Vulnerabilities

ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-jqc4-5cvw-7w85
  • PyPI/filelock
filelock: ReadWriteLock on the hard-link route deletes any directory another... 3 hours ago
  • Fix available
  • Severity - 6.1 (Medium)
GHSA-9vhv-jxww-xfm5
  • PyPI/filelock
filelock: ReadWriteLock on Windows acts on SQLite side files another local user... 3 hours ago
  • Fix available
  • Severity - 3.3 (Low)
GHSA-567q-5qvw-pf92
  • PyPI/filelock
filelock: On Windows an oplock on a soft lock's marker holds... 3 hours ago
  • Fix available
  • Severity - 2.5 (Low)
GHSA-4f8h-vr72-p32c
  • PyPI/virtualenv
virtualenv: Temporary app-data can leave dangling seed package links 3 hours ago
  • Fix available
  • Severity - 4.4 (Medium)
GHSA-cx28-75q4-x26q
  • PyPI/virtualenv
virtualenv: Pip seeding with download omits wheel digest verification 3 hours ago
  • Fix available
  • Severity - 2.3 (Low)
GHSA-494p-63j8-28p3
  • PyPI/virtualenv
virtualenv: Downloaded wheel selection and caching precede verification 3 hours ago
  • Fix available
  • Severity - 2.3 (Low)
GHSA-394h-qwmc-48pf
  • PyPI/virtualenv
virtualenv: Xonsh activation literals depend on the script decoding codec 3 hours ago
  • Fix available
  • Severity - 7.1 (High)
GHSA-fc2g-4w5p-6whm
  • PyPI/virtualenv
virtualenv: Seeded files retain permissions from an older cache 3 hours ago
  • Fix available
  • Severity - 4.4 (Medium)
GHSA-6w3r-xr62-4xcp
  • PyPI/virtualenv
virtualenv: Bash prompt values can change meaning under older compatibility... 3 hours ago
  • Fix available
  • Severity - 7.1 (High)
GHSA-qmx5-4p3x-wvqf
  • PyPI/virtualenv
virtualenv: Venv configuration readback can reinterpret path boundaries 3 hours ago
  • Fix available
  • Severity - 2.0 (Low)
GHSA-hhxq-47xx-j5xx
  • PyPI/virtualenv
virtualenv: Seed replacement does not contain metadata deletion paths 3 hours ago
  • Fix available
  • Severity - 4.5 (Medium)
GHSA-2wqp-q3c6-ccj5
  • PyPI/mlflow
MLflow: SSRF on unauthenticated MLflow servers via third-party scorer kwargs in... 3 hours ago
  • Fix available
  • Severity - 6.5 (Medium)
GHSA-6hmw-9432-67qq
  • PyPI/langgraph-checkpoint-postgres
  • PyPI/langgraph-checkpoint-sqlite
LangGraph: Namespace labels containing `.` reach other namespaces in Postgres... 3 hours ago
  • Fix available
  • Severity - 6.0 (Medium)
GHSA-2g95-wg33-c5x2
  • PyPI/filelock
filelock: SoftFileLock evicts a fresh lock file whose watched age another local... 3 hours ago
  • Fix available
  • Severity - 4.7 (Medium)
GHSA-crv4-6mhj-j5jh
  • PyPI/filelock
filelock: SoftFileLock stale-break restore follows a swapped-in symbolic link... 3 hours ago
  • Fix available
  • Severity - 5.3 (Medium)
GHSA-v4x8-3wr5-3wq8
  • PyPI/filelock
filelock ReadWriteLock: SQLite reopens the lock database by name, so a planted... 3 hours ago
  • Fix available
  • Severity - 7.1 (High)