ansible-mongodb-store (>=0.1.0, <=0.3.0), bson-extra (0.0.4) +6 more potentially affected by CVE-2026-88029 via pymongo (3.12.2)

pymongo PYPI version 3.12.2 is affected by a known vulnerability. The following packages have a transitive dependency on pymongo and may be impacted: - ansible-mongodb-store =0.1.0, =1.0.0, =1.0.0, =1.0.0, =0.15.2, =0.1.1, =0.2.14 - ss-daily-tools 1.0.0 Source cves: CVE-2026-88029 Source advisory...

CVE-2026-55239: Improper Neutralization of Special Elements used in an SQL Command

Tianji is an open source analytics, uptime monitoring, and server status platform. Prior to 1.31.29, the getDateQuery function in src/server/utils/prisma.ts constructs raw SQL through Prisma.sql by interpolating the timezone request value without parameter binding. The timezone value can reach...

CLSA-2026-1791965637 TuxCare security update for org.codehaus.plexus:plexus-utils (1 CVE)

TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 1 CVE. Fixed in 1.5.6-tuxcare.2...

CLSA-2026-1791965636 TuxCare security update for org.codehaus.plexus:plexus-utils (1 CVE)

TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 1 CVE. Fixed in 2.0.4-tuxcare.2...

CLSA-2026-1791965626 TuxCare security update for org.codehaus.plexus:plexus-utils (1 CVE)

TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 1 CVE. Fixed in 3.0.17-tuxcare.2...

CLSA-2026-1791965620 TuxCare security update for org.codehaus.plexus:plexus-utils (1 CVE)

TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 1 CVE. Fixed in 3.0.15-tuxcare.2...

CLSA-2026-1791965617 TuxCare security update for org.codehaus.plexus:plexus-utils (1 CVE)

TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 1 CVE. Fixed in 3.0.18-tuxcare.2...

CLSA-2026-1791960018 TuxCare security update for org.codehaus.plexus:plexus-utils (2 CVEs)

TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 2 CVEs. Fixed in 1.5.5-tuxcare.1...

MAL-2026-17888 Malicious code in @flexmr/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7039d72eee8d5f1abdc19889f0712d38273fd988a32aee832fc651712e386c52 @flexmr/[email protected] ships a one-line re-export stub whose package.json declares its sole dependency daemon-thread-lookup-buffer via a direct HTTPS U...

Malicious code in @flexmr/utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7039d72eee8d5f1abdc19889f0712d38273fd988a32aee832fc651712e386c52 @flexmr/[email protected] ships a one-line re-export stub whose package.json declares its sole dependency daemon-thread-lookup-buffer via a direct HTTPS U...

PT-2026-114022

Insertion of sensitive information into log files in the git utils.py component in Amazon SageMaker Python SDK V3 before 3.10.0 and V2 before 2.257.3 might allow an authenticated remote user to obtain plaintext repository credentials from CloudWatch Logs when a git clone operation fails, because...

PT-2026-122552

TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 1 CVE. Fixed in 3.0.17-tuxcare.2...

PT-2026-122550

TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 1 CVE. Fixed in 3.0.18-tuxcare.2...

PT-2026-122553

TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 1 CVE. Fixed in 2.0.4-tuxcare.2...

PT-2026-122542

TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 2 CVEs. Fixed in 1.5.5-tuxcare.1...

PT-2026-122554

TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 1 CVE. Fixed in 1.5.6-tuxcare.2...

PT-2026-122551

TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 1 CVE. Fixed in 3.0.15-tuxcare.2...

CLSA-2026-1791931359 TuxCare security update for org.codehaus.plexus:plexus-utils (3 CVEs)

TuxCare rebuilt org.codehaus.plexus:plexus-utils to address 3 CVEs. Fixed in 3.0.22-tuxcare.1...

EUVD-2026-98170

A vulnerability was identified in Linketic CityGaussian up to 2.0. This affects the function parsecfgargs of the file internal/utils/common.py of the component Sidecar Parsing. The manipulation of the argument cfgargs leads to code injection. The attack can only be performed from a local...

CVE-2026-108944

The RAE repository is vulnerable to a code injection flaw within the Config-Driven Model Instantiation component. Specifically, the get_obj_from_str function in src/utils/model_utils.py allows for code injection when the Target argument is manipulated. This vulnerability requires local access to ...