VDB

GCVE-110-OSM-2026-9075

GCVE-110-OSM-2026-9075
Advisory PublishedCVSS 5.4/10
Vulnetix · Advisory published July 24, 2026
Suspicious package detected. ENTRY mrmustard/__init__.py (module-import: 36) INDICATORS (IOCs) - ipv6: 1::, 0:: - urls: https://www.sphinx-doc.org/en/master/usage/configuration.html, https://arxiv.org/abs/quant-ph/9707010., https://arxiv.org/pdf/2102.05748.pdf, https://arxiv.org/abs/2305.17099:, https://arxiv.org/pdf/2209.06069. (+14 more) - domains: arxiv.org, www.scipost.org, quantum-journal.org, doi.org, qutip.org (+3 more) - emails: filippo@xanadu.ai

Weaknesses (CWE)

CWE-506Embedded Malicious Code

Risk Scores

CVSS 3.1
5.4/10
Medium · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Affected Products

VendorProductVersionsPlatforms
unknownmrmustardall (affected)

References

advisory
vendor

Browse GCVE Records

75,788 records in the GCVE database · Updated August 2, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›