Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- UnknownMalicious code in saeka (PyPI)Oct 14, 2026
- Low3.1Apprise forwards configured auth headers across cross-origin HTTP redirectsEPSS 0.3%Oct 14, 2026
- UnknownMalicious code in seapy-ops (PyPI)Oct 14, 2026
- UnknownMalicious code in crelic-bqwheel-52f66a3f1d (PyPI)Oct 13, 2026
- UnknownMalicious code in fontcase (PyPI)Oct 13, 2026
- UnknownMalicious code in sysdiagd (PyPI)Oct 13, 2026
- UnknownMalicious code in npp-ml (PyPI)Oct 12, 2026
- UnknownMalicious code in pyyi (PyPI)Oct 12, 2026
- UnknownMalicious code in minecraftaccfinder (PyPI)Oct 12, 2026
- Medium6.8Oauthlib: Timing Attack Vulnerability in PKCE code_verifier Comparison (CWE-208)EPSS 0.4%Sep 29, 2026
- Medium6.1Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generationEPSS 0.3%Sep 29, 2026
- Medium5.5asteval Sandbox Escape: arbitrary native memory read/write via numpy ctypes in default asteval InterpreterEPSS 0.1%Aug 20, 2026
- Critical9.6Prowler is a cloud security platform.Jul 10, 2026
- Low3.1BBOT's Symlink guard bypass in unarchive module allows planting symlinks during extractionEPSS 0.4%Jul 8, 2026
- High8.4Flyto2 Core is an execution kernel for automation and AI-agent workflows.Jul 6, 2026
- UnknownJupyterLab: Stored XSS in extension manager through package metadata unsanitized URI protocolEPSS 0.3%Jun 19, 2026
- Critical9.8picklescan before 0.0.22 only considers standard pickle file extensions in the scope for its vulnerability scan.EPSS 0.4%Mar 3, 2025
- Critical9.8A vulnerability in the GraphCypherQAChain class of langchain-ai/langchain-community version 0.2.5 allows for SQL injection through prompt injection.EPSS 13.7%Nov 5, 2024
18 records · page 1 of 1
PreviousNext