5186 matches found
sientia-tracker (>=1.0.2, <=1.0.7) potentially affected by CVE-2026-3198 via mlflow (2.10.1)
mlflow PYPI version 2.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - sientia-tracker =1.0.2, =1.0.7 Source cves: CVE-2026-3198 Source advisory: OSV:PYSEC-2026-2659...
sientia-tracker (>=1.0.2, <=1.0.7) potentially affected by CVE-2026-2734 via mlflow (2.10.1)
mlflow PYPI version 2.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - sientia-tracker =1.0.2, =1.0.7 Source cves: CVE-2026-2734 Source advisory: OSV:PYSEC-2026-2660...
sientia-tracker (>=1.0.2, <=1.0.7) potentially affected by CVE-2026-4137 via mlflow (2.10.1)
mlflow PYPI version 2.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - sientia-tracker =1.0.2, =1.0.7 Source cves: CVE-2026-4137 Source advisory: OSV:PYSEC-2026-2655...
sientia-tracker (>=1.0.2, <=1.0.7) potentially affected by CVE-2026-2614 via mlflow (2.10.1)
mlflow PYPI version 2.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - sientia-tracker =1.0.2, =1.0.7 Source cves: CVE-2026-2614 Source advisory: OSV:PYSEC-2026-2654...
sientia-tracker (>=1.0.2, <=1.0.7) potentially affected by CVE-2025-15381 via mlflow (2.10.1)
mlflow PYPI version 2.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - sientia-tracker =1.0.2, =1.0.7 Source cves: CVE-2025-15381 Source advisory: OSV:PYSEC-2026-2657...
sientia-tracker (>=1.0.2, <=1.0.7) potentially affected by CVE-2025-15031 via mlflow (2.10.1)
mlflow PYPI version 2.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - sientia-tracker =1.0.2, =1.0.7 Source cves: CVE-2025-15031 Source advisory: OSV:PYSEC-2026-2656...
sientia-tracker (>=1.0.2, <=1.0.7) potentially affected by CVE-2025-14287 via mlflow (2.10.1)
mlflow PYPI version 2.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - sientia-tracker =1.0.2, =1.0.7 Source cves: CVE-2025-14287 Source advisory: OSV:PYSEC-2026-2661...
sientia-tracker (>=1.0.2, <=1.0.7) potentially affected by CVE-2026-2033 via mlflow (2.10.1)
mlflow PYPI version 2.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - sientia-tracker =1.0.2, =1.0.7 Source cves: CVE-2026-2033 Source advisory: OSV:PYSEC-2026-2658...
A week in security (July 6 – July 12)
Last week on Malwarebytes Labs: This new Windows malware can take over your PC and wipe it clean How mule betting scams recruit ordinary people Two Chrome updates in two days fix critical vulnerabilities How World Cup crypto prediction sites take your money 6.9 million driver’s license numbers...
MAL-2026-10138 Malicious code in uac-package (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb2f1cf2dbbdb87f2b0c37826d8326ff0ca7ecfdbc3af1dd4fdd31a0c299c78b [email protected] is an analytics package that, on install, silently mutates the installer's project files: postinstall.js invokes integrate which...
Malicious code in uac-package (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cb2f1cf2dbbdb87f2b0c37826d8326ff0ca7ecfdbc3af1dd4fdd31a0c299c78b [email protected] is an analytics package that, on install, silently mutates the installer's project files: postinstall.js invokes integrate which...
Security update for transmission (moderate)
openSUSE Security Update: Security update for transmission Announcement ID: openSUSE-SU-2026:0237-1 Rating: moderate References: 1267404 Cross-References: CVE-2026-38978 Affected Products: openSUSE Backports SLE-15-SP7 An update that fixes one vulnerability is now available. Description: This...
Linux Distros Unpatched Vulnerability : CVE-2026-55192
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FreeRDP is a free implementation of the Remote Desktop Protocol. Prior to 3.27.0, FreeRDP H.264 decoder backends can return YUV planes sized from the bitstream...
sientia-tracker (>=1.0.2, <=1.0.7) potentially affected by CVE-2025-10279 via mlflow (2.10.1)
mlflow PYPI version 2.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - sientia-tracker =1.0.2, =1.0.7 Source cves: CVE-2025-10279 Source advisory: OSV:PYSEC-2026-1639...
ddwrt-tracker (>=0.0.1.dev33, <=0.0.1.dev34), dokos-cli (>=2.0.0, <=2.1.0) +3 more potentially affected by CVE-2026-22702 via virtualenv (16.6.0)
virtualenv PYPI version 16.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on virtualenv and may be impacted: - ddwrt-tracker =0.0.1.dev33, =2.0.0, =5.0.0, =0.0.0, =0.0.0, =1.9.1 Source cves: CVE-2026-22702 Source advisory: OSV:PYSEC-2026-2009...
sientia-tracker (>=1.0.2, <=1.0.7) potentially affected by CVE-2025-14279 via mlflow (2.10.1)
mlflow PYPI version 2.10.1 is affected by a known vulnerability. The following packages have a transitive dependency on mlflow and may be impacted: - sientia-tracker =1.0.2, =1.0.7 Source cves: CVE-2025-14279 Source advisory: OSV:PYSEC-2026-1656...
MAL-2026-7226 Malicious code in bmg-user-interaction-tracker (npm)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in bmg-user-interaction-tracker (npm)
--- -= Per source details. Do not edit below this line.=-...