PyPI - OSV

GHSA-4xhp-xg4w-8ppm

PyPI/docling

Docling: Arbitrary local file read via draw:image xlink:href in the OpenDocument backend 25 minutes ago

Fix available
Severity - 6.9 (Medium)

GHSA-jxw3-mjmx-3pqm

PyPI/langflow

Langflow: Weak Fernet Key via random.seed() 27 minutes ago

Fix available
Severity - 9.1 (Critical)

GHSA-cf6m-vc3m-7cgm

PyPI/langflow

Langflow: Unauthenticated Flow Execution via Webhook Authentication Bypass 27 minutes ago

Fix available
Severity - 9.8 (Critical)

GHSA-w584-2h2r-2hvf

PyPI/langflow

Langflow: Title Authenticated Remote Code Execution in validate_code via Malicious Decorators Description 27 minutes ago

Fix available
Severity - 8.8 (High)

GHSA-9fpm-3445-2vx4

PyPI/langflow

Langflow: Prompt injection in Langflow Smart Transform can lead to code execution 28 minutes ago

Fix available
Severity - 8.8 (High)

MAL-2026-17628

PyPI/erc7730-hackathon

Malicious code in erc7730-hackathon (PyPI) 2 hours ago

No fix available

MAL-2026-17472

PyPI/anthropic-sdk

Malicious code in anthropic-sdk (PyPI) yesterday

No fix available

MAL-2026-17471

PyPI/caoxiltts

Malicious code in caoxiltts (PyPI) 2 days ago

No fix available

MAL-2026-17469

PyPI/infrabench

Malicious code in infrabench (PyPI) 2 days ago

No fix available

MAL-2026-17470

PyPI/voxcpmruntime

Malicious code in voxcpmruntime (PyPI) 2 days ago

No fix available

MAL-2026-17468

PyPI/voxcpmintel

Malicious code in voxcpmintel (PyPI) 2 days ago

No fix available

MAL-2026-17465

PyPI/voxcpmeval

Malicious code in voxcpmeval (PyPI) 2 days ago

No fix available

MAL-2026-17466

PyPI/voxcpmkit

Malicious code in voxcpmkit (PyPI) 2 days ago

No fix available

MAL-2026-17467

PyPI/voxcpmui4

Malicious code in voxcpmui4 (PyPI) 2 days ago

No fix available

MAL-2026-17464

PyPI/voxcpmui3

Malicious code in voxcpmui3 (PyPI) 2 days ago

No fix available

MAL-2026-17462

PyPI/echogen

Malicious code in echogen (PyPI) 2 days ago

No fix available

Vulnerabilities