70024 matches found
omnata-plugin-devkit (>=0.5.3, <=0.11.0), omnata-plugin-runtime (>=0.5.0a112, <=0.11.9) +1 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.12.0)
snowflake-connector-python PYPI version 3.12.0 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - omnata-plugin-devkit =0.5.3, =0.5.0a112, =0.11.9 - snowflake-cli-labs 3.0.0rc0 Source cves: CVE-2026-86597...
ewah (>=0.1.25, <=0.2.5), fivetran-autogen (>=0.0.1rc8, <=0.0.1rc9) +6 more potentially affected by CVE-2026-86597 via snowflake-connector-python (2.0.2)
snowflake-connector-python PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - ewah =0.1.25, =0.0.1rc8, =0.0.2, =2.2.0, =0.14.1, =0.110.1, =2.0.0, =2.1.0 - spswarehouse-airflow 0.6.3 Sour...
Snowflake drivers writes sensitive information to logs
Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC, Node.js, PHP PDO, and ODBC drivers allowed authentication tokens, query-result encryption keys, pre-signed cloud-storage URLs, and SAML assertions to be written to diagnostic logs in circumstances where the...
enterprise-integrated-channels (0.1.30), omnata-cli (>=0.1.3, <=0.2.0) +3 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.7.0)
snowflake-connector-python PYPI version 3.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - enterprise-integrated-channels 0.1.30 - omnata-cli =0.1.3, =0.3.30, =2.0.0rc1, =2.1.2 Source cves:...
dbt-gen (>=0.1.1, <=0.1.4) potentially affected by CVE-2026-86597 via snowflake-connector-python (2.7.4)
snowflake-connector-python PYPI version 2.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dbt-gen =0.1.1, =0.1.4 Source cves: CVE-2026-86597 Source advisory: OSV:GHSA-QQJ6-54Q6-CXV6...
GHSA-QQJ6-54Q6-CXV6 Snowflake drivers writes sensitive information to logs
Insertion of sensitive information into log files in the Snowflake Python, Go, JDBC, Node.js, PHP PDO, and ODBC drivers allowed authentication tokens, query-result encryption keys, pre-signed cloud-storage URLs, and SAML assertions to be written to diagnostic logs in circumstances where the...
cloeextensions (>=20231128.1.0, <=20240129.2.0), core-db (1.0.0) +5 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.5.0)
snowflake-connector-python PYPI version 3.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - cloeextensions =20231128.1.0, =4.3.0, =0.5.1, =0.2.1, =0.1.0, =0.2.1 - snowflake-cli-labs 2.0.0a1 Source cve...
snowflake-cli (3.11.0), snowflake-cli-labs (3.11.0) potentially affected by CVE-2026-86597 via snowflake-connector-python (3.17.2)
snowflake-connector-python PYPI version 3.17.2 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - snowflake-cli 3.11.0 - snowflake-cli-labs 3.11.0 Source cves: CVE-2026-86597 Source advisory:...
GHSA-FVWW-7H3R-VFHP LangGraph SDK custom auth silently ignores actions= on resource decorators
Impact What kind of vulnerability is it? Who is impacted? langgraph-sdk incorrectly applies the actions= argument on resource-scoped authorization decorators, including @auth.on.threads, @auth.on.assistants, and @auth.on.crons. In affected versions, a decorator such as: python...
EUVD-2026-91794
LangGraph SDK custom auth silently ignores actions= on resource decorators...
LangGraph SDK custom auth silently ignores actions= on resource decorators
Impact What kind of vulnerability is it? Who is impacted? langgraph-sdk incorrectly applies the actions= argument on resource-scoped authorization decorators, including @auth.on.threads, @auth.on.assistants, and @auth.on.crons. In affected versions, a decorator such as: python...
GHSA-W584-2H2R-2HVF Langflow: Title Authenticated Remote Code Execution in validate_code via Malicious Decorators Description
Summary: A critical Authenticated Remote Code Execution RCE vulnerability exists in the validatecode function of Langflow. The /api/v1/validate/code endpoint, meant to validate user-supplied code, leverages Python's exec function. While it attempts to restrict execution to function definitions, i...
proof-of-exploit
Proof of Exploit Takes a public security advisory, reproduces...
CVE-2026-85394
A flaw was found in python-jose. A remote attacker who obtains the service's public key can exploit an algorithm confusion vulnerability when signature verification algorithms are not strictly restricted. By utilizing a specifically formatted public key as a shared secret key, the attacker can...
CVE-2026-19445
A flaw was found in Python. A remote, unauthenticated TLS client can cause a use-after-free in a server that uses SSLContext.snicallback to assign a different SSLSocket.context when selecting a certificate per server name, if nothing else keeps the original SSLContext alive. This can crash the...
CVE-2022-46169
CVE-2022-46169 Exploit for cacti version 1.2.22, CVE-2022-46169 Usage $ python3 cacti.py...
ROOT-APP-PYPI-CVE-2024-26130 CVE-2024-26130 in cryptography - Patched by Root
Root has patched CVE-2024-26130 in the cryptography package for Root:PyPI. Multiple fixed versions available...
CVE-2018-6389
CVE-2018-6389 Wordpress Exploit CVE-2018-6389 Exploit Can Down Any Wordpress site under 4.9.3 The flaw affects the load-scripts.php WordPress script, it receives a parameter called load About PoC A simple Script In Python With threading could allow anyone to take down most WordPress websites with...
CVE-2026-11107-Insecure-Direct-Object-Reference-with-Predictable-UUIDv1
CVE-2026-11107 – Insecure Direct Object Reference with Predictable UUIDv1 Program Code Python Flask idorserver.py - API with UUIDv1 user IDs import uuid, time from flask import Flask, request, jsonify app = Flaskname Generate predictable UUIDv1 based on timestamp + MAC users = struuid.uuid1:...