accomate (>=1.0.4, <=2.0.0.6), aind-analysis-arch-result-access (>=0.3.0, <=1.2.0) +267 more potentially affected by CVE-2024-5629 via pymongo (>=4.0.0, <=4.6.2)

pymongo PYPI version =4.0.0, =1.0.4, =0.3.0, =0.2.0, =0.1.0, =0.0.27, =0.3.1, =0.1.19, =1.9.0, =0.0.1a0, =0.0.2, =0.4.0, =0.1.0, =0.3.1 and more Source cves: CVE-2024-5629 Source advisory: OSV:PYSEC-2026-1826...

CVE-2026-39967 TypeBot: Cross-Typebot Result Data Access via Missing typebotId Filter

TypeBot is a chatbot builder tool. In versions 3.15.2 and prior, the bot engine's the findResult query does not filter results by typebotId, allowing an authenticated user to load result data user answers, variable values from a different typebot by supplying a foreign resultId to the startChat...

EUVD-2022-5890

Malicious code in bioql PyPI...