PyPI - OSV

MAL-2026-17471

PyPI/caoxiltts

Malicious code in caoxiltts (PyPI) 5 hours ago

No fix available

MAL-2026-17469

PyPI/infrabench

Malicious code in infrabench (PyPI) 8 hours ago

No fix available

MAL-2026-17470

PyPI/voxcpmruntime

Malicious code in voxcpmruntime (PyPI) 10 hours ago

No fix available

MAL-2026-17468

PyPI/voxcpmintel

Malicious code in voxcpmintel (PyPI) 11 hours ago

No fix available

MAL-2026-17465

PyPI/voxcpmeval

Malicious code in voxcpmeval (PyPI) 11 hours ago

No fix available

MAL-2026-17466

PyPI/voxcpmkit

Malicious code in voxcpmkit (PyPI) 12 hours ago

No fix available

MAL-2026-17467

PyPI/voxcpmui4

Malicious code in voxcpmui4 (PyPI) 13 hours ago

No fix available

MAL-2026-17464

PyPI/voxcpmui3

Malicious code in voxcpmui3 (PyPI) 14 hours ago

No fix available

MAL-2026-17462

PyPI/echogen

Malicious code in echogen (PyPI) 20 hours ago

No fix available

MAL-2026-17463

PyPI/voxcpmtts3

Malicious code in voxcpmtts3 (PyPI) 20 hours ago

No fix available

MAL-2026-17461

PyPI/voxel-tts

Malicious code in voxel-tts (PyPI) 20 hours ago

No fix available

GHSA-h46j-26q3-rggf

PyPI/headroom-ai

Headroom vulnerable to Cross-Site WebSocket Hijacking (CSWSH) yesterday

Fix available
Severity - 8.8 (High)

GHSA-v2f8-6655-7grj

PyPI/vibe-trading-ai

Vibe-Trading FastAPI endpoints permit unauthenticated access, file upload, and an RCE chain yesterday

Fix available
Severity - 10.0 (Critical)

GHSA-5rmq-chc7-m22f

PyPI/vibe-trading-ai

Vibe-Trading file-read tools expose arbitrary server-readable files yesterday

Fix available
Severity - 7.5 (High)

GHSA-jqmf-mx4f-hfr6

PyPI/vibe-trading-ai

Vibe-Trading LLM-callable tools permit command execution, code injection, and SSRF yesterday

Fix available
Severity - 10.0 (Critical)

GHSA-mhvh-fq92-pfmr

PyPI/geopy

geopy: Regular Expression Denial of Service (ReDoS) in geopy.Point yesterday

Fix available
Severity - 4.0 (Medium)

Vulnerabilities