com.qaprosoft:carina-api (>=6.0.4, <=6.1.24), com.qaprosoft:carina-aws-s3 (>=6.0.4, <=6.1.24) +6 more potentially affected by CVE-2026-69219 via com.rabbitmq:amqp-client (4.9.0)

com.rabbitmq:amqp-client MAVEN version 4.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.qaprosoft:carina-api =6.0.4, =6.0.4, =6.0.4, =6.0.4, =6.0.4, =6.0.4, =3.3.48, =4.0.58 -...

Malicious code in zafira (PyPI)

--- Credit: OpenSSF source...

Malicious Package

Overview zafira is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

mold-cli (>=0.0.1, <=0.0.2), pygrest (1.1.0) +3 more potentially affected by CVE-2025-71176 via pytest (4.1.1)

pytest PYPI version 4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - mold-cli =0.0.1, =1.0.0, =0.100.2rc4, =0.100.2 - regexgen 1.0.0 Source cves: CVE-2025-71176 Source advisory: OSV:PYSEC-2026-1845...

mold-cli (>=0.0.1, <=0.0.2), pygrest (1.1.0) +3 more potentially affected by CVE-2025-71176 via pytest (4.1.1)

pytest PYPI version 4.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pytest and may be impacted: - mold-cli =0.0.1, =1.0.0, =0.100.2rc4, =0.100.2 - regexgen 1.0.0 Source cves: CVE-2025-71176 Source advisory: OSV:GHSA-6W46-J5RX-G56G...

MAL-2024-6252 Malicious code in zafira (PyPI)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in zafira (PyPI)

--- -= Per source details. Do not edit below this line.=-...

com.qaprosoft:carina-api (>=6.0.4, <=6.1.24), com.qaprosoft:carina-aws-s3 (>=6.0.4, <=6.1.24) +6 more potentially affected by CVE-2023-46120 via com.rabbitmq:amqp-client (4.9.0)

com.rabbitmq:amqp-client MAVEN version 4.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on com.rabbitmq:amqp-client and may be impacted: - com.qaprosoft:carina-api =6.0.4, =6.0.4, =6.0.4, =6.0.4, =6.0.4, =6.0.4, =3.3.48, =4.0.58 -...

cloudfeaster (>=0.9.33, <=0.9.45), pytest-zafira (>=1.0.0, <=1.0.3) +1 more potentially affected by CVE-2023-5590 via selenium (3.14.0)

selenium PYPI version 3.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on selenium and may be impacted: - cloudfeaster =0.9.33, =1.0.0, =1.14.6, =1.15.10 Source cves: CVE-2023-5590 Source advisory: OSV:PYSEC-2023-206...

cloudfeaster (>=0.9.33, <=0.9.45), pytest-zafira (>=1.0.0, <=1.0.3) +1 more potentially affected by CVE-2022-28108 via selenium (3.14.0)

selenium PYPI version 3.14.0 is affected by a known vulnerability. The following packages have a transitive dependency on selenium and may be impacted: - cloudfeaster =0.9.33, =1.0.0, =1.14.6, =1.15.10 Source cves: CVE-2022-28108 Source advisory: OSV:PYSEC-2022-43167...