Every known security problem in the code packages we track, newest first. It comes from public security databases and updates every few hours. See when it last updated
| Advisory | Severity | Attack odds | Published | Packages |
|---|---|---|---|---|
Malicious release: Malicious code in execjs (PyPI) MAL-2025-2962 | Malicious | Not scored | 28 Mar, 2025 | PyPI execjs |
Malicious release: Malicious code in eth-defi (PyPI) MAL-2025-2958 | Malicious | Not scored | 28 Mar, 2025 | PyPI eth-defi |
Malicious release: Malicious code in django-storage (PyPI) MAL-2025-2956 | Malicious | Not scored | 28 Mar, 2025 | PyPI django-storage |
Malicious release: Malicious code in datasetsgraphviz (PyPI) MAL-2025-2954 | Malicious | Not scored | 28 Mar, 2025 | PyPI datasetsgraphviz |
Malicious release: Malicious code in daft-dashboard (PyPI) MAL-2025-2953 | Malicious | Not scored | 28 Mar, 2025 | PyPI daft-dashboard |
Malicious release: Malicious code in cryptographymethods (PyPI) MAL-2025-2951 | Malicious | Not scored | 28 Mar, 2025 | PyPI cryptographymethods |
Malicious release: Malicious code in cdms2 (PyPI) MAL-2025-2944 | Malicious | Not scored | 28 Mar, 2025 | PyPI cdms2 |
Malicious release: Malicious code in chbencode (PyPI) MAL-2025-2945 | Malicious | Not scored | 28 Mar, 2025 | PyPI chbencode |
Malicious release: Malicious code in akangatu (PyPI) MAL-2025-2933 | Malicious | Not scored | 28 Mar, 2025 | PyPI akangatu |
Malicious release: Malicious code in alibabacloud-gateway-fc-util-py2 (PyPI) MAL-2025-2934 | Malicious | Not scored | 28 Mar, 2025 | PyPI alibabacloud-gateway-fc-util-py2 |
Malicious release: Malicious code in aiphttp (PyPI) MAL-2025-2932 | Malicious | Not scored | 28 Mar, 2025 | PyPI aiphttp |
Malicious release: Malicious code in agents-kit (PyPI) MAL-2025-2930 | Malicious | Not scored | 28 Mar, 2025 | PyPI agents-kit |
Malicious release: Malicious code in acapy-agent-didx (PyPI) MAL-2025-2928 | Malicious | Not scored | 28 Mar, 2025 | PyPI acapy-agent-didx |
Malicious release: Malicious code in 3-0 (PyPI) MAL-2025-2926 | Malicious | Not scored | 28 Mar, 2025 | PyPI 3-0 |
Malicious release: Malicious code in 7-0 (PyPI) MAL-2025-2927 | Malicious | Not scored | 28 Mar, 2025 | PyPI 7-0 |
Malicious release: Malicious code in 0-8 (PyPI) MAL-2025-2925 | Malicious | Not scored | 28 Mar, 2025 | PyPI 0-8 |
Malicious release: Malicious code in conn-utils (PyPI) MAL-2025-191706 | Malicious | Not scored | 27 Mar, 2025 | PyPI conn-utils |
Mesop Class Pollution vulnerability leads to DoS and Jailbreak attacks CVE-2025-30358, GHSA-f3mf-hm6v-jfhh, PYSEC-2026-1624 | High | 0.7% | 27 Mar, 2025 | PyPI mesop |
Synapse vulnerable to federation denial of service via malformed events CVE-2025-30355, GHSA-v56r-hwv5-mxg6, PYSEC-2026-1614 | High | 1.2% | 27 Mar, 2025 | PyPI matrix-synapse |
Django TomSelect incomplete escaping of dangerous characters in widget attributes GHSA-785h-76cm-cpmf | Low | Not scored | 26 Mar, 2025 | PyPI django-tomselect |
Frappe has possibility of SQL injection due to improper validations CVE-2025-30217, GHSA-6phg-4wmq-h5h3, PYSEC-2026-1391 | Medium | 0.4% | 26 Mar, 2025 | PyPI frappe |
