Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
PYSEC-2026-4139
  • PyPI/psd-tools
psd-tools composite/numpy has uncontrolled memory allocation via crafted PSD geometry 01 Oct
  • Fix available
  • Severity - 7.5 (High)
MAL-2026-17419
  • PyPI/friendly-tools
Malicious code in friendly-tools (PyPI) 01 Oct
  • No fix available
MAL-2026-17416
  • PyPI/friendly-greeting-tools
Malicious code in friendly-greeting-tools (PyPI) 30 Sep
  • No fix available
GHSA-8q6g-vjhf-jp8m
  • PyPI/psd-tools
psd-tools composite/numpy has uncontrolled memory allocation via crafted PSD geometry 22 Sep
  • Fix available
  • Severity - 7.5 (High)
PYSEC-2026-3819
  • PyPI/crewai-tools
crewai-tools SSRF redirect bypass exposes internal services 10 Sep
  • Fix available
  • Severity - 8.3 (High)
MAL-2026-15938
  • PyPI/dac-tools
Malicious code in dac-tools (PyPI) 06 Sep
  • No fix available
MAL-2026-14589
  • PyPI/yamlformat-tools
Malicious code in yamlformat-tools (PyPI) 28 Aug
  • No fix available
GHSA-mr4r-hcgx-8p4h
  • PyPI/crewai-tools
crewai-tools SSRF redirect bypass exposes internal services 14 Jul
  • Fix available
  • Severity - 8.3 (High)
PYSEC-2026-2969
  • PyPI/psd-tools
psd-tools vulnerable to arbitrary file write via smart-object filename 13 Jul
  • Fix available
  • Severity - 4.6 (Medium)
PYSEC-2026-2968
  • PyPI/promptflow-tools
Azure PromptFlow remote code execution related to Jinja templates 13 Jul
  • Fix available
  • Severity - 6.5 (Medium)
PYSEC-2026-3079
  • PyPI/sushy-tools
OpenStack Sushy-Tools and VirtualBMC Improper Preservation of Permissions 13 Jul
  • Fix available
  • Severity - 5.5 (Medium)
MAL-2026-10192
  • PyPI/defi-tools
Malicious code in defi-tools (PyPI) 12 Jul
  • No fix available
GHSA-2rmg-vrx8-9j2f
  • PyPI/psd-tools
psd-tools vulnerable to arbitrary file write via smart-object filename 09 Jul
  • Fix available
  • Severity - 4.6 (Medium)
MAL-2026-7023
  • PyPI/dbzy-tools
Malicious code in dbzy-tools (PyPI) 08 Jul
  • No fix available
MAL-2026-6735
  • PyPI/ue-python-tools
Malicious code in ue-python-tools (PyPI) 02 Jul
  • No fix available
MAL-2026-6558
  • PyPI/fsociety-tools
Malicious code in fsociety-tools (PyPI) 28 Jun
  • No fix available