Sources:
amazon_linux
archlinux
azure_linux
bitnami_vulndb
capec
capec_enrichment_dashboard
certeu
certfr
circl_kev
cisa_known_exploited
cna_scorecard
cnvd
csaf_abb
csaf_adstecindustrialitgmbh
csaf_amd
csaf_aumariestergmbhcokg
csaf_baadem2mproductsgmbh
csaf_beckhoffautomationgmbhcokg
csaf_bendergmbhcokg
csaf_bosch
csaf_bsi
csaf_bsi_aggregator
csaf_bsi_cvd_white
csaf_bsi_white
csaf_bsi_wid_white
csaf_carlogavazziautomation
csaf_certbund
csaf_certvde
csaf_cisa
csaf_cisa_it
csaf_cisa_ot
csaf_cisco
csaf_claaskgaa
csaf_codesysgmbh
csaf_dell
csaf_duraggmbh
csaf_endresshauserag
csaf_ericsson
csaf_euchnergmbhcokg
csaf_festosecokg
csaf_frauschersensortechnikgmbh
csaf_hancom
csaf_harmaninternational
csaf_helmholzgmbhcokg
csaf_himapaulhildebrandtgmbh
csaf_hitachi
csaf_hpe
csaf_huawei
csaf_hydacinternationalgmbh
csaf_ibm
csaf_ifmelectronicgmbh
csaf_janitzaelectronicsgmbh
csaf_jumogmbhcokg
csaf_juniper
csaf_kebautomationkg
csaf_kukaag
csaf_lenovo
csaf_lenzese
csaf_mbconnectlinegmbh
csaf_mettlertoledogmbh
csaf_metzconnectgmbh
csaf_microsoft
csaf_mieleciekg
csaf_moxa
csaf_murrelektronikgmbh
csaf_ncscnl
csaf_ndaal
csaf_netapp
csaf_nozomi
csaf_nozominetworks
csaf_nvidia
csaf_opcfoundation
csaf_openeuler
csaf_opensuse
csaf_oracle
csaf_ox
csaf_paloalto
csaf_panasonic
csaf_pentagrid
csaf_pepperlfuchsse
csaf_phoenix
csaf_pilzgmbhcokg
csaf_qnap
csaf_redhat
csaf_samsung
csaf_sauterag
csaf_schneider
csaf_sick
csaf_siemens
csaf_smasolartechnologyag
csaf_suse
csaf_swarcotrafficsystemsgmbh
csaf_synology
csaf_tibco
csaf_trend
csaf_trumpfsecokg
csaf_trustsource
csaf_tuxcare
csaf_ubiquiti
csaf_vartastoragegmbh
csaf_vegagrieshaberkg
csaf_vmware
csaf_wagogmbhcokg
csaf_weidmuellerinterfacegmbhcokg
csaf_welotecgmbh
csaf_wiesemanntheisgmbh
csaf_yaskawaeuropegmbh
csaf_yokogawa
csaf_zyxel
cve_forecast
cve_icu
cve_vs_github_dashboard
cvelistv5
cwe_dashboard
cwe_enrichment
cwec
debian_rustsec
debian_security_tracker
drupal
emb3d
emb3d_dashboard
epss_dashboard
epss_history
epss_kev_enrichment
euvd_kev
fedora
fkie_nvd
freebsd
gcve
gcve_enriched
gcve_enrichment
gcve_enrichment_dashboard
gentoo
github
gsd
jvn
kev_ransomware
mitre_attack
moksha
ndaal_kev
netbsd
nuclei_dashboard
nuclei_enrichment
nvd
nvd_cpe_dictionary
openbsd
opencve
oracle_linux
ossf_malicious_packages
osv_almalinux
osv_alpine
osv_android
osv_bellsoft
osv_chainguard
osv_cran
osv_github_actions
osv_golang
osv_haskell
osv_hex
osv_linux
osv_maven
osv_npm
osv_nuget
osv_ocaml
osv_ossfuzz
osv_packagist
osv_pub
osv_rocky
osv_rubygems
osv_rustsec
osv_swift
osv_ubuntu
osv_wolfi
publish_stats
pysec
sadp_pilot
ssvc
ssvc_dashboard
tailscale
tsunami_enrichment
variot
vulncheck_kev
vulnrichment
Clear
| ID | Title | Severity | CVSS | Source | Updated |
|---|---|---|---|---|---|
| mal-2026-18704 | Malicious code in dbt-adapter (PyPI) | UNKNOWN | pysec | unknown | |
| mal-2026-18658 | Malicious code in rcp-ndcg (PyPI) | UNKNOWN | pysec | unknown | |
| mal-2026-18657 | Malicious code in strands-aidr (PyPI) | UNKNOWN | pysec | unknown | |
