Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
MAL-2026-19147
  • PyPI/aurum-pay
 Malicious code in aurum-pay (PyPI) 19 hours ago
  • No fix available
MAL-2026-19116
  • PyPI/humbility-shared
 Malicious code in humbility-shared (PyPI) yesterday
  • No fix available
GHSA-8v59-qmwv-4p6q
  • PyPI/compose-lint
 compose-lint: File paths embedded in pull requests can inject CI workflow... yesterday
  • Fix available
  • Severity - 2.3 (Low)
GHSA-hr4h-4c45-v4q4
  • PyPI/compose-lint
 compose-lint: Text in a pull request can issue CI workflow commands through... yesterday
  • Fix available
  • Severity - 2.3 (Low)
GHSA-r7j4-crjv-h467
  • PyPI/compose-lint
 compose-lint: Text in a pull request can still issue CI workflow commands... yesterday
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-p623-mxf7-qxjm
  • PyPI/octoprint
 OctoPrint: Stored XSS via saved connection parameters yesterday
  • Fix available
  • Severity - 2.4 (Low)
GHSA-rm8w-w798-g545
  • GitHub Actions/tmatens/compose-lint
  • PyPI/compose-lint
  • github.com/tmatens/compose-lint
 compose-lint: Incomplete fix for GHSA-jf3h-8jvx-vcrg: a run stopped at the... yesterday
  • Fix available
  • Severity - 2.3 (Low)
GHSA-3hch-x692-6qj3
  • PyPI/gpustack
 GPUStack: Missing authorization on several cluster and resource endpoints... yesterday
  • Fix available
  • Severity - 8.8 (High)
GHSA-2h4w-29cv-2cmv
  • PyPI/ag2
  • PyPI/autogen
 AG2: Newline injection in SandboxShellTool bypasses allowed=[...] and... yesterday
  • Fix available
  • Severity - 8.8 (High)
GHSA-62m9-f875-rqw6
  • PyPI/gpustack
 GPUStack: SAML callback trusts an unverified SAMLResponse, allowing... yesterday
  • Fix available
  • Severity - 9.1 (Critical)
GHSA-whr6-fgpq-fpv9
  • GitHub Actions/tmatens/compose-lint
  • PyPI/compose-lint
  • github.com/tmatens/compose-lint
 compose-lint: A committed symlink makes compose-lint quote a file from outside... yesterday
  • Fix available
  • Severity - 2.3 (Low)
GHSA-88f4-frh5-gmcr
  • GitHub Actions/tmatens/compose-lint
  • PyPI/compose-lint
  • github.com/tmatens/compose-lint
 compose-lint: A `.compose-lint.yml` symlinked outside the project is read, and... yesterday
  • Fix available
  • Severity - 2.3 (Low)
GHSA-jf3h-8jvx-vcrg
  • GitHub Actions/tmatens/compose-lint
  • PyPI/compose-lint
  • github.com/tmatens/compose-lint
 compose-lint: A pull request can make compose-lint quote a secret from a... yesterday
  • Fix available
  • Severity - 2.3 (Low)
GHSA-65v8-q222-64xx
  • PyPI/compose-lint
 compose-lint: `fix --apply` can delete a line the user did not select,... yesterday
  • Fix available
  • Severity - 5.1 (Medium)
GHSA-6f4g-xm8v-pgv6
  • GitHub Actions/tmatens/compose-lint
  • PyPI/compose-lint
  • github.com/tmatens/compose-lint
 compose-lint: Compose file text can issue GitHub Actions workflow commands... yesterday
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-6wcv-rj3c-mhv3
  • GitHub Actions/tmatens/compose-lint
  • PyPI/compose-lint
  • github.com/tmatens/compose-lint
 compose-lint: .env read through a symlink outside the project can expose the CI... yesterday
  • Fix available
  • Severity - 2.3 (Low)
Load more...