MEDIUM6.5RubyGemsPyPI
GHSA-8jxr-mccc-mwg8· CVE-2024-46977, PYSEC-2024-101OpenC3 Path Traversal via screen controller (`GHSL-2024-127`)
Modified: 10/31/2024
package
PyPI/openc3
pkg:pypi/openc3
MEDIUM4.6RubyGemsPyPI
GHSA-ffq5-qpvf-xq7x· CVE-2026-42086, PYSEC-2026-105OpenC3 COSMOS is Vulnerable to Self-XSS Through the Command Sender
Modified: 5/29/2026
MEDIUM5.9RubyGemsnpmPyPI
GHSA-4xqv-47rm-37mm· CVE-2024-47529, PYSEC-2024-121OpenC3 stores passwords in clear text (`GHSL-2024-129`)
Modified: 11/13/2024
MEDIUM6.1PyPI
PYSEC-2024-100· CVE-2024-43795, GHSA-vfj8-5pj7-2f9gModified: 10/8/2024
MEDIUM6.5PyPI
PYSEC-2024-101· CVE-2024-46977, GHSA-8jxr-mccc-mwg8Modified: 10/8/2024
MEDIUM6.5PyPI
PYSEC-2024-121· CVE-2024-47529, GHSA-4xqv-47rm-37mmModified: 11/13/2024
CRITICAL9.8PyPI
PYSEC-2025-149· CVE-2025-28386Modified: 5/21/2026
CRITICAL9.8PyPI
PYSEC-2025-150· CVE-2025-28389Modified: 5/21/2026
MEDIUM6.1PyPI
PYSEC-2025-254· CVE-2025-28380Modified: 7/13/2026
HIGH7.5PyPI
PYSEC-2025-255· CVE-2025-28381Modified: 7/13/2026
HIGH7.5PyPI
PYSEC-2025-256· CVE-2025-28382, GHSA-cf8v-5mrc-jv7fModified: 7/13/2026
CRITICAL9.1PyPI
PYSEC-2025-257· CVE-2025-28384, GHSA-p67j-387g-75wcModified: 7/13/2026
CRITICAL9.8PyPI
PYSEC-2025-258· CVE-2025-28388Modified: 7/13/2026
MEDIUM4.6PyPI
PYSEC-2026-105· CVE-2026-42086, GHSA-ffq5-qpvf-xq7xModified: 5/20/2026
HIGH8.1PyPI
PYSEC-2026-2242· CVE-2026-42084, GHSA-wgx6-g857-jjf7Modified: 7/13/2026
MEDIUM4.3PyPI
PYSEC-2026-2243· CVE-2026-42085, GHSA-4jvx-93h3-f45hModified: 7/13/2026
CRITICAL9.6PyPI
PYSEC-2026-2244· CVE-2026-42087, GHSA-v529-vhwc-wfc5Modified: 7/13/2026
HIGH8.1PyPI
PYSEC-2026-2245· CVE-2026-42088, GHSA-2wvh-87g2-89hrModified: 7/13/2026
MEDIUM6.1RubyGemsnpmPyPI
GHSA-vfj8-5pj7-2f9g· CVE-2024-43795, PYSEC-2024-100OpenC3 Cross-site Scripting in Login functionality (`GHSL-2024-128`)
Modified: 10/31/2024