A heap-based buffer overflow vulnerability exists in the tiled-TIFF decoder of the Python Pillow library versions 8.2.0 through 12.x. This flaw allows reading beyond the allocated tile buffer when processing crafted tiled TIFF images, potentially exposing adjacent heap data or causing a crash. The issue is resolved in version 13.0.0.
A vulnerability in aiohttp versions prior to 3.14.4 allows the Secure attribute on shared cookies to be ignored. This means a cookie marked as Secure could be transmitted over unencrypted HTTP connections, potentially exposing sensitive session data.
CVE-2026-111750 is a medium severity vulnerability in aiohttp, an asynchronous HTTP client/server framework for Python. Versions prior to 3.14.4 use a pure Python HTTP parser that accepts ambiguous HTTP request framing, allowing an unauthenticated attacker to perform HTTP request smuggling when the application runs without standard wheel extensions or uses AIOHTTP_NO_EXTENSIONS. This issue is fixed in version 3.14.4.
CVE-2026-111749 is a low-severity vulnerability in aiohttp prior to version 3.14.4 where a subdomain can remove the Host-Only scope from an existing parent-domain cookie. This can lead to host-only protections being stripped from cookies if a user accesses an untrusted subdomain. The impact is limited when applications do not reflect these cookies to browsers. The issue is fixed in aiohttp version 3.14.4.
CVE-2026-111748 is a vulnerability in aiohttp prior to version 3.14.4 where an attacker can send an absolute-form HTTP request that manipulates the Request.scheme property. This causes the application to use attacker-controlled scheme data rather than the actual connection protocol, potentially misleading security decisions based on the scheme. The issue is fixed in aiohttp version 3.14.4.
CVE-2026-111066 is a high-severity vulnerability in aiohttp, an asynchronous HTTP client/server framework for Python. Versions from 2.0.0 up to but not including 3.14.4 are affected. The flaw allows unauthenticated attackers to exhaust server file descriptors by sending specially crafted multipart requests to handlers using Request.post(). This uncontrolled resource consumption issue is fixed in version 3.14.4.
CVE-2026-111065 is a vulnerability in aiohttp, an asynchronous HTTP client/server framework for Python. Versions prior to 3.14.4 improperly handle Max-Age processing, which can overflow and prevent connections from closing properly. This can lead to temporary exhaustion of the connection pool until garbage collection reclaims the connections. The issue is fixed in version 3.14.4.
The fabdeploycheck package on PyPI contains malicious code that downloads a remote configuration and executes commands under attacker control. It establishes a reverse shell, allowing full command execution on the infected host. Additional capabilities include arbitrary file reads, process execution, TCP probing, and HTTP requests with stolen tokens. The package disables TLS verification when fetching commands, enabling man-in-the-middle attacks. It also kills processes related to previous implant versions to maintain persistence. This behavior constitutes a backdoor implant with data exfiltration and remote control capabilities.
The fabtoolkit package on PyPI contains malicious code that executes a payload fetching a remote JSON configuration from an attacker-controlled server with TLS verification disabled. This payload can read arbitrary files, execute arbitrary commands, perform HTTP requests with stolen tokens, probe TCP ports, and establish a reverse shell daemon. It collects sensitive data such as credentials and cloud metadata, packages it, and uploads it to the attacker’s server. The malware enforces single-instance persistence by killing prior instances and is triggered by running 'python -m fabtoolkit' or importing certain functions. The package has no legitimate functionality matching its name.
The leakdeep package on PyPI masquerades as an OSINT and credential-leak intelligence tool but contains malicious code that acts as an infostealer on Windows systems. When executed, it starts a background process that steals browser credentials, cookies, autofill data, Discord authentication tokens, clipboard contents, screenshots, and webcam frames. The stolen data is exfiltrated to a hardcoded Discord webhook URL, which is obfuscated and reconstructed at runtime. The advertised search functionality is non-functional, serving as a cover for the malicious activities.
The PyPI package 'tonemaptts' version 0.1.0 is part of a malicious campaign that falsely advertises itself as an audio-analysis profiles loader but actually downloads and executes remote malicious code. This package is linked to a broader coin-mining campaign and is designed to run unauthorized scripts from remote sources.
The pyrechoasr package on PyPI is a malicious package falsely advertising as an audio-analysis profiles loader. Its actual purpose is to download and execute remote malicious scripts, continuing a known coin-mining campaign. The package version 0.1.0 is affected. No CVSS score is available for this threat.
The PyPI package 'driftwavets' version 0.1.0 is part of a malicious campaign that falsely advertises itself as an audio-analysis profiles loader. Instead, it downloads and executes remote malicious code, continuing a known coin-mining campaign. This package is designed to execute remote code without embedding the URL directly in the package.
The PyPI package 'novalithtts' version 0.1.0 is part of a malicious campaign falsely advertising itself as an 'audio-analysis profiles' loader. Instead of providing legitimate functionality, it downloads and executes remote malicious scripts, likely continuing a coin-mining campaign. There is no embedded URL in the package, indicating remote code execution is triggered externally. This package poses a direct threat by executing unauthorized code on affected systems.
The PyPI package 'voltswannts' version 0.1.0 is identified as malicious software that falsely advertises itself as an 'audio-analysis profiles' loader. Its actual purpose is to download and execute a remote malicious script, continuing a known coin-mining campaign. This package poses a direct threat by executing unauthorized remote code.
The PyPI package 'glassbeakasr' version 0.1.0 is part of a malicious campaign that falsely advertises itself as an audio-analysis profiles loader. Its true purpose is to download and execute remote malicious scripts, likely continuing a previous coin-mining campaign. There is no embedded URL in the package itself, indicating remote code execution is triggered dynamically. This package is identified as malicious software with intent similar to infostealers.
The emberlytts package on PyPI is part of a malicious campaign that falsely advertises itself as an 'audio-analysis profiles' loader. Its actual purpose is to download and execute remote malicious code. This package is linked to a known coin-mining campaign and is considered to have clear malicious intent.
The quasitonnts package on PyPI falsely advertises itself as an 'audio-analysis profiles' loader but is designed to download and execute remote malicious code. This behavior is linked to a broader malicious campaign involving coin-mining activities. The package version 0.1.0 is affected. There is no CVSS score available for this threat.
The ukraine69 package on PyPI contains malicious code that executes during import. This code attempts to escape sandbox environments, locate Telegram bot session files, and trigger malicious account deletions. The campaign associated with this package is identified as malicious with destructive actions and attempts to cover tracks.
LMCache versions from 0.3.9 up to but not including 0.5.6 have a critical unauthenticated remote code execution vulnerability in multiprocess mode via unsafe pickle deserialization on the ZeroMQ transport port (default 5555). The transport socket, used for inter-process communication, lacks authentication and deserializes attacker-controlled data using pickle.loads, allowing arbitrary code execution as the LMCache process user. By default, the transport binds to localhost, but multi-node deployments often bind to routable addresses, exposing the service. Official container images run the LMCache process as root, increasing risk. The vulnerability is fixed in version 0.5.6 by replacing pickle with a safe, versioned MessagePack format and restricting network exposure.