CVE-2026-96680

A vulnerability was detected in ByteDance Coze Scraper Extension up to 2.0.2. Affected by this vulnerability is the function chrome.runtime.onMessageExternal.addListener of the file static/background/index.js of the component External Message Handler. The manipulation of the argument...

CVE-2026-96680 ByteDance Coze Scraper Extension External Message index.js chrome.runtime.onMessageExternal.addListener authorization

A vulnerability was detected in ByteDance Coze Scraper Extension up to 2.0.2. Affected by this vulnerability is the function chrome.runtime.onMessageExternal.addListener of the file static/background/index.js of the component External Message Handler. The manipulation of the argument...

CVE-2026-96680 ByteDance Coze Scraper Extension External Message index.js chrome.runtime.onMessageExternal.addListener authorization

A vulnerability was detected in ByteDance Coze Scraper Extension up to 2.0.2. Affected by this vulnerability is the function chrome.runtime.onMessageExternal.addListener of the file static/background/index.js of the component External Message Handler. The manipulation of the argument...

CVE-2026-96680

The ByteDance Coze Scraper Extension (up to version 2.0.2 ) contains a vulnerability in the External Message Handler component. Specifically, the chrome.runtime.onMessageExternal.addListener function within the static/background/index.js file fails to perform proper authorization when handling sp...

CVE-2026-96680: Missing Authorization

A vulnerability was detected in ByteDance Coze Scraper Extension up to 2.0.2. Affected by this vulnerability is the function chrome.runtime.onMessageExternal.addListener of the file static/background/index.js of the component External Message Handler. The manipulation of the argument...

PT-2026-97614

Name of the Vulnerable Software and Affected Versions ByteDance Coze Scraper Extension versions prior to 2.0.3 Description An issue exists in the External Message Handler component within the static/background/index.js file. The chrome.runtime.onMessageExternal.addListener function fails to...

Malicious code in pflag14570 (npm)

Source: amazon-inspector 2b7164c1405ab2587c562b3b9eb8cdad8258aab8f25b829da64c83d7185eab6c index.js is an IIFE that executes at module load, reads document.cookie, fetches a list of authenticated application paths /profile, /admin, /api/me, /settings, and similar, extracts a flag-shaped substring...

basketball-reference-scraper (>=1.0.1, <=1.0.31), bsdownloader (>=0.2.0, <=0.2.1) +21 more potentially affected by CVE-2026-86000 via soupsieve (1.9.5)

soupsieve PYPI version 1.9.5 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - basketball-reference-scraper =1.0.1, =0.2.0, =0.0.31, =0.1.0, =0.4.0, =0.1.2.5, =3.1.7, =2.3.0, =0.1.1, =0.0.1, =0.0.2, =0.0.3 and more Source...

9gag-scraper (>=0.0.6, <=0.0.7), euroleague-scrapping (>=0.0.1.dev10, <=0.0.1.dev21) potentially affected by CVE-2026-86000 via soupsieve (1.9.6)

soupsieve PYPI version 1.9.6 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - 9gag-scraper =0.0.6, =0.0.1.dev10, =0.0.1.dev21 Source cves: CVE-2026-86000 Source advisory: OSV:GHSA-GJV8-XP57-G29C...

1337x (1.2.5), 8a-scraper (>=0.0.2, <=0.0.4) +665 more potentially affected by CVE-2026-86000 via soupsieve (>=2.0.0, <=2.8.4)

soupsieve PYPI version =2.0.0, =0.0.2, =1.0.4, =0.1.3, =1.0.0, =0.4.0, =1.2.3, =0.2.0, =0.87.2.dev9, =0.24.0, =0.1.0.dev19, =1.3.0, =0.1.0, =1.3.0, =1.3.3 and more Source cves: CVE-2026-86000 Source advisory: GHSA-GJV8-XP57-G29C...

