OSV - Open Source Vulnerabilities

MAL-2026-13606

PyPI/cdktn-provider-azurerm

Malicious code in cdktn-provider-azurerm (PyPI)

3 hours ago

No fix available

MAL-2026-13607

PyPI/speed-hashes

Malicious code in speed-hashes (PyPI)

3 hours ago

No fix available

MAL-2026-13490

PyPI/fast-hashes

Malicious code in fast-hashes (PyPI)

6 hours ago

No fix available

MAL-2026-13488

PyPI/idnna

Malicious code in idnna (PyPI)

8 hours ago

No fix available

MAL-2026-13489

PyPI/pydanticc

Malicious code in pydanticc (PyPI)

8 hours ago

No fix available

MAL-2026-13486

PyPI/fastapii

Malicious code in fastapii (PyPI)

8 hours ago

No fix available

MAL-2026-13487

PyPI/flasq

Malicious code in flasq (PyPI)

8 hours ago

No fix available

GHSA-6hr6-w5qg-qmwg

PyPI/h2

h2: Duplicate Host header could facilitate request smuggling

17 hours ago

Fix available
Severity - 5.3 (Medium)

GHSA-hqvf-45jj-mccq

PyPI/awscli

AWS CLI: Disabled SSH host key verification in Amazon AWS CLI EMR helper commands

19 hours ago

Fix available
Severity - 6.9 (Medium)

GHSA-47pj-3jcm-6whg

PyPI/langgraph-checkpoint-postgres
PyPI/langgraph-checkpoint-sqlite

LangGraph: Namespace prefix matching crosses segment boundaries in Postgres and SQLite stores

20 hours ago

Fix available
Severity - 5.3 (Medium)

MAL-2026-13472

PyPI/alphalend-abi

Malicious code in alphalend-abi (PyPI)

23 hours ago

No fix available

MAL-2026-13473

PyPI/alphalend-layouts

Malicious code in alphalend-layouts (PyPI)

yesterday

No fix available

MAL-2026-13426

PyPI/xayoub-xctxteam

Malicious code in xayoub-xctxteam (PyPI)

yesterday

No fix available

PYSEC-2026-3623

PyPI/apache-polaris

See record for full details

yesterday

Fix available
Severity - 5.3 (Medium)

MAL-2026-13386

PyPI/decapod-common

Malicious code in decapod-common (PyPI)

yesterday

No fix available

MAL-2026-13380

PyPI/uncrypt

Malicious code in uncrypt (PyPI)

yesterday

No fix available