Vulnerability Library

GHSA-5f5c-8rvc-j8wf

• PyPI/fastapi-opa

OpaMiddleware does not filter HTTP OPTIONS requests 15 hours ago

• Fix available
• Severity - 6.9 (Medium)

GHSA-cgcg-p68q-3w7v

• PyPI/langchain-experimental

langchain-experimental vulnerable to Arbitrary Code Execution yesterday

• Fix available
• Severity - 9.0 (Critical)

PYSEC-2024-62

• github.com/langchain-ai/langchain
• PyPI/langchain-experimental

See record for full details yesterday

• Fix available

GHSA-cx63-2mw6-8hw5

• PyPI/setuptools

setuptools vulnerable to Command Injection via package URL yesterday

• Fix available
• Severity - 7.5 (High)

GHSA-5grr-72f9-678v

• PyPI/cipherbcrypt

Malware package cipherbcrypt 3 days ago

• No fix available

GHSA-9794-pc4r-438w

• PyPI/solara

Local File Inclusion in Solara 3 days ago

• Fix available
• Severity - 8.6 (High)

GHSA-5jq8-q6rj-9gq4

• PyPI/red-discordbot

Red-DiscordBot vulnerable to Incorrect Authorization in commands API 4 days ago

• Fix available
• Severity - 6.9 (Medium)

GHSA-jmp3-39vp-fwg8

• PyPI/wagtail

Wagtail regular expression denial-of-service via search query parsing 4 days ago

• Fix available
• Severity - 7.1 (High)

PYSEC-2024-61

• PyPI/chuanhuchatgpt

See record for full details 4 days ago

• No fix available
• Severity - 6.1 (Medium)

GHSA-9jmf-237g-qf46

• PyPI/django

Django Path Traversal vulnerability 6 days ago

• Fix available
• Severity - 8.7 (High)

GHSA-f6f8-9mx6-9mx2

• PyPI/django

Django vulnerable to Denial of Service 6 days ago

• Fix available
• Severity - 8.7 (High)

GHSA-qg2p-9jwr-mmqf

• PyPI/django

Django vulnerable to Denial of Service 6 days ago

• Fix available
• Severity - 8.7 (High)

GHSA-x7q2-wr7g-xqmf

• PyPI/django

Django vulnerable to user enumeration attack 6 days ago

• Fix available
• Severity - 6.9 (Medium)

PYSEC-2024-56

• PyPI/django

See record for full details 6 days ago

• Fix available

PYSEC-2024-57

• PyPI/django

See record for full details 6 days ago

• Fix available

PYSEC-2024-58

• PyPI/django

See record for full details 6 days ago

• Fix available