A command injection vulnerability in the Command Dispatcher Service of NASA Fprime v3.4.3 allows attackers to execute arbitrary commands. CVE-2024-55030, PYSEC-2025-116 | Critical | 1.8% | 25 Mar, 2025 | PyPI fprime |
NASA Fprime v3.4.3 was discovered to contain multiple cross-site scripting (XSS) vulnerabilities. CVE-2024-55029, PYSEC-2025-115 | Medium | 0.3% | 25 Mar, 2025 | PyPI fprime |
A template injection vulnerability in the Dashboard of NASA Fprime v3.4.3 allows attackers to execute arbitrary code via uploading a crafted Vue file. CVE-2024-55028, PYSEC-2025-114 | Critical | 0.8% | 25 Mar, 2025 | PyPI fprime |
Frappe vulnerable to information disclosure leading to account takeover CVE-2025-30214, GHSA-qrv3-jc3h-f3m6, PYSEC-2026-1392 | High | 0.4% | 25 Mar, 2025 | PyPI frappe |
Frappe has Possibility of Remote Code Execution due to improper validation CVE-2025-30213, GHSA-v342-4xr9-x3q3, PYSEC-2026-1393 | Medium | 0.7% | 25 Mar, 2025 | PyPI frappe |
Frappe has possibility of SQL injection due to improper validations CVE-2025-30212, GHSA-3hj6-r5c9-q8f3, PYSEC-2026-1390 | Medium | 0.4% | 25 Mar, 2025 | PyPI frappe |
A vulnerability classified as critical was found in Open Asset Import Library Assimp 5.4.3. This vulnerability affects the function AI_MD5_PARSE_STRING_IN_QUOTATION of the file code/AssetLib/MD5/MD5Parser.cpp of the component MD5 File Handler. The manipulation of the argument data leads to heap-base CVE-2025-2757, PYSEC-2025-168 | Medium | 0.5% | 25 Mar, 2025 | PyPI pyassimp |
A vulnerability classified as critical has been found in Open Asset Import Library Assimp 5.4.3. This affects the function Assimp::AC3DImporter::ConvertObjectSection of the file code/AssetLib/AC/ACLoader.cpp of the component AC3D File Handler. The manipulation of the argument tmp leads to heap-based CVE-2025-2756, PYSEC-2025-167 | Medium | 0.6% | 25 Mar, 2025 | PyPI pyassimp |
Malicious release: Malicious code in coloryi (PyPI) MAL-2025-3444 | Malicious | Not scored | 25 Mar, 2025 | PyPI coloryi |
Malicious release: Malicious code in quickcolors (PyPI) MAL-2025-3461 | Malicious | Not scored | 25 Mar, 2025 | PyPI quickcolors |
Malicious release: Malicious code in quicolor (PyPI) MAL-2025-3462 | Malicious | Not scored | 25 Mar, 2025 | PyPI quicolor |
A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been rated as critical. Affected by this issue is the function Assimp::AC3DImporter::ConvertObjectSection of the file code/AssetLib/AC/ACLoader.cpp of the component AC3D File Handler. The manipulation of the argument src.ent CVE-2025-2755, PYSEC-2025-166 | Medium | 0.5% | 25 Mar, 2025 | PyPI pyassimp |
A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been declared as critical. Affected by this vulnerability is the function Assimp::AC3DImporter::ConvertObjectSection of the file code/AssetLib/AC/ACLoader.cpp of the component AC3D File Handler. The manipulation of the argum CVE-2025-2754, PYSEC-2025-165 | Medium | 0.6% | 25 Mar, 2025 | PyPI pyassimp |
