242 matches found
docchain (>=0.0.6, <=0.0.7), nemoguardrails (>=0.2.0, <=0.3.0) +4 more potentially affected by CVE-2026-55443 via langchain (0.0.167)
langchain PYPI version 0.0.167 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - docchain =0.0.6, =0.2.0, =0.2.8, =0.0.100.1, =0.1.10 - steamship-langchain 0.0.21 Source cves: CVE-2026-55443 Source advisory:...
docchain (>=0.0.6, <=0.0.7), nemoguardrails (>=0.2.0, <=0.3.0) +4 more potentially affected by CVE-2026-55443 via langchain (0.0.167)
langchain PYPI version 0.0.167 is affected by a known vulnerability. The following packages have a transitive dependency on langchain and may be impacted: - docchain =0.0.6, =0.2.0, =0.2.8, =0.0.100.1, =0.1.10 - steamship-langchain 0.0.21 Source cves: CVE-2026-55443 Source advisory:...
This Week in Spring - June 2nd, 2026
Hi, Spring fans, and welcome to another momentous installment of This Week in Spring! A lot to get into this week, but let's first take some time to address the meta: where are the May releases? If you read our May 11th post, you know they've been delayed. We wanted to speak a bit more about why ...
Measuring Real-World Prompt Injection Attacks in LLM-Based Resume Screening
LLMs are vulnerable to prompt injection attacks. However, this vulnerability has been primarily demonstrated conceptually in academic studies or through a few anecdotal case studies. Its prevalence and impact in real-world LLM-based applications are largely unexplored. In this work, we present th...
How Data Brokers Can Fuel Violence Against Public Servants
A new report from the Public Service Alliance finds state privacy laws offer public servants few ways to protect their private data, even as threats against them are on the rise...
Cybersecurity in the Public Sector: Challenges, Strategies and Best Practices
Public sector cybersecurity faces outdated systems, budget gaps, and rising attacks. Learn key challenges, defense strategies, and proven best practices...
Rising Technosoft CAP Back Office API Endpoint DoS
The vulnerability of the API Endpoint component in Rising Technosoft CAP Back Office Application is related to insufficient control over the frequency of interactions. Exploiting this vulnerability could allow a malicious actor to cause service failures...
Rising Technosoft CAP Back Office Application Auth Bypass
The vulnerability of the OTP mechanism implemented in Rising Technosoft’s CAP Back Office Application relates to bypassing the authentication process by using an alternative method or channel. Exploiting this vulnerability allows a malicious actor, operating remotely, to circumvent 2FA protection...
Rising Technosoft CAP Back Office API Endpoint Unauthorized Access
The vulnerability of the API Endpoint component in Rising Technosoft CAP Back Office Application is related to deficiencies in the authentication mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to user accounts...
MAL-2025-136739 Malicious code in rising_condor_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8a56b20ab52deaab1cd9a705e9064268b9e75cf01e4e72a13042f9bd591e75d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in rising_condor_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8a56b20ab52deaab1cd9a705e9064268b9e75cf01e4e72a13042f9bd591e75d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-89025
Malicious code in risingplanarianz3n npm...
EUVD-2025-89026
Malicious code in risingkingfisherz3n npm...
MAL-2025-116859 Malicious code in rising_planarian_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f2f5c79e68b8378b1c6cf9d11f2c01dea8e7e0b447302ed195f95ba8531eeeb8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-78402
Malicious code in risingmolez3n npm...
Malicious code in rising_damselfly_0xrequest (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dc2bc1e8b2ecaf4e579eda8d76756100bf865ddcabf1a830823c948f74d2f3f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-80693
Malicious code in risingdamselfly0xrequest npm...
Malicious code in rising_seahorse_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c0e8f021b2c910dc192c57630a91c3d8af7dee0cb9f25e5aa3acc7cff560df3a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...