13542 matches found
PYSEC-2026-206
Guardrails AI is a Python framework that helps build AI applications. On May 11, 2026 at approximately 6:00 PM Pacific, an attacker published a malicious version of guardrails-ai 0.10.1 to PyPI. Aany user who installed guardrails-ai==0.10.1 from PyPI on May 11, 2026 may be affected. Security...
PYSEC-2026-206
Guardrails AI is a Python framework that helps build AI applications. On May 11, 2026 at approximately 6:00 PM Pacific, an attacker published a malicious version of guardrails-ai 0.10.1 to PyPI. Aany user who installed guardrails-ai==0.10.1 from PyPI on May 11, 2026 may be affected. Security...
CVE-2026-3073
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 17.6 before 18.9.7, 18.10 before 18.10.6, and 18.11 before 18.11.3 that could have allowed an authenticated user with developer-role permissions to bypass PyPI package protection rules and upload restricted packages due to...
CVE-2026-45758
CVE-2026-45758 affects Guardrails AI (Python framework). A malicious PyPI release, guardrails-ai==0.10.1, was published on 2026-05-11. Security telemetry reports no observed requests to Guardrails AI infrastructure from 0.10.1 and no data exfiltration evidence, but affected users should act. The ...
CVE-2026-45758 Malicious code in guardrails-ai 0.10.1 (supply chain compromise)
Guardrails AI is a Python framework that helps build AI applications. On May 11, 2026 at approximately 6:00 PM Pacific, an attacker published a malicious version of guardrails-ai 0.10.1 to PyPI. Aany user who installed guardrails-ai==0.10.1 from PyPI on May 11, 2026 may be affected. Security...
EUVD-2026-34912
Guardrails AI is a Python framework that helps build AI applications. On May 11, 2026 at approximately 6:00 PM Pacific, an attacker published a malicious version of guardrails-ai 0.10.1 to PyPI. Aany user who installed guardrails-ai==0.10.1 from PyPI on May 11, 2026 may be affected. Security...
Malicious code in goodoldtoulas (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5414e9956c915ef34d422d9eba09177fb667bba375c43e9d9b54d4f87b628712 During pip install goodoldtoulas, setup.py invokes setuphelper which downloads main.exe from...
a-data-processing (0.0.1), ab-data-processing (0.0.1) +69 more potentially affected by CVE-2026-37737 via sanic-cors (>=0.9.2, <=2.2.0)
sanic-cors PYPI version =0.9.2, =0.2.2, =0.0.3, =0.3.0, =0.4.9, =1.1.0, =1.1.0, =0.0.3, =0.0.1, =0.0.3 - convo-nlu 0.1.0 - convo5 0.1.0 - convo6 0.1.0 and more Source cves: CVE-2026-37737 Source advisory: SNYK:PYTHON-SANICCORS-17675647...
aibrix-kvcache (>=0.1.0, <=0.1.0.post2), lmcache (>=0.3.0, <=0.3.5) +1 more potentially affected by CVE-2026-11312 via infinistore (0.2.35)
infinistore PYPI version 0.2.35 is affected by a known vulnerability. The following packages have a transitive dependency on infinistore and may be impacted: - aibrix-kvcache =0.1.0, =0.3.0, =0.3.5 - lmcache-test-test 1.0.5 Source cves: CVE-2026-11312 Source advisory:...
Guardrails 安全漏洞
Guardrails is a Python framework open source by Guardrails AI. Version 0.10.1 of Guardrails contains a security vulnerability. This vulnerability stems from the release of a malicious version to PyPI, which may cause damage to user systems...
Malicious code in sf-silly-goose-requests (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 d1b2d16ce881d1e9b356ed424f8144ce9324d09010efa8761ad13ac8a46e7b60 Package uses trufflehog to detect secrets and exfiltrates them to a hardcoded location --- Category: MALICIOUS - The campaign has clearly malicious intent, lik...
MAL-2026-5184 Malicious code in sf-silly-goose-requests (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 d1b2d16ce881d1e9b356ed424f8144ce9324d09010efa8761ad13ac8a46e7b60 Package uses trufflehog to detect secrets and exfiltrates them to a hardcoded location --- Category: MALICIOUS - The campaign has clearly malicious intent, lik...
adala (>=0.0.3, <=0.0.4), agent-actors (0.1.0) +42 more potentially affected by CVE-2026-10812 via gptcache (>=0.1.29.1, <=0.1.44)
gptcache PYPI version =0.1.29.1, =0.0.3, =0.0.5, =0.1.3, =0.28.9rc1, =0.13.0, =0.3.1, =0.1.48, =0.1.120a1, =0.1.120, =0.0.2, =0.5.17.post1, =0.6.0a2 and more Source cves: CVE-2026-10812 Source advisory: SNYK:PYTHON-GPTCACHE-17751096...
Malicious code in hpe-glcp-automation-lib (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 53256c57763ad4be286cf74bf0162b67413edc085338e3778ac9bc2afa1b4b93 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
MAL-2026-5183 Malicious code in hpe-glcp-automation-lib (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 53256c57763ad4be286cf74bf0162b67413edc085338e3778ac9bc2afa1b4b93 Installing the package or importing the module exfiltrates basic information about the host, and the package has no other purpose. --- Category: PROBABLYPENTES...
qgate-sln-mlrun (>=0.1.0, <=0.2.8) potentially affected by CVE-2026-10766 via mlrun (>=1.5.2, <=1.6.4)
mlrun PYPI version =1.5.2, =0.1.0, =0.2.8 Source cves: CVE-2026-10766 Source advisory: SNYK:PYTHON-MLRUN-17157375...
ROOT-APP-PYPI-CVE-2023-22946 CVE-2023-22946 in pyspark - Patched by Root
Root has patched CVE-2023-22946 in the pyspark package for Root:PyPI. Multiple fixed versions available...
ROOT-APP-PYPI-CVE-2022-40897 CVE-2022-40897 in rootio-setuptools - Patched by Root
Root has patched CVE-2022-40897 in the rootio-setuptools package for Root:PyPI. Multiple fixed versions available...