Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-mc9m-6fm9-pghc
  • PyPI/zoo-kcl
  • crates.io/kcl-lib
Zoo Design Studio: Memory-corruption in memory handling of lib-kcl 20 Aug
  • Fix available
  • Severity - 6.9 (Medium)
GHSA-jgvr-6x5w-hx5w
  • PyPI/zoo-kcl
  • crates.io/kcl-lib
Zoo Design Studio: Recursive KCL parsing is vulnerable to denial-of-service 20 Aug
  • Fix available
  • Severity - 6.9 (Medium)
PYSEC-2026-3682
  • PyPI/linuxfabrik-lib
linuxfabrik-lib: Arbitrary root file read via live --test argument (lib.lftest) across sudoers-whitelisted plugins (LPE) 19 Aug
  • Fix available
  • Severity - 5.5 (Medium)
GHSA-rh9c-rqvg-f7pr
  • PyPI/linuxfabrik-lib
linuxfabrik-lib: Arbitrary root file read via live --test argument (lib.lftest) across sudoers-whitelisted plugins (LPE) 18 Aug
  • Fix available
  • Severity - 5.5 (Medium)
PYSEC-2026-3578
  • PyPI/linuxfabrik-lib
linuxfabrik-lib: fetch() forwards credential headers across a cross-origin redirect 04 Aug
  • Fix available
  • Severity - 6.0 (Medium)
GHSA-4jc5-g844-4x33
  • PyPI/linuxfabrik-lib
linuxfabrik-lib: fetch() forwards credential headers across a cross-origin redirect 30 Jul
  • Fix available
  • Severity - 6.0 (Medium)
GHSA-464c-974j-9xm6
  • Go/github.com/aws/aws-cdk-go/awscdk
  • Go/github.com/aws/aws-cdk-go/awscdk/v2
  • Maven/software.amazon.awscdk:aws-cdk-lib
  • Maven/software.amazon.awscdk:codebuild
  • NuGet/Amazon.CDK.AWS.CodeBuild
  • ... 5 more
AWS CDK CodeBuild S3 Log Encryption Boolean Inversion 24 Jul
  • Fix available
  • Severity - 3.3 (Low)
PYSEC-2026-2594
  • PyPI/linuxfabrik-lib
Linuxfabrik Monitoring Plugins have local privilege escalation using embedded command 13 Jul
  • Fix available
  • Severity - 7.8 (High)
PYSEC-2026-2596
  • PyPI/linuxfabrik-lib
Linuxfabrik Monitoring Plugins allow insecure creation of SQLite databases 13 Jul
  • Fix available
  • Severity - 2.0 (Low)
PYSEC-2026-2595
  • PyPI/linuxfabrik-lib
Linuxfabrik Monitoring Plugins: Sudoers may be able to obtain privilege escalation via /usr/bin/apt-get arguments 13 Jul
  • Fix available
  • Severity - 7.0 (High)
GHSA-798h-hpph-m24j
  • PyPI/linuxfabrik-lib
Linuxfabrik Monitoring Plugins have local privilege escalation using embedded command 06 Jul
  • Fix available
  • Severity - 7.8 (High)
GHSA-r35r-fpx2-jgr4
  • PyPI/linuxfabrik-lib
Linuxfabrik Monitoring Plugins allow insecure creation of SQLite databases 06 Jul
  • Fix available
  • Severity - 2.0 (Low)
GHSA-8w6w-23mq-h8rg
  • PyPI/linuxfabrik-lib
Linuxfabrik Monitoring Plugins: Sudoers may be able to obtain privilege escalation via /usr/bin/apt-get arguments 02 Jul
  • Fix available
  • Severity - 7.0 (High)
MAL-2026-5183
  • PyPI/hpe-glcp-automation-lib
Malicious code in hpe-glcp-automation-lib (PyPI) 04 Jun
  • No fix available
MAL-2026-4861
  • PyPI/lib-1779997093-yjeeqn
Malicious code in lib-1779997093-yjeeqn (PyPI) 28 May
  • No fix available
MAL-2026-3660
  • PyPI/numpy-lib
Malicious code in numpy-lib (PyPI) 13 May
  • No fix available