Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
MAL-2026-11421
  • PyPI/asdk-plugin-ai-platform
Malicious code in asdk-plugin-ai-platform (PyPI) 31 Jul
  • No fix available
MAL-2026-11422
  • PyPI/asdk-plugin-alphagen
Malicious code in asdk-plugin-alphagen (PyPI) 31 Jul
  • No fix available
MAL-2026-11423
  • PyPI/asdk-plugin-legacy
Malicious code in asdk-plugin-legacy (PyPI) 31 Jul
  • No fix available
PYSEC-2026-2653
  • PyPI/mkdocs-mcp-plugin
mkdocs-mcp-plugin has a Path Traversal issue 13 Jul
  • No fix available
  • Severity - 5.5 (Medium)
PYSEC-2026-2340
  • PyPI/ajenti-plugin-core
ajenti.plugin.core has race conditions in 2FA 13 Jul
  • Fix available
  • Severity - 6.9 (Medium)
PYSEC-2026-1632
  • PyPI/mkdocs-include-markdown-plugin
mkdocs-include-markdown-plugin susceptible to unvalidated input colliding with substitution placeholders 07 Jul
  • Fix available
  • Severity - 6.5 (Medium)
PYSEC-2026-266
  • PyPI/ajenti-plugin-core
ajenti.plugin.core has password bypass when 2FA is activated 29 Jun
  • Fix available
  • Severity - 9.1 (Critical)
GHSA-wfr3-hf93-qgg3
  • PyPI/mkdocs-mcp-plugin
mkdocs-mcp-plugin has a Path Traversal issue 28 Apr
  • No fix available
  • Severity - 5.5 (Medium)
GHSA-8647-755q-fw9p
  • PyPI/ajenti-plugin-core
ajenti.plugin.core has race conditions in 2FA 10 Apr
  • Fix available
  • Severity - 6.9 (Medium)
GHSA-3mcx-6wxm-qr8v
  • PyPI/ajenti-plugin-core
ajenti.plugin.core has password bypass when 2FA is activated 10 Apr
  • Fix available
  • Severity - 9.1 (Critical)
GHSA-5qvp-pr9f-2g2v
  • PyPI/poetry-plugin-tweak-dependencies-version
poetry-plugin-tweak-dependencies-version affected by CVE-2026-25645 01 Apr
  • Fix available
  • Severity - 4.4 (Medium)
MAL-2026-843
  • PyPI/requests-core-plugin
Malicious code in requests-core-plugin (PyPI) 10 Feb
  • No fix available
MAL-2026-547
  • PyPI/solhint-plugin-hyperlane
Malicious code in solhint-plugin-hyperlane (PyPI) 27 Jan
  • No fix available
MAL-2025-192392
  • PyPI/ajenti-plugin-testing-pyld
Malicious code in ajenti-plugin-testing-pyld (PyPI) 09 Dec 2025
  • No fix available
GHSA-v39m-5m9j-m9w9
  • PyPI/mkdocs-include-markdown-plugin
mkdocs-include-markdown-plugin susceptible to unvalidated input colliding with substitution placeholders 29 Sep 2025
  • Fix available
  • Severity - 6.5 (Medium)
MAL-2025-6559
  • PyPI/oca-pylint-plugin
Malicious code in oca-pylint-plugin (PyPI) 31 Jul 2025
  • No fix available