cewler (1.2.0.post1), python-xdoc (>=0.1.0, <=0.1.1) potentially affected by CVE-2026-115580 via pypdf (4.0.1)

pypdf PYPI version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - cewler 1.2.0.post1 - python-xdoc =0.1.0, =0.1.1 Source cves: CVE-2026-115580 Source advisory: OSV:GHSA-GMH7-3G9R-MJH5...

carly (>=0.1.0, <=0.10.1), carml (>=18.4.0, <=19.0.0) +10 more potentially affected by CVE-2026-115776 via twisted (18.9.0)

twisted PYPI version 18.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - carly =0.1.0, =18.4.0, =2019.5.0, =0.1.0a2, =0.0.12, =0.100.2rc4, =1.2.1.0, =0.1.0, =0.1.1 - tx 0.0.2 Source cves: CVE-2026-115776 Source advisor...

bitdust (0.0.2), kaze-python (>=0.7.8, <=0.8.9) +2 more potentially affected by CVE-2026-115776 via twisted (18.7.0)

twisted PYPI version 18.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - bitdust 0.0.2 - kaze-python =0.7.8, =0.7.5, =0.4.0.post2, =0.7.1 Source cves: CVE-2026-115776 Source advisory: OSV:GHSA-53XC-49M8-P798...

echelon-client-agent (>=0.0.3, <=0.0.5), echelon-client-echelon (0.0.3) +1 more potentially affected by CVE-2026-115776 via twisted (18.4.0)

twisted PYPI version 18.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - echelon-client-agent =0.0.3, =0.7.2, =0.7.3 Source cves: CVE-2026-115776 Source advisory: OSV:GHSA-53XC-49M8-P798...

golemrpc (>=0.3.4, <=0.3.6), neo-python (>=0.5.7, <=0.7.1) +5 more potentially affected by CVE-2026-115776 via twisted (17.9.0)

twisted PYPI version 17.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - golemrpc =0.3.4, =0.5.7, =0.1.0, =0.2.0, =0.2.1 - txwerewolves 0.6.1 - yy-spider 1.0.0 Source cves: CVE-2026-115776 Source advisory:...

carly (>=0.1.0, <=0.10.1), carml (>=18.4.0, <=19.0.0) +10 more potentially affected by CVE-2026-115778 via twisted (18.9.0)

twisted PYPI version 18.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - carly =0.1.0, =18.4.0, =2019.5.0, =0.1.0a2, =0.0.12, =0.100.2rc4, =1.2.1.0, =0.1.0, =0.1.1 - tx 0.0.2 Source cves: CVE-2026-115778 Source advisor...

bitdust (0.0.2), kaze-python (>=0.7.8, <=0.8.9) +2 more potentially affected by CVE-2026-115778 via twisted (18.7.0)

twisted PYPI version 18.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - bitdust 0.0.2 - kaze-python =0.7.8, =0.7.5, =0.4.0.post2, =0.7.1 Source cves: CVE-2026-115778 Source advisory: OSV:GHSA-CWM5-JH59-MWXR...

golemrpc (>=0.3.4, <=0.3.6), neo-python (>=0.5.7, <=0.7.1) +5 more potentially affected by CVE-2026-115778 via twisted (17.9.0)

twisted PYPI version 17.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - golemrpc =0.3.4, =0.5.7, =0.1.0, =0.2.0, =0.2.1 - txwerewolves 0.6.1 - yy-spider 1.0.0 Source cves: CVE-2026-115778 Source advisory:...

echelon-client-agent (>=0.0.3, <=0.0.5), echelon-client-echelon (0.0.3) +1 more potentially affected by CVE-2026-115778 via twisted (18.4.0)

twisted PYPI version 18.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - echelon-client-agent =0.0.3, =0.7.2, =0.7.3 Source cves: CVE-2026-115778 Source advisory: OSV:GHSA-CWM5-JH59-MWXR...

bitdust (0.0.2), kaze-python (>=0.7.8, <=0.8.9) +2 more potentially affected by CVE-2026-115877 via twisted (18.7.0)

twisted PYPI version 18.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - bitdust 0.0.2 - kaze-python =0.7.8, =0.7.5, =0.4.0.post2, =0.7.1 Source cves: CVE-2026-115877 Source advisory: OSV:GHSA-Q7QQ-6MHP-9RC4...

golemrpc (>=0.3.4, <=0.3.6), neo-python (>=0.5.7, <=0.7.1) +5 more potentially affected by CVE-2026-115877 via twisted (17.9.0)

twisted PYPI version 17.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - golemrpc =0.3.4, =0.5.7, =0.1.0, =0.2.0, =0.2.1 - txwerewolves 0.6.1 - yy-spider 1.0.0 Source cves: CVE-2026-115877 Source advisory:...

carly (>=0.1.0, <=0.10.1), carml (>=18.4.0, <=19.0.0) +10 more potentially affected by CVE-2026-115877 via twisted (18.9.0)

twisted PYPI version 18.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - carly =0.1.0, =18.4.0, =2019.5.0, =0.1.0a2, =0.0.12, =0.100.2rc4, =1.2.1.0, =0.1.0, =0.1.1 - tx 0.0.2 Source cves: CVE-2026-115877 Source advisor...

echelon-client-agent (>=0.0.3, <=0.0.5), echelon-client-echelon (0.0.3) +1 more potentially affected by CVE-2026-115877 via twisted (18.4.0)

twisted PYPI version 18.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on twisted and may be impacted: - echelon-client-agent =0.0.3, =0.7.2, =0.7.3 Source cves: CVE-2026-115877 Source advisory: OSV:GHSA-Q7QQ-6MHP-9RC4...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Citrix Netscaler_Application_Delivery_Controller

netscaler-cve-2026-88772-check Off...

Exploit for Improper Input Validation in Citrix Netscaler_Application_Delivery_Controller

netscaler-cve-2026-88771-check Offl...

CVE-2026-115845

An incomplete list of disallowed inputs in the Python code validator of the runscript tool in AWS MCP Server might allow an authenticated remote user to execute arbitrary code within their own isolated session environment via a crafted script. AWS fixed this issue service-side. No customer action...

CVE-2026-115845 Incomplete validation in the run_script Python sandbox in AWS MCP Server

An incomplete list of disallowed inputs in the Python code validator of the runscript tool in AWS MCP Server might allow an authenticated remote user to execute arbitrary code within their own isolated session environment via a crafted script. AWS fixed this issue service-side. No customer action...

EUVD-2026-109127

An incomplete list of disallowed inputs in the Python code validator of the runscript tool in AWS MCP Server might allow an authenticated remote user to execute arbitrary code within their own isolated session environment via a crafted script. AWS fixed this issue service-side. No customer action...

CVE-2026-115845

The AWS MCP Server contains a vulnerability in the Python code validator of the run_script tool due to an incomplete list of disallowed inputs . This flaw could allow an authenticated remote user to execute arbitrary code within their own isolated session environment using a crafted script. AWS h...

Inside the LiteLLM 1.107.0 supply chain compromise: Credential theft through Python startup hooks

In this article 1. Attack overview 2. Technical details 3. Mitigation and protection guidance 4. Indicators of compromise 5. References 6. Learn More On October 21, 2026, a compromised LiteLLM 1.107.0 release was published to the Python Package Index PyPI and distributed through official containe...