elyra-code-snippet-extension (>=3.14.0, <=3.14.1), elyra-code-viewer-extension (>=3.14.0, <=3.14.1) +9 more potentially affected by CVE-2026-73415 via jupyterlab (3.5.3)

jupyterlab PYPI version 3.5.3 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterlab and may be impacted: - elyra-code-snippet-extension =3.14.0, =3.14.0, =3.14.0, =3.14.0, =3.14.0, =3.14.0, =0.0.7, =0.1.2, =0.0.1, =0.1.0, =0.0.2, =0.0.3 Source cve...

cellmerge (>=0.1.0, <=0.1.1), jupyter-quant (2606.1.0) +4 more potentially affected by CVE-2026-73416 via jupyterlab (>=4.6.0, <=4.6.1)

jupyterlab PYPI version =4.6.0, =0.1.0, =1.2.0, =0.1.0, =0.1.1 - tiatoolbox 2.1.3 Source cves: CVE-2026-73416 Source advisory: OSV:PYSEC-2026-3670...

SUSE-SU-2026:23196-1 Security update for python-cryptography

This update for python-cryptography fixes the following issues: - CVE-2026-69248: verifier accepts wildcard DNS names allowing escape from permittedSubtrees bsc1273549. - CVE-2026-69249: duplicate self-signed intermediates can cause exponential path-building bsc1273516...

SUSE-SU-2026:23247-1 Security update for python-cryptography

This update for python-cryptography fixes the following issues: - CVE-2026-69248: verifier accepts wildcard DNS names allowing escape from permittedSubtrees bsc1273549. - CVE-2026-69249: duplicate self-signed intermediates can cause exponential path-building bsc1273516...

Scrapegraph-ai v2.1.7

🚀 Looking for an even faster and simpler way to scrape at scale only 5 lines of code? Check out our enhanced version at ScrapeGraphAI.com! 🚀 🕷️ ScrapeGraphAI: You Only Scrape Once English | 中文 | 日本語 | 한국어 | Русский | Türkçe | Deutsch | Español | français | Português | Italiano ScrapeGraphAI is a...

Malicious code in gfff5 (npm)

Source: amazon-inspector 2f12f82dc8c54282b428617c03537a54f3361841b02233b6626eae6f1e8ec4ee gfff5 advertises itself as a 'System binary configuration tool' but its actual behavior is covert surveillance. When the CLI is invoked, index.js silently installs Python 3.12 on Windows via winget, or by...

PyMemoryEditor v2.1.0

PyMemoryEditor A pure-Python library built on ctypes that lets you inspect, modify and search the memory of any running process in a few lines of Python — Cheat Engine workflows on Windows, Linux and macOS! Read, write and scan the memory of any process — straight from Python. One unified API...

RLSA-2026:56219 Important: python3 security update

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fixes:...

CVE-2026-18503

A flaw was found in the csv.Sniffer.sniff function within Python. An attacker can exploit this by providing specially crafted CSV samples, which can trigger super-linear regular-expression processing during dialect sniffing. This excessive processing consumes significant CPU resources, potentiall...

Agent Local Store (Python)

Bootstrap encrypted local task storage on the implant before callback !/usr/bin/env python3 -- coding: utf-8 -- """Bootstrap encrypted agent-side task storage before callback Python emitter.""" from typing import Any, Dict from kittysploit import from...

Check VM / Sandbox (Python)

Exit early when common VM or sandbox indicators are detected !/usr/bin/env python3 -- coding: utf-8 -- from typing import Any, Dict from kittysploit import class ModulePrestage: PRESTAGEID = "checkvm" info = "name": "Check VM / Sandbox Python", "description": "Exit early when common VM or sandbox...

Hide Process argv (Python)

Replace process argv0 with an innocuous name on Linux !/usr/bin/env python3 -- coding: utf-8 -- from typing import Any, Dict from kittysploit import class ModulePrestage: PRESTAGEID = "hideargv" info = "name": "Hide Process argv Python", "description": "Replace process argv0 with an innocuous nam...

Extract Embedded ZIP (Python)

Extract a ZIP archive embedded at generation time before callback !/usr/bin/env python3 -- coding: utf-8 -- """Extract an embedded ZIP archive before callback Python emitter.""" from future import annotations from typing import Any, Dict from kittysploit import from...

Daemonize Process (Python)

Detach from the controlling terminal on Unix double-fork !/usr/bin/env python3 -- coding: utf-8 -- from typing import Any, Dict from kittysploit import class ModulePrestage: PRESTAGEID = "daemonize" info = "name": "Daemonize Process Python", "description": "Detach from the controlling terminal on...

Malicious code in sysc1 (npm)

Source: amazon-inspector 2246c45afa73830233fa107ca0b97d96b10b59169599d248f7327d4e5317ff9f Package declares itself a 'System binary configuration tool' but ships a coordinated surveillance payload. package.json main is index.js which invokes startApp at top level; on require or npm start, index.js...

wappalyzer-next v2.0.2

Wappalyzer Next This project is a command line tool and python library that uses the Wappalyzer browser extension and its fingerprints to detect technologies. Other projects that emerged after the discontinuation of the official open-source project are using outdated fingerprints and lack accurac...

pybatfish v2026.08.18

Got questions, feedback, or feature requests? Join our community onSlack! Pybatfish Pybatfish is a Python client for Batfish. What is Batfish? Batfish is a network validation tool that provides correctness guarantees for security, reliability, and compliance by analyzing the configuration of...

[SECURITY] Fedora 43 Update: python3.14-3.14.7-1.fc43

Python 3.14 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries...

[SECURITY] Fedora 44 Update: python3.14-3.14.7-1.fc44

Python 3.14 is an accessible, high-level, dynamically typed, interpreted programming language, designed with an emphasis on code readability. It includes an extensive standard library, and has a vast ecosystem of third-party libraries...

Malicious code in core-js-gns (npm)

Source: amazon-inspector ae5eadad92952db436b03dd9673b34d203d9296b0913389de2aa0d9fef441631 The package's postinstall hook package.json → node init.js runs an installer-side dropper. init.js gates on developer-machine heuristics presence of Desktop/Documents/Downloads directories and a 24-hour skip...