Search Vulnerabilities

Malicious code in mylib-utils (PyPI)

Malicious code in rblx-api (PyPI)

Malicious code in stringhelp (PyPI)

pretalx vulnerable to stored cross-site scripting in organizer search typeahead

pretalx mail templates vulnerable to email injection via unescaped user-controlled placeholders

Dagster Vulnerable to SQL Injection via Dynamic Partition Keys in Database I/O Manager Integrations

PraisonAI: SQL Injection via unvalidated `table_prefix` in 9 conversation store backends (incomplete fix for CVE-2026-40315)

Incomplete fix for CVE-2026-34935: Command Injection in MervinPraison/PraisonAI

Neo4j Labs MCP Servers: SSRF and Data Modification via read_only Mode Bypass Through CALL Procedures

Sentry: Improper authentication on SAML SSO process allows user identity linking

Malicious code in aet-test (PyPI)

Malicious code in shan-lib (PyPI)

Malicious code in shan-lib-poc (PyPI)

Malicious code in lixxyly (PyPI)

Malicious code in shelipp (PyPI)

Malicious code in looopiw (PyPI)

Malicious code in sher-server-tool (PyPI)

Malicious code in sher-net (PyPI)

Malicious code in solanakit (PyPI)

Malicious code in procoder (PyPI)