9gag-scraper (>=0.0.6, <=0.0.7), euroleague-scrapping (>=0.0.1.dev10, <=0.0.1.dev21) potentially affected by CVE-2026-85999 via soupsieve (1.9.6)

soupsieve PYPI version 1.9.6 is affected by a known vulnerability. The following packages have a transitive dependency on soupsieve and may be impacted: - 9gag-scraper =0.0.6, =0.0.1.dev10, =0.0.1.dev21 Source cves: CVE-2026-85999 Source advisory: OSV:GHSA-J934-XHV5-FG8F...

gai-common (>=0.1.2, <=0.86.0), gai-lib (0.120.0) +4 more potentially affected by CVE-2026-84310 via pypdf (4.3.0)

pypdf PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - gai-common =0.1.2, =1.1.3, =0.3.1, =5.3.8, =0.6.6, =0.7.0 Source cves: CVE-2026-84310 Source advisory: OSV:PYSEC-2026-3910...

gai-common (>=0.1.2, <=0.86.0), gai-lib (0.120.0) +4 more potentially affected by CVE-2026-84311 via pypdf (4.3.0)

pypdf PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - gai-common =0.1.2, =1.1.3, =0.3.1, =5.3.8, =0.6.6, =0.7.0 Source cves: CVE-2026-84311 Source advisory: OSV:PYSEC-2026-3911...

gai-common (>=0.1.2, <=0.86.0), gai-lib (0.120.0) +4 more potentially affected by CVE-2026-84309 via pypdf (4.3.0)

pypdf PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - gai-common =0.1.2, =1.1.3, =0.3.1, =5.3.8, =0.6.6, =0.7.0 Source cves: CVE-2026-84309 Source advisory: OSV:PYSEC-2026-3913...

genai-4-dps-helper (0.2.31), news-scraper-pdf (1.1.6) +5 more potentially affected by CVE-2026-84311 via pypdf (5.3.0)

pypdf PYPI version 5.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - genai-4-dps-helper 0.2.31 - news-scraper-pdf 1.1.6 - polytext =0.1.0, =0.1.0, =0.1.10 - python-pdf-toolkit 0.1.1 - synforge 0.1.0 - textspitter 0.3.7r...

scraper-factory (>=0.1.0, <=0.2.1) potentially affected by CVE-2026-84366 via scrapy (1.7.2)

scrapy PYPI version 1.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on scrapy and may be impacted: - scraper-factory =0.1.0, =0.2.1 Source cves: CVE-2026-84366 Source advisory: OSV:PYSEC-2026-3918...

gai-common (>=0.1.2, <=0.86.0), gai-lib (0.120.0) +4 more potentially affected by CVE-2026-82398 via pypdf (4.3.0)

pypdf PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - gai-common =0.1.2, =1.1.3, =0.3.1, =5.3.8, =0.6.6, =0.7.0 Source cves: CVE-2026-82398 Source advisory: OSV:PYSEC-2026-3912...

Malicious code in dibs-aws-trade-article-scraper (npm)

The package dibs-aws-trade-article-scraper was found to contain malicious code. --- Credit: OpenSSF source...

scraper-factory (>=0.1.0, <=0.2.1) potentially affected by CVE-2026-84366 via scrapy (1.7.2)

scrapy PYPI version 1.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on scrapy and may be impacted: - scraper-factory =0.1.0, =0.2.1 Source cves: CVE-2026-84366 Source advisory: OSV:GHSA-76G3-C3X4-CRVX...

gai-common (>=0.1.2, <=0.86.0), gai-lib (0.120.0) +4 more potentially affected by CVE-2026-82398 via pypdf (4.3.0)

pypdf PYPI version 4.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pypdf and may be impacted: - gai-common =0.1.2, =1.1.3, =0.3.1, =5.3.8, =0.6.6, =0.7.0 Source cves: CVE-2026-82398 Source advisory: OSV:GHSA-FC8X-2RWW-XW9M...