60224 matches found
CVE-2026-4786 vulnerabilities
Vulnerabilities for packages: python...
GHSA-PG25-7CX5-CVCM vulnerabilities
Vulnerabilities for packages: python...
GHSA-CCCX-M78H-M3XW vulnerabilities
Vulnerabilities for packages: python...
CVE-2026-1502 vulnerabilities
Vulnerabilities for packages: python...
GHSA-HJXQ-7W9Q-2JW6 vulnerabilities
Vulnerabilities for packages: python...
CVE-2026-6100 vulnerabilities
Vulnerabilities for packages: python...
python: Python base64: Incomplete data decoding due to premature stop at padding
A flaw was found in the Python base64 module. When decoding base64 data using functions like base64.b64decode, the decoding process prematurely stops upon encountering the first padding character. This can result in incomplete data being processed, where any information following the initial...
python: Python pkgutil.get_data(): Path Traversal via improper resource argument validation
A flaw was found in Python's pkgutil.getdata function, which is used to retrieve data from packages. This function did not properly validate the resource argument, allowing a local attacker to perform path traversal attacks. Path traversal enables an attacker to access files and directories store...
Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.12: python3.12-3.12.13-3.1.hum1 aarch64, x8664 python3.12-debug-3.12.13-3.1.hum1 aarch64, x8664 python3.12-devel-3.12.13-3.1.hum1 aarch64, x8664 python3.12-idle-3.12.13-3.1.hum1 aarch64,...
python: cpython: Python: Arbitrary code execution via command injection in webbrowser.open() API
A flaw was found in the Python webbrowser.open API. If a specially crafted URL containing "%action" is processed, an attacker could bypass a previous mitigation for CVE-2026-4519. This bypass allows for command injection into the underlying shell, potentially leading to arbitrary code execution...
python: Python: HTTP header injection via CR/LF in proxy tunnel headers
A flaw was found in Python. This vulnerability allows for the injection of extra information into HTTP communication. Specifically, the system does not properly prevent special characters carriage return and line feed from being included in HTTP client proxy tunnel headers or host fields...
python: Python: Arbitrary code execution or information disclosure via use-after-free in decompression modules
A flaw was found in Python's decompression modules, including lzma.LZMADecompressor, bz2.BZ2Decompressor, and gzip.GzipFile. This vulnerability, a use-after-free, can occur if a program attempts to re-use a decompression object after a memory allocation error, especially when the system is...
Important: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update
An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: python3.13: python3.13-3.13.13-1.1.hum1 aarch64, x8664 python3.13-debug-3.13.13-1.1.hum1 aarch64, x8664 python3.13-devel-3.13.13-1.1.hum1 aarch64, x8664 python3.13-freethreading-3.13.13-1.1.hum1...
Web-Vulnerability-Tester
Web Vulnerability Tester Description Tests web applications...
Security Bulletin: Vulnerabilities in python affects IBM Netezza Appliance
Summary The python package is used by IBM Netezza Appliance . IBM Netezza Appliance has addressed the applicable CVE CVE-2025-12084, CVE-2025-13836 Vulnerability Details CVEID:CVE-2025-12084 DESCRIPTION: When building nested elements using xml.dom.minidom methods such as appendChild that have a...
MAL-2026-3015 Malicious code in lyroxcoder (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 0aa87cfde7d0b832cd24067a43e94d812a4f5ce64541e219fb6aa6b7388939ab Heavy obfuscate code for extracting further obfuscate binaries and executing them using file less techniques. Some versions contain the executable embedded,...
Malicious code in lyroxcoder (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: kam193 0aa87cfde7d0b832cd24067a43e94d812a4f5ce64541e219fb6aa6b7388939ab Heavy obfuscate code for extracting further obfuscate binaries and executing them using file less techniques. Some versions contain the executable embedded,...
RHSA-2026:9745 Red Hat Security Advisory: python3 security update
Bulletin has no description...