Vulnerability Database
Blog
FAQ
Docs
arrow_forward
search
light_mode
dark_mode
Vulnerabilities
search
All ecosystems
2240937
AlmaLinux
5967
Alpaquita
16156
Alpine
4655
Android
3677
Azure Linux
17970
BellSoft Hardened Containers
770
Bitnami
9476
Chainguard
1048381
CleanStart
5235
CRAN
14
crates.io
2763
Debian
68939
Echo
7865
GHC
3
GIT
109014
GitHub Actions
55
Go
9328
Hackage
33
Hex
364
Julia
1713
Linux
29975
Mageia
6237
Maven
7050
MinimOS
148209
npm
229102
NuGet
1869
opam
29
openEuler
8900
openSUSE
14573
OSS-Fuzz
4018
Packagist
7101
Pub
11
PyPI
25461
Red Hat
23525
Rocky Linux
4342
Root
19620
RubyGems
5327
SUSE
23442
SwiftURL
60
TuxCare
9918
Ubuntu
65983
VSCode
21
Wolfi
293786
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-h8m9-jgf8-vwvp
PyPI/prowler-cloud
Prowler: SAML Domain Claiming Enables Cross-Tenant Account Takeover
11 Sep
Fix available
Severity - 9.6 (Critical)
PYSEC-2026-3908
PyPI/prowler-cloud
Prowler: Stored XSS in HTML reports through unescaped cloud resource tags
10 Sep
Fix available
Severity - 5.4 (Medium)
PYSEC-2026-3907
PyPI/prowler
Prowler: Stored XSS in HTML reports through unescaped cloud resource tags
10 Sep
Fix available
Severity - 5.4 (Medium)
GHSA-c2jg-2778-ggm4
PyPI/prowler
PyPI/prowler-cloud
Prowler: Stored XSS in HTML reports through unescaped cloud resource tags
08 Sep
Fix available
Severity - 5.4 (Medium)
PYSEC-2026-3725
PyPI/prowler-cloud
See record for full details
10 Jul
Fix available
Severity - 9.6 (Critical)
PyPI - OSV