dbcat (>=0.1.1, <=0.3.0) potentially affected by CVE-2026-86597 via snowflake-connector-python (2.3.8)

snowflake-connector-python PYPI version 2.3.8 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - dbcat =0.1.1, =0.3.0 Source cves: CVE-2026-86597 Source advisory: OSV:GHSA-QQJ6-54Q6-CXV6...

db-schemachange (>=0.0.1, <=0.0.7), fdc-shared-kernel (>=0.0.151, <=0.0.206) +4 more potentially affected by CVE-2026-86597 via snowflake-connector-python (3.16.0)

snowflake-connector-python PYPI version 3.16.0 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - db-schemachange =0.0.1, =0.0.151, =3.0.4, =0.1.0, =0.2.4 Source cves: CVE-2026-86597 Source advisory:...

arreyy (0.0.1), dbt-schema-builder (>=0.4.5, <=0.4.13) +6 more potentially affected by CVE-2026-86597 via snowflake-connector-python (2.7.12)

snowflake-connector-python PYPI version 2.7.12 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - arreyy 0.0.1 - dbt-schema-builder =0.4.5, =1.1.0b1, =0.0.1, =0.0.1, =1.15.0, =2.2.0 - pyexql 0.0.1 Source...

ewah (>=0.1.25, <=0.2.5), fivetran-autogen (>=0.0.1rc8, <=0.0.1rc9) +6 more potentially affected by CVE-2026-86597 via snowflake-connector-python (2.0.2)

snowflake-connector-python PYPI version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on snowflake-connector-python and may be impacted: - ewah =0.1.25, =0.0.1rc8, =0.0.2, =2.2.0, =0.14.1, =0.110.1, =2.0.0, =2.1.0 - spswarehouse-airflow 0.6.3 Sour...

GHSA-FVWW-7H3R-VFHP LangGraph SDK custom auth silently ignores actions= on resource decorators

Impact What kind of vulnerability is it? Who is impacted? langgraph-sdk incorrectly applies the actions= argument on resource-scoped authorization decorators, including @auth.on.threads, @auth.on.assistants, and @auth.on.crons. In affected versions, a decorator such as: python...

LangGraph SDK custom auth silently ignores actions= on resource decorators

Impact What kind of vulnerability is it? Who is impacted? langgraph-sdk incorrectly applies the actions= argument on resource-scoped authorization decorators, including @auth.on.threads, @auth.on.assistants, and @auth.on.crons. In affected versions, a decorator such as: python...

EUVD-2026-91794

LangGraph SDK custom auth silently ignores actions= on resource decorators...

GHSA-W584-2H2R-2HVF Langflow: Title Authenticated Remote Code Execution in validate_code via Malicious Decorators Description

Summary: A critical Authenticated Remote Code Execution RCE vulnerability exists in the validatecode function of Langflow. The /api/v1/validate/code endpoint, meant to validate user-supplied code, leverages Python's exec function. While it attempts to restrict execution to function definitions, i...

proof-of-exploit

Proof of Exploit Takes a public security advisory, reproduces...

CVE-2026-85394

A flaw was found in python-jose. A remote attacker who obtains the service's public key can exploit an algorithm confusion vulnerability when signature verification algorithms are not strictly restricted. By utilizing a specifically formatted public key as a shared secret key, the attacker can...

CVE-2026-19445

A flaw was found in Python. A remote, unauthenticated TLS client can cause a use-after-free in a server that uses SSLContext.snicallback to assign a different SSLSocket.context when selecting a certificate per server name, if nothing else keeps the original SSLContext alive. This can crash the...

ROOT-APP-PYPI-CVE-2024-26130 CVE-2024-26130 in cryptography - Patched by Root

Root has patched CVE-2024-26130 in the cryptography package for Root:PyPI. Multiple fixed versions available...

SUSE CVE-2026-104873

LangGraph Python SDK is used to connect to running LangGraph API servers, manage assistants, threads and stream runs from Python applications. From 0.1.45 until 0.4.4, the langgraph-sdk resource-scoped authorization decorators @auth.on.threads, @auth.on.assistants, and @auth.on.crons ignore the...

MAL-2026-17574 Malicious code in css-gwqyid-polyfill (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3a81a389193175e49648e711d4eb83ebcbbd0b51e1b7a6677ceb338c3398dc19 thunderboltRegistry.js executes an IIFE on module load that collects host reconnaissance id, whoami, full process environment via env, and ifconfig/i...

BIT-PYTHON-MIN-2026-12345 Race condition in tempfile.TemporaryDirectory cleanup allows deleting files outside the temporary directory

The cleanup of tempfile.TemporaryDirectory is vulnerable to a race condition. An attacker who can modify the tree during cleanup can replace a directory with a symbolic link, causing files outside of the temporary directory to be deleted or have their permissions and file flags reset, with the...

Astra Linux – Vulnerability in python-rsa

In Python-RSA before version 4.1, leading '\0' bytes are ignored during the decryption of ciphertext. This could potentially have security-related implications, such as allowing an attacker to infer that an application uses Python-RSA. Alternatively, the length of the accepted ciphertext may affe...

Astra Linux – Vulnerability in lxml

A XSS vulnerability was discovered in the python-lxml’s clean module versions prior to 4.6.3. When the “safe attrsOnly” and “forms” arguments are disabled, the Cleaner class does not remove the “formaction” attribute, allowing JavaScript to bypass the sanitizer. A remote attacker could exploit th...

pywintrace

ETW Event Tracing for Windows ETW è una funzionalità di tracciamento che consente a un utente di registrare eventi in un file o in un buffer. Una panoramica di ETW è disponibile qui. L'architettura di base include un Provider, un Controller e un Consumer. Il controller definisce e controlla una...

Wordpress---Auto-Exploit

WP-MASS-XP1 WordPress Mass Scanner with Real Exploits For CTF a...

enumerate-iam

Enumerare i permessi IAM Hai trovato un set di credenziali AWS e non hai idea di quali permessi possa avere? $ ./enumerate-iam.py --access-key AKIA... --secret-key StF0q... 2019-05-10 15:57:58,447 - 21345 - INFO Starting permission enumeration for access-key-id "AKIA..." 2019-05-10 15:58:01,532 -...