Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
MAL-2026-10760
  • PyPI/abseil-py
 Malicious code in abseil-py (PyPI) 4 days ago
  • No fix available
PYSEC-2026-2970
  • PyPI/py-rattler
 Rattler vulnerable to package cache path traversal via conda package build string 13 Jul
  • Fix available
  • Severity - 5.4 (Medium)
PYSEC-2026-2971
  • PyPI/py-rattler
 rattler has an entry-point path traversal in noarch:python install (arbitrary file write) 13 Jul
  • Fix available
  • Severity - 6.3 (Medium)
MAL-2026-10193
  • PyPI/py-base58
 Malicious code in py-base58 (PyPI) 12 Jul
  • No fix available
GHSA-h672-p7h7-97v9
  • PyPI/py-rattler
  • crates.io/rattler_cache
 Rattler vulnerable to package cache path traversal via conda package build string 09 Jul
  • Fix available
  • Severity - 5.4 (Medium)
MAL-2026-6976
  • PyPI/py-slugify
 Malicious code in py-slugify (PyPI) 08 Jul
  • No fix available
PYSEC-2026-1765
  • PyPI/peppol-py
 Peppol-py is vulnerable to XXE attacks due to Saxon configuration 07 Jul
  • Fix available
  • Severity - 5.0 (Medium)
PYSEC-2026-526
  • PyPI/rpc-py
 rpc.py vulnerable to Deserialization of Untrusted Data 29 Jun
  • No fix available
  • Severity - 9.8 (Critical)
GHSA-m8j6-rc5x-wv36
  • PyPI/nono-py
 nono-py's policy JSON accepts unknown security fields 26 Jun
  • Fix available
  • Severity - 5.2 (Medium)
GHSA-9j7f-3r4p-pwh6
  • PyPI/nono-py
 nono-py vulnerable to authorization bypass / policy confusion 26 Jun
  • Fix available
  • Severity - 5.2 (Medium)
GHSA-72w7-mf9g-733p
  • PyPI/nono-py
 nono-py has proxy-only network fallback bypass on older Linux kernels 26 Jun
  • Fix available
  • Severity - 6.4 (Medium)
MAL-2026-6245
  • PyPI/request-cache-py
 Malicious code in request-cache-py (PyPI) 20 Jun
  • No fix available
MAL-2026-5338
  • PyPI/solana-web3-py
 Malicious code in solana-web3-py (PyPI) 08 Jun
  • No fix available
MAL-2026-5336
  • PyPI/solana-cli-py
 Malicious code in solana-cli-py (PyPI) 08 Jun
  • No fix available
MAL-2026-5339
  • PyPI/spl-token-py
 Malicious code in spl-token-py (PyPI) 08 Jun
  • No fix available
GHSA-q53q-5r4j-5729
  • PyPI/py-rattler
  • crates.io/rattler
 rattler has an entry-point path traversal in noarch:python install (arbitrary file write) 01 Jun
  • Fix available
  • Severity - 6.3 (Medium)
Load more...