Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
MAL-2026-938
  • PyPI/pylibcugraphops
Malicious code in pylibcugraphops (PyPI) 8 hours ago
  • No fix available
MAL-2026-936
  • PyPI/questpro
Malicious code in questpro (PyPI) 22 hours ago
  • No fix available
MAL-2026-937
  • PyPI/telebot-infee
Malicious code in telebot-infee (PyPI) 22 hours ago
  • No fix available
MAL-2026-934
  • PyPI/telebot-infoe
Malicious code in telebot-infoe (PyPI) 23 hours ago
  • No fix available
MAL-2026-935
  • PyPI/telebot-infoo
Malicious code in telebot-infoo (PyPI) 23 hours ago
  • No fix available
GHSA-97f8-7cmv-76j2
  • PyPI/picklescan
Picklescan (scan_pytorch) Bypass via dynamic eval MAGIC_NUMBER yesterday
  • Fix available
  • Severity - 7.1 (High)
MAL-2026-932
  • PyPI/easyreg
Malicious code in easyreg (PyPI) yesterday
  • No fix available
MAL-2026-933
  • PyPI/pywin-simple-gui
Malicious code in pywin-simple-gui (PyPI) yesterday
  • No fix available
MAL-2026-931
  • PyPI/telebot-infe
Malicious code in telebot-infe (PyPI) yesterday
  • No fix available
MAL-2026-930
  • PyPI/telebot-info
Malicious code in telebot-info (PyPI) yesterday
  • No fix available
GHSA-jxc4-54g3-j7vp
  • PyPI/indico
Indico Affected by Cross-Site-Scripting via material uploads yesterday
  • Fix available
  • Severity - 5.4 (Medium)
GHSA-f47c-3c5w-v7p4
  • PyPI/indico
Indico has Server-Side Request Forgery (SSRF) in multiple places yesterday
  • Fix available
  • Severity - 6.9 (Medium)
GHSA-33fm-6gp7-4p47
  • PyPI/weblate
Weblate has an argument injection in management console 2 days ago
  • Fix available
  • Severity - 6.6 (Medium)
MAL-2026-928
  • PyPI/polyutil
Malicious code in polyutil (PyPI) 2 days ago
  • No fix available
MAL-2026-927
  • PyPI/polyclawd
Malicious code in polyclawd (PyPI) 2 days ago
  • No fix available
MAL-2026-921
  • PyPI/cicibot-fix-message-naming
Malicious code in cicibot-fix-message-naming (PyPI) 3 days ago
  • No fix available