A flaw was found in JupyterLab Git, a Git extension for JupyterLab. A remote attacker with commit access to a shared Git repository can exploit a stored cross-site scripting (XSS) vulnerability (CWE-79). By crafting a malicious Git filenam…

▾ MidnightRed Hat · Red Hat OpenShift AI (RHOAI)EPSS 0.53%via CSAF

CVE-2026-48828Medium· 6.5

4mo ago

The Bulk Variables API in Apache Airflow called the redactor without passing the variable's key, so the key-based `should_hide_value_for_key` check (which triggers on secret-suffixed key names like `_password` / `_token` / `*_secret`) …

The Bulk Variables API in Apache Airflow called the redactor without passing the variable's key, so the key-based `should_hide_value_for_key` check (which triggers on secret-suffixed key names like `*_password` / `*_token` / `*_secret`) …

▾ Sunlitapache · airflowEPSS 0.66%via NVD

CVE-2026-58473Critical· 9.1PoC

4mo ago

Cognee before 1.2.0 contains an improper access control vulnerability that allows unauthenticated attackers to overwrite the global LLM provider configuration by self-registering an account and calling the settings endpoint, which perfor…

Cognee before 1.2.0 contains an improper access control vulnerability that allows unauthenticated attackers to overwrite the global LLM provider configuration by self-registering an account and calling the settings endpoint, which perfor…

▾ Abyssaltopoteretes · cogneeEPSS 0.51%via NVD

CVE-2026-53878Medium· 6.1

4mo ago

Django: DomainNameValidator permits newline characters that may enable HTTP header injection

▾ Sunlitdjango · djangoEPSS 0.33%via OSV

CVE-2026-53877Medium· 4.8

4mo ago

Django: GDALRaster may over-read heap memory when constructed from bytes

▾ Sunlitdjango · djangoEPSS 0.53%via OSV

CVE-2026-48588Low· 3.1

4mo ago

Django: cache middleware may expose private responses when unrelated request cookies are present

▾ Sunlitdjango · djangoEPSS 0.43%via OSV

CVE-2026-49487Medium· 6.5

4mo ago

In Apache Airflow before 3.3.0, the REST API task-instance detail and list endpoints returned a deferred task's trigger kwargs without masking

In Apache Airflow before 3.3.0, the REST API task-instance detail and list endpoints returned a deferred task's trigger kwargs without masking. When a deferred operator passed a secret (for example a provider API key) into its trigger, a…

▾ Sunlitapache · airflowEPSS 0.66%via NVD

CVE-2026-48892Medium· 6.5

4mo ago

The Config API in Apache Airflow surfaced per-key secrets-backend overrides (environment variables like `AIRFLOWSECRETSBACKEND_KWARG__SECRET_ID` and `AIRFLOWWORKERSSECRETS_BACKEND_KWARG__SECRET_ID`) as synthetic config options wh…

The Config API in Apache Airflow surfaced per-key secrets-backend overrides (environment variables like `AIRFLOW__SECRETS__BACKEND_KWARG__SECRET_ID` and `AIRFLOW__WORKERS__SECRETS_BACKEND_KWARG__SECRET_ID`) as synthetic config options wh…

▾ Sunlitapache · airflowEPSS 0.66%via NVD

CVE-2026-48891Medium· 4.3

4mo ago

A bug in Apache Airflow's `/ui/dependencies` scheduling graph endpoint applied the caller's readable-Dag filter to the top-level serialized Dag key but still emitted referenced Dag IDs through the `dep.source` and `dep.target` fields of …

A bug in Apache Airflow's `/ui/dependencies` scheduling graph endpoint applied the caller's readable-Dag filter to the top-level serialized Dag key but still emitted referenced Dag IDs through the `dep.source` and `dep.target` fields of …

▾ Sunlitapache · airflowEPSS 0.64%via NVD

CVE-2026-49296Medium· 6.5

4mo ago

Before apache-airflow 3.3.0, a user authorized to read one Dag could disclose the source of other Dags co-located in the same source file

Before apache-airflow 3.3.0, a user authorized to read one Dag could disclose the source of other Dags co-located in the same source file. `GET /api/v2/dagSources/{dag_id}` — and the equivalent Dag-source view in the UI — returned the en…

