Vulnerability Database
Blog
FAQ
Docs
arrow_forward
search
light_mode
dark_mode
Vulnerabilities
search
All ecosystems
2198389
AlmaLinux
5919
Alpaquita
15742
Alpine
4608
Android
3674
Azure Linux
17629
BellSoft Hardened Containers
745
Bitnami
9290
Chainguard
1023658
CleanStart
3591
CRAN
14
crates.io
2732
Debian
68356
Echo
6714
GHC
3
GIT
108035
GitHub Actions
55
Go
9203
Hackage
32
Hex
361
Julia
1713
Linux
29974
Mageia
6227
Maven
7040
MinimOS
144169
npm
228732
NuGet
1869
opam
29
openEuler
8800
openSUSE
14454
OSS-Fuzz
4013
Packagist
7095
Pub
11
PyPI
25158
Red Hat
23327
Rocky Linux
4292
Root
19534
RubyGems
5326
SUSE
23081
SwiftURL
60
TuxCare
9472
Ubuntu
65370
VSCode
21
Wolfi
288261
ID
Packages
Summary
Published
arrow_upward
Attributes
PYSEC-2026-3540
PyPI/sh
sh _uid does not drop supplementary groups (incomplete privilege drop)
23 Jul
Fix available
Severity - 7.9 (High)
GHSA-q38v-wp89-2w55
PyPI/sh
sh _uid does not drop supplementary groups (incomplete privilege drop)
17 Jul
Fix available
Severity - 7.9 (High)
PyPI - OSV