compas-cloud (>=0.1.2rc1, <=0.3.3), evennia (>=1.0.0, <=6.1.0) +8 more potentially affected by CVE-2026-77528 via autobahn (20.12.3)

autobahn PYPI version 20.12.3 is affected by a known vulnerability. The following packages have a transitive dependency on autobahn and may be impacted: - compas-cloud =0.1.2rc1, =1.0.0, =0.1.0, =0.1.0, =0.1.0, =4.5.2, =1.0.2, =1.0.9 Source cves: CVE-2026-77528 Source advisory: OSV:PYSEC-2026-402...

dapla-team-cli (>=0.2.0, <=0.2.2), dapla-toolbelt-pseudo (>=0.1.0, <=0.4.0) +15 more potentially affected by CVE-2026-54338 via jupyterhub (4.1.6)

jupyterhub PYPI version 4.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - dapla-team-cli =0.2.0, =0.1.0, =0.2.0, =1.0.0, =0.5.0, =0.11.0, =0.2.0, =1.0.2, =0.1.0, =1.1.9, =0.5.0, =0.10.0 - ssb-datadoc 0.1.4 and more...

jupyterhub-nomad-spawner (>=0.0.0, <=0.1.0) potentially affected by CVE-2026-54338 via jupyterhub (2.3.1)

jupyterhub PYPI version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - jupyterhub-nomad-spawner =0.0.0, =0.1.0 Source cves: CVE-2026-54338 Source advisory: OSV:PYSEC-2026-3853...

jupyterhub-nomad-spawner (>=0.0.0, <=0.1.0) potentially affected by CVE-2026-54338 via jupyterhub (2.3.1)

jupyterhub PYPI version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - jupyterhub-nomad-spawner =0.0.0, =0.1.0 Source cves: CVE-2026-54338 Source advisory: OSV:GHSA-P43P-WHWX-Q52H...

Malicious code in @ccfly/setup-linux-arm64 (npm)

Source: amazon-inspector faefd7405c377b2260ca4d731c9234a294d8d07b559646b8fc58be5488906eec The package ships a 6.3 MB linux/arm64 Go binary at bin/ccfly-setup. The binary embeds github.com/creack/pty PTY spawner and github.com/gorilla/websocket alongside internal packages...

CVE-2026-52349

A directory traversal vulnerability exists in Menyoo 2.0 versions prior to commit 729aa48 . This flaw allows a local attacker to achieve arbitrary code execution by exploiting specific functionalities, including the Spooner file management, the save/folder/rename functions in VehicleSpawner and W...

PT-2026-61602

Name of the Vulnerable Software and Affected Versions Menyoo 2.0 versions prior to commit 729aa48 Description A directory traversal issue allows a local attacker to execute arbitrary code. This occurs through the Spooner file management, the save, folder, and rename functions of the VehicleSpawne...

CVE-2026-52349

Directory Traversal vulnerability in Menyoo 2.0 Versions before commit 729aa48: fixed in commit 729aa48 allows a local attacker to execute arbitrary code via the Spooner file management, VehicleSpawner save/folder/rename functionality, WeaponOptions save/folder/rename functionality,...

jupyterhub-nomad-spawner (>=0.0.0, <=0.1.0) potentially affected by CVE-2024-28233 via jupyterhub (2.3.1)

jupyterhub PYPI version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - jupyterhub-nomad-spawner =0.0.0, =0.1.0 Source cves: CVE-2024-28233 Source advisory: OSV:PYSEC-2026-1480...

DockerSpawner allows any image by default

ImpactUsers of JupyterHub deployments running DockerSpawner starting with 0.11.0 without specifying DockerSpawner.allowedimages configuration allow users to launch any pullable image, instead of restricting to only the single configured image, as intended. PatchesUpgrade to DockerSpawner 13...

PYSEC-2026-1312 DockerSpawner allows any image by default

Impact Users of JupyterHub deployments running DockerSpawner starting with 0.11.0 without specifying DockerSpawner.allowedimages configuration allow users to launch any pullable image, instead of restricting to only the single configured image, as intended. Patches Upgrade to DockerSpawner 13...

jupyterhub-nomad-spawner (>=0.0.0, <=0.1.0) potentially affected by CVE-2026-33709 via jupyterhub (2.3.1)

jupyterhub PYPI version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - jupyterhub-nomad-spawner =0.0.0, =0.1.0 Source cves: CVE-2026-33709 Source advisory: OSV:PYSEC-2026-2188...

jupyterhub-nomad-spawner (>=0.0.0, <=0.1.0) potentially affected by CVE-2026-33709 via jupyterhub (2.3.1)

jupyterhub PYPI version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - jupyterhub-nomad-spawner =0.0.0, =0.1.0 Source cves: CVE-2026-33709 Source advisory: OSV:GHSA-3VFF-HJQV-M7H8...

jupyterhub-nomad-spawner (>=0.0.0, <=0.1.0) potentially affected by CVE-2024-41942 via jupyterhub (2.3.1)

jupyterhub PYPI version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - jupyterhub-nomad-spawner =0.0.0, =0.1.0 Source cves: CVE-2024-41942 Source advisory: OSV:PYSEC-2024-200...

jupyterhub-nomad-spawner (>=0.0.0, <=0.1.0) potentially affected by CVE-2024-41942 via jupyterhub (2.3.1)

jupyterhub PYPI version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - jupyterhub-nomad-spawner =0.0.0, =0.1.0 Source cves: CVE-2024-41942 Source advisory: OSV:GHSA-9X4Q-3GXW-849F...

jupyterhub-nomad-spawner (>=0.0.0, <=0.1.0) potentially affected by CVE-2024-28233 via jupyterhub (2.3.1)

jupyterhub PYPI version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on jupyterhub and may be impacted: - jupyterhub-nomad-spawner =0.0.0, =0.1.0 Source cves: CVE-2024-28233 Source advisory: OSV:GHSA-7R3H-4PH8-W38G...

CVE-2017-9453

BMC Server Automation before 8.9.01 patch 1 allows Process Spawner command execution because of authentication bypass...

CVE-2017-9453

BMC Server Automation before 8.9.01 patch 1 allows Process Spawner command execution because of authentication bypass...

Authentication flaw

BMC Server Automation before 8.9.01 patch 1 allows Process Spawner command execution because of authentication bypass...

PT-2023-10647

Name of the Vulnerable Software and Affected Versions BMC Server Automation versions prior to 8.9.01 patch 1 Description The issue allows for Process Spawner command execution due to an authentication bypass. Recommendations For versions prior to 8.9.01 patch 1, apply patch 1 to resolve the issue...