73978 matches found
geometron (>=0.0.1.dev7, <=0.0.3), metaplex-python-api (>=1.0.0, <=1.3.0) +1 more potentially affected by CVE-2026-64847 via anyio (3.3.4)
anyio PYPI version 3.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on anyio and may be impacted: - geometron =0.0.1.dev7, =1.0.0, =1.4.46, =3.0.3 Source cves: CVE-2026-64847 Source advisory: OSV:GHSA-5P39-CFHJ-2XMP...
Allocation of Resources Without Limits or Throttling
Overview anyio is a High level compatibility layer for multiple asynchronous event loop implementations Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in processworker within src/anyio/toprocess.py, where stderr in a worker subprocess is...
CVE-2026-33625
LMDeploy is a toolkit for compressing, deploying, and serving large language models. Versions 012.1 through 0.12.2 contain a code injection vulnerability in "lmdeploy/pytorch/config.py" line 620 that allows an attacker to execute arbitrary Python code by publishing a malicious HuggingFace model...
AZL-103481 CVE-2026-93687 affecting package python-tensorboard 2.16.2-6
braces through 3.0.3 contains a stack overflow vulnerability in the recursive AST walkers that lack depth guards. Attackers can supply deeply nested brace patterns under the character limit to exhaust the call stack and terminate the Node.js process with an uncaught RangeError...
CVE-2025-53837
XWiki Rendering is a generic rendering system that converts textual input in a given syntax wiki syntax, HTML, etc into another syntax XHTML, etc. Prior to versions 14.10.2 and 15.0 RC1, any user who can edit their own user profile or any other document can execute arbitrary script macros includi...
CVE-2025-53837 org.xwiki.rendering:xwiki-rendering-xml has an Eval Injection issue
XWiki Rendering is a generic rendering system that converts textual input in a given syntax wiki syntax, HTML, etc into another syntax XHTML, etc. Prior to versions 14.10.2 and 15.0 RC1, any user who can edit their own user profile or any other document can execute arbitrary script macros includi...
EUVD-2025-210935
XWiki Rendering is a generic rendering system that converts textual input in a given syntax wiki syntax, HTML, etc into another syntax XHTML, etc. Prior to versions 14.10.2 and 15.0 RC1, any user who can edit their own user profile or any other document can execute arbitrary script macros includi...
CVE-2025-53837
XWiki Rendering is a generic rendering system that converts textual input in a given syntax wiki syntax, HTML, etc into another syntax XHTML, etc. Prior to versions 14.10.2 and 15.0 RC1, any user who can edit their own user profile or any other document can execute arbitrary script macros includi...
Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-45149 DESCRIPTION: The brace-expansion library generates arbitrary strings containing a common prefix and suffix. From 5.0.0 to before 5.0.6, the max...
Syntecxhub_Web-Vulnerability-Scanner
Syntecxhub Web Vulnerability Scanner A Python-based web vulne...
embedded-exploitation
Embedded Exploitation Framework Research & Educational Se...
CLEANSTART-2026-NQ59682 Security fix for CVE-2024-52616 applied in: playwright-python 1.54.0-r1
Security vulnerability affects the playwright-python package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-AV29205 Security fix for CVE-2024-52615 applied in: playwright-python 1.54.0-r1
Security vulnerability affects the playwright-python package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-HQ46365 Security fix for CVE-2023-38473 applied in: playwright-python 1.54.0-r1
Security vulnerability affects the playwright-python package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-GA41131 Security fix for CVE-2023-38472 applied in: playwright-python 1.54.0-r1
Security vulnerability affects the playwright-python package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-FV76384 Security fix for CVE-2023-38470 applied in: playwright-python 1.54.0-r1
Security vulnerability affects the playwright-python package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-YF74212 Security fix for CVE-2023-38471 applied in: playwright-python 1.54.0-r1
Security vulnerability affects the playwright-python package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-VW83784 Security fix for CVE-2023-38469 applied in: playwright-python 1.54.0-r1
Security vulnerability affects the playwright-python package. This issue is resolved in later releases. See references for vulnerability details...
secator v0.44.0
The pentester's swiss knife. Features • Supported commands • Installation • Usage • Documentation • Join us on Discord ! secator is a task and workflow runner used for security assessments. It supports dozens of well-known security tools and it is designed to improve productivity for pentesters a...
CLEANSTART-2026-GV69580 Security fix for GHSA-537c-gmf6-5ccf applied in: airflow-2 2.11.0-r3, airflow-2 2.11.2-r4, airflow-3 3.1.8-r4, airflow-3 3.2.1-r4, apache-superset 5.0.0-r8, apache-superset 6.0.0-r6, az 2.83.0-r3, az 2.84.0-r4, jupyterhub-k8s-hub 4.3.5-r2, k8s-sidecar 2.4.0-r1, k8s-sidecar 2.5.5-r0, litellm-database 1.90.2-r0, py3-jupyterhub 5.4.6-r3, tensorflow-gpu-jupyter 2.21.0-r8
GHSA-537c-gmf6-5ccf affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...