GHSA-MJ87-HWQH-73PJ vulnerabilities

Vulnerabilities for packages: semgrep, airflow, kserve...

CVE-2026-32597 vulnerabilities

Vulnerabilities for packages: datadog-agent, superset, airflow, az, open-webui, kserve, semgrep, py3-cassandra-medusa, ggshield...

GHSA-752W-5FWX-JX9F vulnerabilities

Vulnerabilities for packages: datadog-agent, superset, airflow, az, open-webui, kserve, semgrep, py3-cassandra-medusa, ggshield...

GHSA-7GCM-G887-7QV7 vulnerabilities

Vulnerabilities for packages: mitmproxy, py3-protobuf, datadog-agent, airflow, kubeflow-katib, kubeflow-pipelines, open-webui, kubeflow-pipelines-visualization-server, kserve, semgrep, mlflow, py3-cassandra-medusa...

CVE-2026-0994 vulnerabilities

Vulnerabilities for packages: mitmproxy, py3-protobuf, datadog-agent, airflow, kubeflow-katib, kubeflow-pipelines, open-webui, kubeflow-pipelines-visualization-server, kserve, semgrep, mlflow, py3-cassandra-medusa...

CVE-2026-23949 vulnerabilities

Vulnerabilities for packages: emissary, datadog-agent, py3-setuptools, superset, airflow, kubeflow-katib, kubeflow-jupyter-web-app, pypy-3.10, pypy-3.11, open-webui, kserve, dask-kubernetes, semgrep, mlflow, py3-cassandra-medusa...

CVE-2026-23949 vulnerabilities

Vulnerabilities for packages: ansible-operator-fips, nemo, tritonserver-backend-vllm-cuda-12.9, awx, opal, tensorflow-cpu-jupyter, ansible-operator, apache-beam-python-3.11-sdk, semgrep, spamcheck, pypy-3.11, dask-kubernetes, superset, pypy-3.10, wazuh-manager-fips, kserve, emissary,...

exploit-chain-generator

Exploit Chain Generator Turn Noise into Signal: Correlate...

GHSA-GM62-XV2J-4W53 vulnerabilities

Vulnerabilities for packages: jupyter-base-notebook, py3-hashin, py3.13-scanner-test-libraries, py3-urllib3, nvidia-nsight-compute-13.3, ansible-operator-fips, nemo, tritonserver-backend-vllm-cuda-12.9, openstack-kolla-toolbox-2025.1, py3-pip, awx, tensorflow-cpu-jupyter, graalvm, ansible-operato...

GHSA-2XPW-W6GG-JR37 vulnerabilities

Vulnerabilities for packages: jupyter-base-notebook, py3-hashin, py3.13-scanner-test-libraries, py3-urllib3, nvidia-nsight-compute-13.3, ansible-operator-fips, nemo, tritonserver-backend-vllm-cuda-12.9, openstack-kolla-toolbox-2025.1, py3-pip, awx, tensorflow-cpu-jupyter, graalvm, ansible-operato...

CVE-2025-66471 vulnerabilities

Vulnerabilities for packages: jupyter-base-notebook, py3-hashin, py3.13-scanner-test-libraries, py3-urllib3, nvidia-nsight-compute-13.3, ansible-operator-fips, nemo, tritonserver-backend-vllm-cuda-12.9, openstack-kolla-toolbox-2025.1, py3-pip, awx, tensorflow-cpu-jupyter, graalvm, ansible-operato...

CVE-2025-66418 vulnerabilities

Vulnerabilities for packages: jupyter-base-notebook, py3-hashin, py3.13-scanner-test-libraries, py3-urllib3, nvidia-nsight-compute-13.3, ansible-operator-fips, nemo, tritonserver-backend-vllm-cuda-12.9, openstack-kolla-toolbox-2025.1, py3-pip, awx, tensorflow-cpu-jupyter, graalvm, ansible-operato...

Mutillidae-SAST-Analysis

🛡️ Static Application Security Testing SAST: OWASP Mutillida...

EUVD-2023-1471

Malicious code in bioql PyPI...

Automatically Generating Rules of Malicious Software Packages Via Large Language Model

Today's security tools predominantly rely on predefined rules crafted by experts, making them poorly adapted to the emergence of software supply chain attacks. To tackle this limitation, we propose a novel tool, RuleLLM, which leverages large language models LLMs to automate rule generation for O...

SUSE-SU-2024:1486-2 Security update for cosign

This update for cosign fixes the following issues: - CVE-2024-29902: Fixed denial of service on host machine via remote image with a malicious attachments bsc1222835 - CVE-2024-29903: Fixed denial of service on host machine via malicious software artifacts bsc1222837 Other fixes: - Updated to 2.2...

Callisto - An Intelligent Binary Vulnerability Analysis Tool

Callisto is an intelligent automated binary vulnerability analysis tool. Its purpose is to autonomously decompile a provided binary and iterate through the psuedo code output looking for potential security vulnerabilities in that pseudo c code. Ghidra's headless decompiler is what drives the bina...

SUSE CVE-2023-32758

giturlparse aka git-url-parse through 1.2.2, as used in Semgrep 1.5.2 through 1.24.1, is vulnerable to ReDoS Regular Expression Denial of Service if parsing untrusted URLs. This might be relevant if Semgrep is analyzing an untrusted package for example, to check whether it accesses any Git...

git-url-parse Regular Expression Denial of Service

giturlparse aka git-url-parse through 1.2.2, as used in Semgrep 1.5.2 through 1.24.1, is vulnerable to ReDoS Regular Expression Denial of Service if parsing untrusted URLs. This might be relevant if Semgrep is analyzing an untrusted package for example, to check whether it accesses any Git...

CVE-2023-32758

giturlparse aka git-url-parse through 1.2.2, as used in Semgrep 1.5.2 through 1.24.1, is vulnerable to ReDoS Regular Expression Denial of Service if parsing untrusted URLs. This might be relevant if Semgrep is analyzing an untrusted package for example, to check whether it accesses any Git...