Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-9rwj-6rc7-p77c
  • PyPI/langgraph-checkpoint-sqlite
LangGraph's SQLite is vulnerable to SQL injection via metadata filter key in SQLite checkpointer list method 9 hours ago
  • Fix available
  • Severity - 7.3 (High)
GHSA-4c65-9gqf-4w8h
  • PyPI/cai-framework
Cybersecurity AI (CAI) vulnerable to Command Injection in run_ssh_command_with_credentials Agent tool 10 hours ago
  • No fix available
  • Severity - 9.6 (Critical)
MAL-2025-192396
  • PyPI/helloharry123c
Malicious code in helloharry123c (PyPI) 13 hours ago
  • No fix available
MAL-2025-192393
  • PyPI/ctosec-appsec-wb-xray-adapter
Malicious code in ctosec-appsec-wb-xray-adapter (PyPI) 15 hours ago
  • No fix available
MAL-2025-192392
  • PyPI/ajenti-plugin-testing-pyld
Malicious code in ajenti-plugin-testing-pyld (PyPI) 15 hours ago
  • No fix available
GHSA-wx63-35hw-2482
  • PyPI/mad-proxy
HTTP/HTTPS Traffic Interception Bypass in mad-proxy 16 hours ago
  • No fix available
  • Severity - 5.3 (Medium)
MAL-2025-192391
  • PyPI/bignum
Malicious code in bignum (PyPI) 17 hours ago
  • No fix available
GHSA-5923-r76v-mprm
  • PyPI/taguette
Open Redirect Vulnerability in Taguette 19 hours ago
  • Fix available
  • Severity - 5.4 (Medium)
GHSA-hxp3-63hc-5366
  • PyPI/nicegui
NiceGUI has a path traversal in app.add_media_files() allows arbitrary file read 19 hours ago
  • Fix available
  • Severity - 7.5 (High)
MAL-2025-192387
  • PyPI/do-not-install-this-package-001
Malicious code in do-not-install-this-package-001 (PyPI) yesterday
  • No fix available
MAL-2025-192386
  • PyPI/telcoo
Malicious code in telcoo (PyPI) yesterday
  • No fix available
MAL-2025-192385
  • PyPI/graphsync
Malicious code in graphsync (PyPI) yesterday
  • No fix available
MAL-2025-192382
  • PyPI/raft-dask
Malicious code in raft-dask (PyPI) yesterday
  • No fix available
MAL-2025-192380
  • PyPI/sketchfab-spinner
Malicious code in sketchfab-spinner (PyPI) yesterday
  • No fix available
MAL-2025-192379
  • PyPI/helloharry123p
Malicious code in helloharry123p (PyPI) yesterday
  • No fix available
GHSA-2m4f-cg75-76w2
  • PyPI/nicegui
NiceGUI Stored/Reflected XSS in ui.interactive_image via unsanitized SVG content yesterday
  • Fix available
  • Severity - 6.1 (Medium)