| ghsa-p3fp-8748-vqfq | Django Vulnerable to Allocation of Resources Without Limits or Throttling | UNKNOWN | 5.0 | ghsa | unknown |
| mal-2026-18633 | Malicious code in extera-runtime (PyPI) | UNKNOWN | pysec | unknown | |
| mal-2026-18627 | Malicious code in msgpackrpc (PyPI) | UNKNOWN | pysec | unknown | |
| mal-2026-18625 | Malicious code in extera-plugin-runtime (PyPI) | UNKNOWN | pysec | unknown | |
| pysec-2026-4362 | pysec-2026-4362 | UNKNOWN | 7.1 | pysec | unknown |
| pysec-2026-4361 | pysec-2026-4361 | UNKNOWN | 8.7 | pysec | unknown |
| mal-2026-18443 | Malicious code in wallet-tracking (PyPI) | UNKNOWN | pysec | unknown | |
| ghsa-p423-j2cm-9vmq | Cryptography vulnerable to buffer overflow if non-contiguous buffers were passed to APIs | UNKNOWN | 6.9 | ghsa | unknown |
| ghsa-3r9x-f23j-gc73 | onnx Vulnerable to Path Traversal via Symlink | UNKNOWN | 8.7 | ghsa | unknown |
| ghsa-469j-vmhf-r6v7 | NLTK has a Downloader Path Traversal Vulnerability (AFO) - Arbitrary File Overwrite | UNKNOWN | 8.1 | ghsa | unknown |
| ghsa-68j8-pq59-fqgm | NLTK has a Path Traversal issue | UNKNOWN | 8.6 | ghsa | unknown |
| ghsa-63cw-57p8-fm3p | PyTorch Vulnerable to Remote Code Execution via Untrusted Checkpoint Files | UNKNOWN | 8.8 | ghsa | unknown |
| mal-2026-18584 | Malicious code in protecteda (PyPI) | UNKNOWN | pysec | unknown | |
| mal-2026-18583 | Malicious code in ln9qw38745g (PyPI) | UNKNOWN | pysec | unknown | |
| mal-2026-18582 | Malicious code in zyto (PyPI) | UNKNOWN | pysec | unknown | |
| mal-2026-18580 | Malicious code in filipt (PyPI) | UNKNOWN | pysec | unknown | |
| ghsa-57q6-fvp4-pqmm | Open WebUI's API key endpoint restrictions bypassed via `x-api-key` header — full message processing on restricted endpoints | UNKNOWN | 6.5 | ghsa | unknown |
| ghsa-q63x-9pfm-mjx4 | Feast vulnerable to unsafe deserialization RCE in registry server via UDF proto | UNKNOWN | 9.3 | ghsa | unknown |
| ghsa-7pm4-56h2-5rxr | Prefect has Git Flag Injection via commit_sha and directories Parameters Leading to Remote Code Execution (RCE) | UNKNOWN | 9.9 | ghsa | unknown |
| mal-2026-18581 | Malicious code in hijuko-pilara (PyPI) | UNKNOWN | pysec | unknown | |
| mal-2026-18113 | Malicious code in jiklpo-tsunari-kay (PyPI) | UNKNOWN | pysec | unknown | |
| mal-2026-18112 | Malicious code in hijok-lampam (PyPI) | UNKNOWN | pysec | unknown | |
| mal-2026-18111 | Malicious code in hijiko-pilaka (PyPI) | UNKNOWN | pysec | unknown | |
| mal-2026-18110 | Malicious code in facewareretargeter (PyPI) | UNKNOWN | pysec | unknown | |
| ghsa-gh9r-c94j-cmp5 | Stanza: RCE via pickle deserialization in the lemmatizer | UNKNOWN | 7.8 | ghsa | unknown |
| ghsa-q2hg-643c-gw8h | Withdrawn Advisory: Apache Airflow: RCE by race condition in example_xcom dag | UNKNOWN | 8.1 | ghsa | unknown |
| ghsa-mq7r-vm99-p7vx | Duplicate Advisory : Picklescan is missing detection when calling built-in python idlelib.pyshell.ModifiedInterpreter.runcode | UNKNOWN | 7.6 | ghsa | unknown |