Unrated
pysec-2026-607
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 6,855
Reset filters
Unrated
pysec-2026-606
Malicious code in okite (PyPI)
Unrated
pysec-2026-605
Malicious code in nucbox (PyPI)
Unrated
pysec-2026-604
Malicious code in napari-ufish (PyPI)
High
CVE-2026-57516
Ray: Arbitrary code execution via ray.data.read_webdataset default decoder: pickle.loads(value) and torch.load(weights_only=False)
High
CVE-2026-57585
MessagePack for Python: Out-of-bounds read / crash on Unpacker reuse after a caught error
Critical
CVE-2026-7873
Langflow: Code Injection Vulnerability in Code Validation Endpoint
Unrated
pysec-2026-594
Malicious code in mrbios (PyPI)
Unrated
pysec-2026-593
Malicious code in magique-ai (PyPI)
Unrated
pysec-2026-592
Malicious code in magique (PyPI)
Unrated
pysec-2026-591
Malicious code in funcdesc (PyPI)
Unrated
pysec-2026-590
Malicious code in executor-http (PyPI)
Unrated
pysec-2026-589
Malicious code in executor-engine (PyPI)
High
CVE-2026-58168
DeepTutor missing MCP tool authorization allows non-admin users to invoke unrestricted tools
Unrated
pysec-2026-580
Malicious code in coolbox (PyPI)
Unrated
pysec-2026-579
Malicious code in cmd2func (PyPI)
Unrated
pysec-2026-578
Malicious code in bramin (PyPI)
Unrated
pysec-2026-586
Malicious code in tlask (PyPI)
Unrated
pysec-2026-584
Malicious code in rlask (PyPI)
Unrated
pysec-2026-583
Malicious code in nhmpy (PyPI)
Unrated
pysec-2026-582
Malicious code in mflux-streamlit (PyPI)
Unrated
pysec-2026-585
Malicious code in spateo-release (PyPI)
Unrated
pysec-2026-581
Malicious code in dynamo-release (PyPI)
Critical
CVE-2026-48039
Meta Ads MCP: Unauthenticated HTTP MCP Tool Execution Leaks Operator Meta Access Token
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.