to fix the following: CVE-2026-73088: unguarded for...in loop over untrusted JSON keys in...

Security update for python-pytest-html (important)

openSUSE security update: security update for python-pytest-html ------------------------------------------------------------- Announcement ID: openSUSE-SU-2026:21602-1 Rating: important References: bsc1275374 bsc1275437 Cross-References: CVE-2026-73088 CVE-2026-73089 CVSS scores: CVE-2026-73088...

homeassistant-stubs (2021.4.0b4), pytest-homeassistant-custom-component (0.3.0) potentially affected by CVE-2026-64825 via homeassistant (2021.4.0b4)

homeassistant PYPI version 2021.4.0b4 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2021.4.0b4 - pytest-homeassistant-custom-component 0.3.0 Source cves: CVE-2026-64825 Source advisory:...

homeassistant-stubs (2021.4.4), pytest-homeassistant-custom-component (0.3.1) potentially affected by CVE-2026-64825 via homeassistant (2021.4.4)

homeassistant PYPI version 2021.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2021.4.4 - pytest-homeassistant-custom-component 0.3.1 Source cves: CVE-2026-64825 Source advisory:...

homeassistant-stubs (2021.7.0b0), pytest-homeassistant-custom-component (0.4.2) potentially affected by CVE-2026-64825 via homeassistant (2021.7.0b0)

homeassistant PYPI version 2021.7.0b0 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2021.7.0b0 - pytest-homeassistant-custom-component 0.4.2 Source cves: CVE-2026-64825 Source advisory:...

homeassistant-stubs (2021.10.0b1), pytest-homeassistant-custom-component (0.4.5) potentially affected by CVE-2026-64825 via homeassistant (2021.10.0b1)

homeassistant PYPI version 2021.10.0b1 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2021.10.0b1 - pytest-homeassistant-custom-component 0.4.5 Source cves: CVE-2026-64825 Source advisory:...

homeassistant-stubs (2021.11.0b0), pytest-homeassistant-custom-component (0.4.6) potentially affected by CVE-2026-64825 via homeassistant (2021.11.0b0)

homeassistant PYPI version 2021.11.0b0 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2021.11.0b0 - pytest-homeassistant-custom-component 0.4.6 Source cves: CVE-2026-64825 Source advisory:...

homeassistant-stubs (2021.11.1), pytest-homeassistant-custom-component (>=0.4.7, <=0.4.8) potentially affected by CVE-2026-64825 via homeassistant (2021.11.1)

homeassistant PYPI version 2021.11.1 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2021.11.1 - pytest-homeassistant-custom-component =0.4.7, =0.4.8 Source cves: CVE-2026-64825 Source advisory:...

homeassistant-stubs (2021.11.2), pytest-homeassistant-custom-component (0.4.9) potentially affected by CVE-2026-64825 via homeassistant (2021.11.2)

homeassistant PYPI version 2021.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2021.11.2 - pytest-homeassistant-custom-component 0.4.9 Source cves: CVE-2026-64825 Source advisory:...

homeassistant-stubs (2021.11.3), pytest-homeassistant-custom-component (0.4.10) potentially affected by CVE-2026-64825 via homeassistant (2021.11.3)

homeassistant PYPI version 2021.11.3 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2021.11.3 - pytest-homeassistant-custom-component 0.4.10 Source cves: CVE-2026-64825 Source advisory:...

homeassistant-stubs (2021.11.5), pytest-homeassistant-custom-component (0.4.12) potentially affected by CVE-2026-64825 via homeassistant (2021.11.5)

homeassistant PYPI version 2021.11.5 is affected by a known vulnerability. The following packages have a transitive dependency on homeassistant and may be impacted: - homeassistant-stubs 2021.11.5 - pytest-homeassistant-custom-component 0.4.12 Source cves: CVE-2026-64825 Source advisory:...