Solara <1.35.1 - Local File Inclusion

A Local File Inclusion LFI vulnerability was identified in widgetti/solara, in version 1.35.1, which was fixed in version 1.35.1. This vulnerability arises from the application's failure to properly validate URI fragments for directory traversal sequences such as '../' when serving static files. ...

PYSEC-2026-1933 Local File Inclusion in Solara

A Local File Inclusion LFI vulnerability was identified in widgetti/solara, in version 1.35.1, which was fixed in version 1.35.1. This vulnerability arises from the application's failure to properly validate URI fragments for directory traversal sequences such as '../' when serving static files. ...

Local File Inclusion in Solara

A Local File Inclusion LFI vulnerability was identified in widgetti/solara, in version 1.35.1, which was fixed in version 1.35.1. This vulnerability arises from the application's failure to properly validate URI fragments for directory traversal sequences such as '../' when serving static files. ...

pysepal (3.8.2), solara-enterprise (>=1.11.0, <=1.30.1) potentially affected by CVE-2024-39903 via solara (>=1.10.0, <=1.30.1)

solara PYPI version =1.10.0, =1.11.0, =1.30.1 Source cves: CVE-2024-39903 Source advisory: OSV:PYSEC-2026-1933...

Malicious Package

Overview solara-websocket-dll is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package...

Malicious code in solara-websocket-dll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f7987caa0572ba7ba558b028e0c1e8c9fe84db279417057afc890d78435b290 The package solara-websocket-dll was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-37949

Malicious code in solara-websocket-dll npm...

MAL-2025-49376 Malicious code in solara-websocket-dll (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f7987caa0572ba7ba558b028e0c1e8c9fe84db279417057afc890d78435b290 The package solara-websocket-dll was found to contain malicious code. Source: ghsa-malware...

MAL-2025-33627 Malicious code in solara-roblox (npm)

The package solara-roblox was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

Malicious code in solara-roblox (npm)

The package solara-roblox was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

MAL-2025-33626 Malicious code in solara-patcher-legacy (npm)

The package solara-patcher-legacy was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

Malicious code in solara-patcher-legacy (npm)

The package solara-patcher-legacy was found to contain malicious code. --- -= Per source details. Do not edit below this line.=-...

Malicious code in solara-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d11917059b5c9bae62b045f1b86da3912936d28e6568bc30ec686779c22da807 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in solara-upgrade

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

MAL-2025-3919 Malicious code in solara-upgrade (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d11917059b5c9bae62b045f1b86da3912936d28e6568bc30ec686779c22da807 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malware in solara-installer

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

CVE-2024-39903

Solara is a pure Python, React-style framework for scaling Jupyter and web apps. A Local File Inclusion LFI vulnerability was identified in widgetti/solara, in version 1.35.1, which was fixed in version 1.35.1. This vulnerability arises from the application's failure to properly validate URI...

Malicious code in bootstrapper-solara (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-810 Malicious code in bootstrapper-solara (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in upgrade-solara (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06786e0684a9afc602c99f62a977e170fc435947a63896cfd50abc00997f7b63 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...