▾ Sunlitapache · airflowEPSS 0.60%via NVD

CVE-2026-33264Critical· 9.8

4mo ago

A bug in `BaseSerialization.deserialize()` allowed unrestricted `import_string()` of attacker-controlled class paths when the Scheduler / API Server loaded a serialized DAG: a DAG author could embed a malicious trigger into a DAG to gain…

A bug in `BaseSerialization.deserialize()` allowed unrestricted `import_string()` of attacker-controlled class paths when the Scheduler / API Server loaded a serialized DAG: a DAG author could embed a malicious trigger into a DAG to gain…

▾ Midnightapache · airflowEPSS 1.6%via NVD

MAL-2026-7467None

4mo ago

Malicious code in scanvia (PyPI)

▾ Sunlitscanvia · scanviavia OSV

Tagged “pip”

Malicious code in tronsev (PyPI)

Malicious code in dbzy-tools (PyPI)

Malicious code in waymo-waymax (PyPI)

Malicious code in pyqt6darktheme (PyPI)

Serena: Unauthenticated Flask dashboard on fixed port enables DNS rebinding → memory poisoning → RCE

Trapster Community: Unauthenticated malformed DNS compression pointers crash per-packet honeypot handler

Malicious code in turbom (PyPI)

Malicious code in manom (PyPI)

Malicious code in manik (PyPI)

Malicious code in tronpak (PyPI)

Malicious code in turbod (PyPI)

Malicious code in manin (PyPI)

Malicious code in rarcore (PyPI)

Malicious code in py-slugify (PyPI)

Malicious code in oxntime (PyPI)

Malicious code in tronhapy (PyPI)

Malicious code in tronhap (PyPI)

Malicious code in jsonschemavalid (PyPI)

jupyterlab-git: jupyterlab-git-core: @jupyterlab/git: JupyterLab Git: Remote Code Execution via crafted Git filenames in commit history (CV…

The Bulk Variables API in Apache Airflow called the redactor without passing the variable's key, so the key-based `should_hide_value_for_key` check (which triggers on secret-suffixed key names like `*_password` / `*_token` / `*_secret`) …

Cognee before 1.2.0 contains an improper access control vulnerability that allows unauthenticated attackers to overwrite the global LLM provider configuration by self-registering an account and calling the settings endpoint, which perfor…

Django: DomainNameValidator permits newline characters that may enable HTTP header injection

Django: GDALRaster may over-read heap memory when constructed from bytes

Django: cache middleware may expose private responses when unrelated request cookies are present

In Apache Airflow before 3.3.0, the REST API task-instance detail and list endpoints returned a deferred task's trigger kwargs without masking

The Config API in Apache Airflow surfaced per-key secrets-backend overrides (environment variables like `AIRFLOW__SECRETS__BACKEND_KWARG__SECRET_ID` and `AIRFLOW__WORKERS__SECRETS_BACKEND_KWARG__SECRET_ID`) as synthetic config options wh…

A bug in Apache Airflow's `/ui/dependencies` scheduling graph endpoint applied the caller's readable-Dag filter to the top-level serialized Dag key but still emitted referenced Dag IDs through the `dep.source` and `dep.target` fields of …

Before apache-airflow 3.3.0, a user authorized to read one Dag could disclose the source of other Dags co-located in the same source file

A bug in `BaseSerialization.deserialize()` allowed unrestricted `import_string()` of attacker-controlled class paths when the Scheduler / API Server loaded a serialized DAG: a DAG author could embed a malicious trigger into a DAG to gain…

Malicious code in scanvia (PyPI)

The Bulk Variables API in Apache Airflow called the redactor without passing the variable's key, so the key-based `should_hide_value_for_key` check (which triggers on secret-suffixed key names like `_password` / `_token` / `*_secret`) …

The Config API in Apache Airflow surfaced per-key secrets-backend overrides (environment variables like `AIRFLOWSECRETSBACKEND_KWARG__SECRET_ID` and `AIRFLOWWORKERSSECRETS_BACKEND_KWARG__SECRET_ID`) as synthetic config options wh…