A vulnerability was found in Open Asset Import Library Assimp 5.4.3. It has been classified as critical. Affected is the function SceneCombiner::MergeScenes of the file code/AssetLib/LWS/LWSLoader.cpp of the component LWS File Handler. The manipulation leads to out-of-bounds read. It is possible to CVE-2025-2753, PYSEC-2025-164 | Medium | 0.5% | 25 Mar, 2025 | PyPI pyassimp |
A vulnerability was found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This issue affects the function fast_atoreal_move in the library include/assimp/fast_atof.h of the component CSM File Handler. The manipulation leads to out-of-bounds read. The attack may be initiated CVE-2025-2752, PYSEC-2025-163 | Medium | 0.7% | 25 Mar, 2025 | PyPI pyassimp |
A vulnerability has been found in Open Asset Import Library Assimp 5.4.3 and classified as problematic. This vulnerability affects the function Assimp::CSMImporter::InternReadFile of the file code/AssetLib/CSM/CSMLoader.cpp of the component CSM File Handler. The manipulation of the argument na leads CVE-2025-2751, PYSEC-2025-162 | Medium | 0.8% | 25 Mar, 2025 | PyPI pyassimp |
A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. This affects the function Assimp::CSMImporter::InternReadFile of the file code/AssetLib/CSM/CSMLoader.cpp of the component CSM File Handler. The manipulation leads to out-of-bounds write. It is po CVE-2025-2750, PYSEC-2025-161 | Medium | 0.5% | 25 Mar, 2025 | PyPI pyassimp |
Malicious release: Malicious code in pyrovider (PyPI) MAL-2025-191836 | Malicious | Not scored | 24 Mar, 2025 | PyPI pyrovider |
Malicious release: Malicious code in bsb-backup (PyPI) MAL-2025-2621 | Malicious | Not scored | 24 Mar, 2025 | PyPI bsb-backup |
Malicious release: Malicious code in team-bsb-bot (PyPI) MAL-2025-2622 | Malicious | Not scored | 24 Mar, 2025 | PyPI team-bsb-bot |
Malicious release: Malicious code in bbllaacckkwwoollff (PyPI) MAL-2025-3430 | Malicious | Not scored | 24 Mar, 2025 | PyPI bbllaacckkwwoollff |
Malicious release: Malicious code in bbllaacckkwwoollff-6ad8f762-1a91-45d7-a9c5-356bd858356a (PyPI) MAL-2025-3431 | Malicious | Not scored | 24 Mar, 2025 | PyPI bbllaacckkwwoollff-6ad8f762-1a91-45d7-a9c5-356bd858356a |
Malicious release: Malicious code in bbllaacckkwwoollff6ad8f751 (PyPI) MAL-2025-3432 | Malicious | Not scored | 24 Mar, 2025 | PyPI bbllaacckkwwoollff6ad8f751 |
Malicious release: Malicious code in bbllaacckkwwoollff6ad8f752 (PyPI) MAL-2025-3433 | Malicious | Not scored | 24 Mar, 2025 | PyPI bbllaacckkwwoollff6ad8f752 |
Malicious release: Malicious code in bbllaacckkwwoollff6ad8f753 (PyPI) MAL-2025-3434 | Malicious | Not scored | 24 Mar, 2025 | PyPI bbllaacckkwwoollff6ad8f753 |
Malicious release: Malicious code in bbllaacckkwwoollff6ad8f762 (PyPI) MAL-2025-3435 | Malicious | Not scored | 24 Mar, 2025 | PyPI bbllaacckkwwoollff6ad8f762 |
Malicious release: Malicious code in f2d5cfdc642c3d4 (PyPI) MAL-2025-3446 | Malicious | Not scored | 24 Mar, 2025 | PyPI f2d5cfdc642c3d4 |
Malicious release: Malicious code in f2d5cfdc642c3d5 (PyPI) MAL-2025-3447 | Malicious | Not scored | 24 Mar, 2025 | PyPI f2d5cfdc642c3d5 |
Malicious release: Malicious code in codeoptimizer (PyPI) MAL-2025-3440 | Malicious | Not scored | 23 Mar, 2025 | PyPI codeoptimizer |