74649 matches found
CVE-2026-79707 Arbitrary File Read in Google Agent Development Kit (ADK)
A Path Traversal vulnerability in the builder endpoint in Google Cloud Agent Development Kit ADK versions 1.9.0 through 1.21.0 on Python allows an unauthenticated remote attacker to read arbitrary files using a crafted filepath query parameter...
Security update for python-sqlparse
This update for python-sqlparse fixes the following issue: CVE-2026-84305: Reindentation of tuple lists causes near-cap quadratic CPU consumption bsc1278097. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch"...
SUSE-SU-2026:3978-1 Security update for python-sqlparse
This update for python-sqlparse fixes the following issue: - CVE-2026-84305: Reindentation of tuple lists causes near-cap quadratic CPU consumption bsc1278097...
oxo v2.9.29
OXO Scan Orchestration Engine OXO is a security scanning framework built for modularity, scalability, and simplicity. It is open source and maintained by Ostorlab. OXO Engine combines specialized tools to work cohesively to find vulnerabilities and perform actions like recon, enumeration, and...
acedeploy (>=2.4.15, <=2.4.366.dev1), acepolicies (>=0.1.17, <=0.1.23) +286 more potentially affected by CVE-2026-85525 via snowflake-connector-python (>=1.7.11, <=4.7.2)
snowflake-connector-python PYPI version =1.7.11, =2.4.15, =0.1.17, =0.0.1.dev7, =0.1.0, =0.1.0.dev1, =0.0.1a4.post0, =1.0.6, =0.0.1, =0.1.0, =2020.5.20rc1, =1.0.0b2, =2.5.1 - arreyy 0.0.1 and more Source cves: CVE-2026-85525 Source advisory: MEND:CVE-2026-85525...
CVE-2026-85525
Improper OCSP response validation in the Snowflake Python, Go, JDBC, and Node.js drivers allowed a revoked TLS certificate to be accepted as valid, because OCSP responses were not reliably bound to the certificate being validated and definitive verification failures were treated as transient. A...
Security update for python-h2
This update for python-h2 fixes the following issue: CVE-2026-71554: duplicate Host headers are accepted and forwarded to consuming applications, which can lead to request smuggling bsc1274386. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...
SUSE-SU-2026:3972-1 Security update for python-h2
This update for python-h2 fixes the following issue: - CVE-2026-71554: duplicate Host headers are accepted and forwarded to consuming applications, which can lead to request smuggling bsc1274386...
Security update for python-h2
This update for python-h2 fixes the following issue: CVE-2026-71554: duplicate Host headers are accepted and forwarded to consuming applications, which can lead to request smuggling bsc1274386. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST...
SUSE-SU-2026:3970-1 Security update for python-h2
This update for python-h2 fixes the following issue: - CVE-2026-71554: duplicate Host headers are accepted and forwarded to consuming applications, which can lead to request smuggling bsc1274386...
SUSE-SU-2026:3969-1 Security update for python
This update for python fixes the following issues: Security issues fixed: - CVE-2026-13346: pip: arbitrary file installation via malicious package indexes bsc1273091. Non security issue fixed: - Update bundled pip wheels to pip-10.0.1-py2.py3-none-any.whl...
Security update for python
This update for python fixes the following issues: Security issues fixed: CVE-2026-13346: pip: arbitrary file installation via malicious package indexes bsc1273091. Non security issue fixed: Update bundled pip wheels to pip-10.0.1-py2.py3-none-any.whl Patch Instructions: To install this SUSE upda...
Malicious code in costly-copper-python (npm)
Source: amazon-inspector 6da4edfc09fec73d8dc18b25cbee4c20017c4e661268b9c9b97767876140f84c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in complete-blush-python (npm)
Source: amazon-inspector c8aed78f35a70414a461899bc1a1e0d81bd66ad02adac8a6307adb1c2d8c6342 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious code in colourful-black-python (npm)
Source: amazon-inspector 23ea047327d35d7c1b841ebecda8951fb5ed9e0c085233e343081b7b23f15ef5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...
Malicious Package
Overview py-1requests is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...
Malicious Package
Overview trongridi is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...
remove-ai-watermarks v0.37.1
Remove AI Watermarks Remove AI provenance marks from images and video you generated yourself: known visible labels such as the Google Gemini sparkle watermark and vendor text marks; invisible pixel watermarks through direct local-format disruption or diffusion regeneration; C2PA, EXIF, XMP, IPTC,...
