Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
MAL-2026-3661
  • PyPI/pandas-data
Malicious code in pandas-data (PyPI) 13 May
  • No fix available
GHSA-v7qw-hx66-4w9x
  • PyPI/netbox-data-flows
netbox-data-flows has stored XSS in ObjectAlias names rendered inside DataFlow tables 07 May
  • Fix available
  • Severity - 8.7 (High)
MAL-2026-3100
  • PyPI/fetch-data-api-syncapi
Malicious code in fetch-data-api-syncapi (PyPI) 27 Apr
  • No fix available
MAL-2026-3083
  • PyPI/elementary-data
Malicious code in elementary-data (PyPI) 24 Apr
  • No fix available
MAL-2026-2148
  • PyPI/mattermost-data-warehouse
Malicious code in mattermost-data-warehouse (PyPI) 24 Mar
  • No fix available
MAL-2025-47755
  • PyPI/data-processing-utils
Malicious code in data-processing-utils (PyPI) 03 Sep 2025
  • No fix available
MAL-2025-5137
  • PyPI/solana-data
Malicious code in solana-data (PyPI) 18 Jun 2025
  • No fix available
MAL-2025-5111
  • PyPI/dexscreener-data
Malicious code in dexscreener-data (PyPI) 16 May 2025
  • No fix available
MAL-2024-12318
  • PyPI/omigo-data-analytics
Malicious code in omigo-data-analytics (PyPI) 01 Dec 2024
  • No fix available
PYSEC-2024-273
  • PyPI/galaxy-data
See record for full details 20 Sep 2024
  • Fix available
  • Severity - 5.4 (Medium)
MAL-2025-6525
  • PyPI/interasdasdnal-data-parser
Malicious code in interasdasdnal-data-parser (PyPI) 26 Jul 2024
  • No fix available
MAL-2024-5371
  • PyPI/mlp-data-product-producer
Malicious code in mlp-data-product-producer (PyPI) 25 Jun 2024
  • No fix available
MAL-2024-5182
  • PyPI/glovo-data-platform-declarative-airflow
Malicious code in glovo-data-platform-declarative-airflow (PyPI) 25 Jun 2024
  • No fix available
MAL-2024-5183
  • PyPI/glovo-data-platform-importer-brain
Malicious code in glovo-data-platform-importer-brain (PyPI) 25 Jun 2024
  • No fix available
MAL-2024-5181
  • PyPI/glovo-data-platform-declarative
Malicious code in glovo-data-platform-declarative (PyPI) 25 Jun 2024
  • No fix available
MAL-2024-5031
  • PyPI/data-platform-observability-validation
Malicious code in data-platform-observability-validation (PyPI) 25 Jun 2024
  • No fix available