Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- UnknownMalicious code in crelic-bqwheel-52f66a3f1d (PyPI)Oct 13, 2026
- UnknownMalicious code in fontcase (PyPI)Oct 13, 2026
- UnknownMalicious code in sysdiagd (PyPI)Oct 13, 2026
- UnknownMalicious code in npp-ml (PyPI)Oct 12, 2026
- UnknownMalicious code in pyyi (PyPI)Oct 12, 2026
- Medium6.8Oauthlib: Timing Attack Vulnerability in PKCE code_verifier Comparison (CWE-208)Sep 29, 2026
- Medium6.1Oauthlib : Unsafe JSONP callback injection in RevocationEndpoint allows arbitrary JavaScript response generationSep 29, 2026
- Medium5.5asteval Sandbox Escape: arbitrary native memory read/write via numpy ctypes in default asteval InterpreterAug 20, 2026
- Critical9.8picklescan before 0.0.22 only considers standard pickle file extensions in the scope for its vulnerability scan.EPSS 0.4%Mar 3, 2025
- Critical9.8A vulnerability in the GraphCypherQAChain class of langchain-ai/langchain-community version 0.2.5 allows for SQL injection through prompt injection.EPSS 13.7%Nov 5, 2024
10 records · page 1 of 1
PreviousNext