Chainlit AI Framework Flaws Enable Data Theft via File Read and SSRF BugsThe Hacker News·Jan 21, 16:08 UTC · Jan 21, 2026VulnerabilityCVE-2026-22218CVE-2026-2221947
RubyGems, PyPI Hit by Malicious Packages Stealing Credentials, Crypto, Forcing Security ChangesThe Hacker News·Aug 9, 06:49 UTC · Aug 9, 2025Vulnerability42
Malicious PyPI Package ‘Fabrice’ Found Stealing AWS Keys from Thousands of DevelopersThe Hacker News·Nov 15, 00:00 UTC · Nov 15, 2024Vulnerability142
Popular Django web framework affected by a SQL Injection flawSecurity Affairs·Jul 4, 14:49 UTC · Jul 4, 2022VulnerabilityCVE-2022-3426547
⚡ Weekly Recap: Hot CVEs, npm Worm Returns, Firefox RCE, M365 Email Raid & MoreThe Hacker News·Dec 2, 05:36 UTC · Dec 2, 2025VulnerabilityCVE-2025-59287CVE-2025-12972CVE-2025-12970+17 CVEs147
Supply chain attack sends shockwaves through openCyberScoop·Apr 5, 21:51 UTC · Apr 5, 2024VulnerabilityCVE-2024-309447
40 Open-Source Tools Redefining How Security Teams Secure The StackHelp Net Security·Dec 11, 00:00 UTC · Dec 11, 2025Vulnerability42